Privacy Policy

01

Scope and who we are

LeasePoint provides equipment-finance services and technology for businesses, equipment sellers, referral partners, and related participants. This Policy applies to personal information that LeasePoint controls through the Services. It does not apply to a third party’s independent privacy practices, even when we link to or integrate with that third party.

In this Policy, “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household. The term does not include information that applicable law treats as public, deidentified, aggregated, or otherwise outside the definition of personal information.

02

Information we collect

The information we collect depends on the relationship, product, and choices involved. We may collect the following categories:

Please provide information that is accurate and current. If you provide personal information about another person, you represent that you are authorized to do so and to permit us to use it as described in the applicable notices.

03

Sources of information

We may collect personal information from:

• You, including through forms, applications, portals, documents, emails, calls, and in-person interactions.
• Your business or representatives, such as owners, employees, guarantors, authorized users, advisors, and agents.
• Equipment sellers and referral partners involved in a transaction or relationship you ask us to support.
• Financial and verification sources, which may include credit reporting agencies, financial institutions, identity-verification providers, fraud-prevention services, and public records, as permitted by law.
• Plaid, if you choose to connect a financial account. Plaid facilitates the connection and provides tokenized account information; LeasePoint does not receive or store your bank login credentials.
• Service providers and business partners that help deliver the Services, maintain records, communicate with you, or support a transaction.
• Automatically through the Services, including through server logs, cookies, tags, pixels, and similar technologies described in our Cookie Notice.

04

How we use information

We may use personal information to:

• provide, administer, support, personalize, and improve the Services;
• respond to inquiries, prepare quotes, evaluate requests, verify information, facilitate financing, and service relationships;
• verify financial-account ownership, reconcile transactions, and process account updates or provider webhooks;
• communicate about applications, transactions, accounts, events, products, service updates, and support matters;
• maintain the security and integrity of the Services, prevent fraud, authenticate users, investigate misuse, and protect people, property, and rights;
• conduct internal operations, quality assurance, reporting, research, analytics, and product development;
• send marketing or promotional communications where permitted and consistent with your choices;
• comply with law, legal process, audits, regulatory obligations, recordkeeping duties, and enforceable requests; and
• establish, exercise, or defend legal claims and enforce our agreements and policies.

We use sensitive personal information only for purposes reasonably necessary to provide requested Services, process or service a transaction, verify identity, prevent fraud, maintain security, and comply with law, unless we provide additional notice and obtain any consent that applicable law requires.

05

How we disclose information

We may disclose personal information for the purposes described above to the following categories of recipients:

Service providers and contractors

Hosting, cloud storage, cybersecurity, communications, payment, document, analytics, customer-support, identity, credit, fraud, and professional-service providers that process information for us under appropriate obligations.

Transaction participants

Equipment sellers, referral sources, financial institutions, funding sources, servicers, insurers, advisors, and other parties involved in evaluating, documenting, funding, or servicing a requested transaction.

Affiliates and business partners

Affiliates or partners where the relationship or a service you request makes the disclosure appropriate. We do not authorize independent use that is inconsistent with the applicable notice or your choices.

Legal and safety recipients

Courts, regulators, law enforcement, counterparties, and others when we reasonably believe disclosure is required or permitted by law or necessary to protect rights, safety, security, and integrity.

Corporate transaction participants

Advisors and counterparties in connection with a proposed or completed merger, financing, acquisition, reorganization, bankruptcy, or sale of some or all of our business or assets.

At your direction

Other people or entities when you direct us to disclose information, ask us to complete an integration, or otherwise provide consent.

06

Cookies and online activity

We use local storage, server logs, and service scripts to deliver and secure the website, remember privacy choices, and support features you request. The Contact page loads a HubSpot inquiry form as a functional service. No tag manager, analytics tag, or advertising tag is currently active on the public website. Optional analytics and advertising storage remain denied by default.

You can review the technologies currently in use in our Cookie Notice and manage optional storage in Privacy Choices. Where applicable, we also process recognized browser-based opt-out signals, such as Global Privacy Control, as an opt-out of sale, sharing, and targeted advertising for the browser or device that sends the signal.

Browser “Do Not Track” settings are not governed by a single, generally accepted technical standard. We therefore do not respond to DNT signals as a separate request, but we do respond to legally recognized opt-out preference signals as described above.

07

Retention and security

How long we keep information

We retain personal information for as long as reasonably necessary for the purpose for which it was collected, including to provide and service a product, maintain business and transaction records, resolve disputes, prevent fraud, enforce agreements, and meet legal, accounting, audit, and regulatory obligations. The period varies by the type of information, sensitivity, relationship, legal requirements, and operational need.

When information is no longer needed, we take reasonable steps to delete, destroy, anonymize, or isolate it, subject to backup cycles, legal holds, and other lawful exceptions.

How we protect information

We use administrative, technical, and physical safeguards designed to protect personal information in light of its nature and the risks involved. No system, network, transmission, or storage method can be guaranteed to be completely secure. You are responsible for using appropriate safeguards when sending information and for protecting account credentials within your control.

08

Your privacy rights

Depending on where you live and the law that applies, you may have some or all of the following rights:

• confirm whether we process your personal information;
• access or obtain a copy of personal information;
• correct inaccuracies;
• delete personal information, subject to lawful exceptions;
• obtain portable data in a usable format where technically feasible;
• opt out of sale, sharing, targeted advertising, or certain profiling;
• limit certain uses or disclosures of sensitive personal information;
• withdraw consent where processing relies on consent; and
• appeal a decision we make about a privacy request, where applicable.

Submitting a request

Visit Privacy Choices or email help@leasepoint.com with “Privacy Rights Request” in the subject line. Please identify the right you want to exercise and the state in which you reside. You may also call (855) 553-2735.

We may need to verify your identity and authority before completing a request. We will use information submitted for verification only to evaluate and respond to the request, protect against fraud, and meet legal obligations. If an authorized agent submits a request, we may ask for proof of authority and, where permitted, direct confirmation from the individual.

We will respond within the period required by applicable law and will explain any denial or limitation. We will not unlawfully discriminate against you for exercising a privacy right. Some information may be exempt from a request, including information governed by certain financial privacy laws or retained to meet legal obligations.

Marketing communications

You can opt out of promotional email by using the unsubscribe link in the message. You can opt out of promotional text messages by replying STOP. We may continue to send non-promotional communications about transactions, accounts, safety, support, or changes to terms and policies.

09

State-specific notices

California

California residents may have rights to know, access, correct, delete, and obtain personal information; opt out of sale or sharing; limit certain uses and disclosures of sensitive personal information; and receive equal service and pricing when exercising a right. The categories described in “Information we collect” correspond generally to identifiers; customer-record information; protected characteristics where provided; commercial information; internet or network activity; audio, visual, or similar information; professional information; inferences; and sensitive personal information.

We collect these categories from the sources identified above, use them for the business and commercial purposes described above, and may disclose them to the recipient categories identified above. We do not offer a financial incentive for the collection, sale, or deletion of personal information. California residents may also request information under California’s “Shine the Light” law about certain disclosures for direct-marketing purposes.

Use our Do Not Sell or Share / Limit Sensitive Information pathway to communicate these choices. A recognized opt-out preference signal sent by your browser will be treated as a request for that browser or device where required.

Colorado, Connecticut, Texas, Virginia, and other U.S. states

Residents of states with comprehensive privacy laws may have rights to access, correct, delete, and obtain a copy of personal information, and to opt out of sale, targeted advertising, or qualifying profiling. Some states also provide a right to appeal a decision. We process recognized universal opt-out mechanisms as required by applicable law.

These rights are subject to definitions, thresholds, exemptions, and exceptions that vary by jurisdiction. In many states, information processed solely in a commercial, employment, or business-to-business context is outside the consumer-rights provisions.

10

Children and international users

Children

The Services are intended for business users and adults. We do not knowingly collect personal information from children under 13, and we do not knowingly sell or share the personal information of consumers under 16. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

International users

LeasePoint is based in the United States, and the Services are directed primarily to U.S. users and transactions. If you access the Services from another country, your information may be transferred to and processed in the United States, where privacy laws may differ from those in your location.

11

Changes to this Policy

We may update this Policy to reflect changes in the Services, technology, law, or our practices. We will post the updated version here and revise the “Last updated” date. If a change materially affects how we use personal information, we will provide additional notice or obtain consent where required.

12

Contact us

Questions about this Policy or our privacy practices may be directed to: