Privacy Policy

Effective as of January 1, 2020
Last updated April, 2023

Introduction

The Savings Group, Inc. and its subsidiaries, including those operating under the brands AUTOPAY, RateGenius, and Tresl (“we,” “our,” or “us”) respect the privacy of your information. This Privacy Policy is designed to assist you in understanding how we collect, use, share and safeguard your information. This Privacy Policy applies to individuals who access our websites (collectively, “Sites”) and the services provided through our Sites (collectively, “Services”).

From time to time, we may change this Privacy Policy. If we do, we will post an amended version on this webpage. Please review this Privacy Policy periodically.

This Privacy Policy covers the following topics:

1. INFORMATION WE COLLECT ONLINE

2. HOW WE USE YOUR INFORMATION

3. HOW WE SHARE YOUR INFORMATION

4. COOKIES AND OTHER TRACKING TECHNOLOGIES

5. “DO NOT TRACK” SIGNALS

6. CHOICES ABOUT YOUR INFORMATION

7. SECURITY

8. THIRD PARTY LINKS

9. CHILDREN’S PRIVACY

10. NOTICE TO NEVADA RESIDENTS

11. NOTICE TO VIRGINIA RESIDENTS

12. NOTICE TO CALIFORNIA RESIDENTS

13. ACCESSIBILITY

14. HOW TO CONTACT US

1. INFORMATION WE COLLECT ONLINE

Through your use of the Sites and Services, we may collect Personally Identifiable Information from you. “Personally Identifiable Information” is individually identifiable information about an individual consumer that we collect online and that we maintain in an accessible form.

Information You Provide

We may collect the following Personally Identifiable Information that you voluntarily provide to us in using our Sites and Services:

Apply Now. When you apply to refinance your auto loan, you will provide us with Personally Identifiable Information such as your first and last name, telephone number, email address, and physical address. You also will provide us with information relating to your vehicle (such as its year, make, model, trim, and estimated number of miles), information relating to your current loan (such as the name of your current auto lender and current monthly auto payment), information relating to your current residence (such as the type of residence and your monthly payment), information regarding your employment and income, and your date of birth. You also may voluntarily agree to provide us with your Social Security number. If you respond to an offer in the mail to refinance your auto loan, you will provide your pre-qualification code and zip code.
Prequalification. When you explore your options with our “Get Prequalified” you will provide us with Personally Identifiable Information such as your first and last name and physical address. You also will provide us with other information such as your date of birth, yearly income, monthly vehicle payments, and vehicle year.
Careers. If you apply for a job through one of our Sites, you will provide your first and last name, email address, phone number, resume and cover letter.
Refinancing Chat. If you engage with RateGenius or AUTOPAY Chat powered by LiveChat or Podium, we and LiveChat or Podium may collect, record, and store your name, email address and any other Personally Identifiable Information you voluntarily provide. LiveChat’s privacy policy can be found at https://www.livechat.com/legal/privacy-policy/. Podium’s privacy policy can be found at https://www.podium.com/privacypolicy/.
Contact Us. If you contact us through the Sites, we may collect your name, email address, and telephone number along with any other Personally Identifiable Information you voluntarily provide.
Interact with our Sites or Services. When you send us any feedback, questions, comments, suggestions, ideas, or interact with us in any way, you may need to provide us with your log-in information, name and/or email address.

Information as You Navigate Our Sites

We automatically collect certain Personally Identifiable Information through your use of the Sites and Services, such as the following:

Usage Information. We collect information such as which of the pages on the Sites you access, the frequency of access, and what you click on while on the Sites.
Device Information. We collect information about the device you are using, such as hardware model, operating system, application version number, and browser.
Mobile Device Information. In addition to the Device Information listed above, when you access our Sites via a browser on your mobile device, we collect and aggregate information about whether you are accessing the Sites via a mobile device or tablet, device type, and carrier.
Location Information. We collect location information from Site visitors on a city-regional basis.

Third Party Information

In some cases, we may receive certain Personally Identifiable Information from you about a third party. If you submit any Personally Identifiable Information about another individual to us, you are responsible for making sure that you have the authority to do so and to allow us to use their Personally Identifiable Information in accordance with this Privacy Policy.

Information from Other Sources

When you apply for a loan, we may obtain Personally Identifiable Information about you from other sources, such as information about your credit profile or other information from Experian, TransUnion, and Equifax. We also may collect information about you from other sources to verify the information you provided in your loan application.

2. HOW WE USE YOUR INFORMATION

We use the Personally Identifiable Information we collect to provide the Services to you, to improve our Sites and Services, and to protect our legal rights. In addition, we may use the Personally Identifiable Information we collect to:

Find you loan options from our lender base;
Review your loan application;
Send you notifications of our latest news and updates if you voluntarily elect to receive them;
Communicate with you via telephone, mobile devices, email or postal mail about our products and services that we feel may be of interest to you;
Research and analyze other products and services offered by us or others that may save you money;
Deliver relevant advertising and analyze the effectiveness of our advertising and other campaigns;
Communicate with you about our Sites or Services or to inform you of any changes to our Sites or Services;
Provide support;
Maintain and improve our Sites and Services;
Protection the security and integrity of our Sites and Services;
Investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or violations of our Terms of Use, and to otherwise fulfill our legal obligations;
Monitor compliance with and enforce this Privacy Policy and any other applicable agreements and policies;
Defend our legal rights and the rights of others;
Fulfill any other purposes for which you provide it, or any other purpose we deem necessary or appropriate;
Efficiently maintain our business; and
Comply with applicable law.

We may share the information that we collect about you in the following ways:

Us and our Affiliates. We may share your Personally Identifiable Information with subsidiaries and affiliates. These subsidiaries and affiliates adhere to this Privacy Policy.
Lenders. Once you have submitted an application, we will begin the process of finding you a loan, if qualified, from our lender base of over 200 financial institutions. Your Personally Identifiable Information is not sent to each lender in our network for review. Instead, your credit profile and needs are matched to the borrower profile established by our lenders and sent to those lenders first. By submitting an application, you consent to the use of your credit report for the purpose of obtaining a credit offer from one of our participating lenders.
To Comply with the Law. We may disclose Personally Identifiable Information we collect if we determine in our sole discretion that such disclosure is necessary to comply with the law, including disclosure to law enforcement agencies and other government agencies and disclosure responsive to subpoenas. We also may disclose information we collect if we deem it necessary to protect the rights, property, or safety of us, our customers or others; in connection with any legal proceedings or prospective legal proceedings; and to any person who we reasonably believe may apply to a court or other competent authority for disclosure of that Personally Identifiable Information where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that Personally Identifiable Information.
To Third Parties. We may disclose your Personally Identifiable Information to third party vendors that provide us services to process your information for purposes of reviewing your loan application. We may disclose the information we collect to companies that perform marketing services on our behalf, with which we have joint marketing agreements, or with which we have other agreements that, among other things, require the safeguarding of your information. Also, we may disclose your Personally Identifiable Information to third parties that are interested in contacting you or providing offers to you that may be related to our products and services or about products or services you may find of interest, and we may be compensated for such disclosure. You can, at any time, opt-out of our ability to share information with unaffiliated third parties that do not provide services to us for processing your loan application by contacting RateGenius Customer Service at 866-728-3436, AUTOPAY Customer Service at 844-276-3272, or Tresl’s Customer Service at 866-504-3748.
Advertising. We may disclose your Personally Identifiable Information to service providers to prepare, deploy, and analyze advertising content.
Business Transactions. We may disclose your Personally Identifiable Information to any other person or entity as part of any business or asset sale, equity transaction, merger, acquisition, bankruptcy, liquidation, or similar proceeding, or in preparation for any of these events.
Consent. We may disclose your Personally Identifiable Information to any other person or entity where you consent to the disclosure.
Other Purposes. We may disclose your Personally Identifiable Information for any other purpose disclosed by us when you provide the information or for any other purpose we deem necessary, including to protect the health or safety of others.

4. COOKIES AND OTHER TRACKING TECHNOLOGIES

How We Use Cookies

Like many other companies, we use cookies and other tracking technologies (such as pixels and web beacons) (collectively, “Cookies”). “Cookies” are small files of information that are stored by your web browser software on your computer hard drive, mobile or other devices (e.g., smartphones or tablets).

We use Cookies to:

Estimate audience size and usage patterns;
Understand and save your preferences for future visits, allowing us to customize the Sites and Services to your individual needs;
Advertise new content and services that relate to your interests;
Keep track of advertisements and search engine results;
Compile aggregate data about site traffic and site interactions to resolve issues and offer better site experiences and tools in the future; and
Recognize when you return to the Sites and identify the originating source from which you came to the Sites.

We set some Cookies ourselves and others are set by other entities. We use Cookies set by other entities to provide us with useful information to help us improve our Site and Services, to conduct advertising, and to analyze the effectiveness of advertising. For example, we use Cookies from Google, Facebook and other similar companies.

California law may consider the use of advertising Cookies to be “sales” of personal information. Please see “Notice to California Residents” below for more information. By using the Site, you affirmatively authorize us to use Cookies, including advertising Cookies.

How You Can Opt-Out of Cookies

Browser Settings
Cookies can be blocked by changing your Internet browser settings to refuse all or some Cookies. If you choose to block all Cookies (including essential Cookies) you may not be able to access all or parts of the Sites.

You can find out more about Cookies and how to manage Cookies by visiting www.AboutCookies.org.

Platform Controls
You can opt out of Cookies set by specific entities by following the instructions found at these links:

Google: https://adssettings.google.com
Facebook: https://www.facebook.com/about/ads
Microsoft: https://account.microsoft.com/privacy/ad-settings/

Advertising Industry Resources
You can understand which entities have currently enabled Cookies for your browser or mobile device and how to opt-out of some of those Cookies by accessing the Network Advertising Initiative’s website or the Digital Advertising Alliance’s website. For more information on mobile specific opt-out choices, visit the Network Advertising Initiative’s Mobile Choices website.

GOOGLE ANALYTICS

We use Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses Cookies or other tracking technologies to help us analyze how users interact with the Sites and Services, compile reports on their activity, and provide other services related to their activity and usage. The technologies used by Google may collect information such as your IP address, time of visit, whether you are a returning visitor, and any referring website. The technologies used by Google Analytics do not gather information that personally identifies you. The information generated by Google Analytics will be transmitted to and stored by Google and will be subject to Google’s privacy policies. To learn more about Google’s partner services and to learn how to opt-out of tracking of analytics by Google, click here.

OneSignal

We use OneSignal to send you push notifications if you voluntarily agree to receive them. OneSignal collects the following types of information from end users: mobile advertising identifiers, email addresses, IP addresses, device push tokens, precise location (e.g., GPS-level) data, network information,

language, time zone, product preferences, and privacy preferences. The information collected by OneSignal is subject to OneSignal’s privacy policy, which is available here. If you no longer wish to receive these push notifications, you can block them using the Notifications settings in your browser.

5. “DO NOT TRACK” SIGNALS

Some internet browsers incorporate a “Do Not Track” feature that signals to websites you visit that you do not want to have your online activity tracked. Given that there is not a uniform way that browsers communicate the “Do Not Track” signal, the Sites do not currently interpret, respond to or alter their practices when they receive “Do Not Track” signals.

6. CHOICES ABOUT YOUR INFORMATION

Review and Request Changes to Your Information

You may use your account to access, correct, or view certain Personally Identifiable Information we have collected and which is associated with your account. To review or request changes to any of your Personally Identifiable Information, please contact us at privacy@thesavingsgroup.com.

Marketing Communications

To unsubscribe from our marketing emails, please click the unsubscribe link included in the footer of our emails. You also may submit a request to us at privacy@thesavingsgroup.com.

7. SECURITY

We maintain commercially reasonable security measures to protect the Personally Identifiable Information we collect and store from loss, misuse, destruction, or unauthorized access. However, no security measure or modality of data transmission over the Internet is 100% secure. Although we strive to use commercially acceptable means to protect your Personally Identifiable Information, we cannot guarantee absolute security.

8. THIRD PARTY LINKS

The Sites may contain links that will let you leave the Sites and access another website. Linked websites are not under our control. Except as stated below, this Privacy Policy applies solely to Personally Identifiable Information that is acquired by us on the Sites. We accept no responsibility or liability for these other websites.

9. CHILDREN’S PRIVACY

The Sites are not intended for children under 13 years of age. We do not knowingly collect, use, or disclose personal information from children under 13.

10. NOTICE TO NEVADA RESIDENTS

Nevada law allows Nevada residents to opt-out of the sale of certain types of personal information. Subject to several exceptions, Nevada law defines “sale” to mean the exchange of certain types of personal information for monetary consideration to another person. We do not currently sell personal information as defined in the Nevada law. However, if you are a Nevada resident, you still may submit a verified request to opt-out of sales and we will record your instructions and incorporate them in the future if our policy changes. Opt-out requests may be sent to privacy@thesavingsgroup.com or toll-free at (855) 350-7900.

11. NOTICE TO VIRGINIA RESIDENTS

The Virginia Consumer Data Protection Act (“VCDPA”) provides Virginia residents with the right to receive certain disclosures regarding the personal data we process about them. For purposes of this section, personal data means any information that is linked or reasonably linkable to an identified or identifiable natural person. Personal data does not include de-identified or publicly available information as the VCDPA defines those terms.

For a discussion of the categories of personal data we process, the purposes for our processing, the categories of personal data that we share with third parties, and the categories of third parties with whom we share personal data, please see Sections 1 through 3, above, and Section 12, below.

If you are a Virginia resident, the VCDPA grants you the right to: (1) confirm whether or not we are processing your personal data and to access such personal data; (2) correct inaccuracies in your personal data, taking into account the nature of the personal data and the purposes of the processing of your personal data; (3) delete personal data you have provided or we have obtained about you; (4) obtain a copy of your personal data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another controller without hindrance, where the processing is carried out by automated means; and (5) opt out of the processing of your personal data for purposes of (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

We sell personal data to third parties as defined in the VCDPA and process personal data for targeted advertising.

To exercise your rights, please email us at privacy@thesavingsgroup.com with your name, the fact that you are a Virginia resident, and specifying the right(s) you wish to invoke. If we refuse to take action regarding your request, you may appeal our decision by emailing us at privacy@thesavingsgroup.com.

12. NOTICE TO CALIFORNIA RESIDENTS

The California Consumer Privacy Act (CCPA) requires that we provide California residents with a privacy policy that contains a comprehensive description of our online and offline practices regarding the collection, use, disclosure, and sale of personal information and of the rights of California residents regarding their personal information. This section of the Privacy Policy is intended solely for, and is applicable only as to, California residents. If you are not a California resident, this does not apply to you and you should not rely on it.

The CCPA defines “personal information” to mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. Personal information does not include information publicly available, deidentified or aggregated information. For purposes of this “NOTICE TO CALIFORNIA RESIDENTS” section we will refer to this information as “Personal Information.”

Right to Know About Personal Information Collected, Disclosed, or Sold

If you are a California resident, you have the right to request that we disclose what Personal Information we have collected about you in the 12-month period preceding your request. This right includes the right to request any or all of the following:

(1) Specific pieces of Personal Information that we have collected about you;
(2) Categories of Personal Information that we have collected about you;
(3) Categories of sources from which the Personal Information was collected;
(4) Categories of Personal Information that we sold (if applicable) or disclosed for a business purpose about you;
(5) Categories of third parties to whom the Personal Information was sold (if applicable) or disclosed for a business purp
(6) The business or commercial purpose for collecting or, if applicable, selling Personal Information.

The CCPA defines “sell” to mean selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a California resident’s Personal Information to another business or a third party for monetary or other valuable consideration.

Collection of Personal Information
We currently collect and, in the 12 months prior to the Effective Date of this Privacy Policy, have collected the following categories of Personal Information about California residents directly from them and from advertising networks, internet service providers, operating systems and platforms, social networks, and lead providers:

Name
Alias
Postal address
Unique personal identifiers (device identifier; cookies, beacons, pixel tags, mobile ad identifiers, or other similar technology; customer number, unique pseudonym or user alias; telephone numbers, or other forms of persistent or probabilistic identifiers that can be used to identify a particular consumer or device)
Online identifier
Internet Protocol address
Email address
Social Security number
Telephone number
Signature
Bank account number
Credit and debit card number
Insurance policy number or subscriber identification number
Internet or other electronic network activity information (browsing history; search history; and information regarding consumer’s interaction with website, application or advertisement)
Geolocation data
Education information
Professional or employment-related information (including employment history)

We collected the above Personal Information for the following business or commercial purposes:

Auditing related to a current interaction with the consumer and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity
Debugging to identify and repair errors that impair existing intended functionality
Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction
Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider
Undertaking internal research for technological development and demonstration.
Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business
Advancing a person’s commercial or economic interests, such as by inducing another person to buy, rent, lease, join, subscribe to, provide, or exchange products, goods, property, information, or services, or enabling or effecting, directly or indirectly, a commercial transaction

Disclosure or Sale of Personal Information
The following table identifies the categories of Personal Information that we disclosed for a business purpose to service providers or sold to third parties in the 12 months preceding the Last Updated date of this Privacy Policy and, for each category, the category of service providers or third parties to whom the Personal Information was sold or disclosed:

Category of Personal Information	Category of Service Providers	Category of Third Parties
Identifiers (name, email address, telephone number, and postal address)	Stip Collection, Employment Verification, Cloud Hosting (IaaS)	Marketing automation, Push notifications, Chat providers, Credit Bureaus, SMS Providers, Lenders, Cloud Hosting Services
Cookies, beacons, pixel tags, mobile ad identifiers, or other similar technology	Cloud Hosting providers	Data analytics providers Advertising networks *Please see “Cookies and Other Tracking Technologies” section above for more information as to our use of cookies
Internet Protocol address	Cloud Hosting providers	Data analytics providers, Advertising networks
Social security number	Cloud Hosting providers	Credit Bureaus, Lenders
Other financial information/banking information	Cloud Hosting providers, Credit Card Processing	Lenders Credit Card Pmt Services

In addition, when you apply for a loan using our Services, you must agree to our Terms of Use, in which you will consent to the disclosure of your Personal Information to other entities, such as financial institutions, as part of your application process. In so doing, you are directing us to intentionally disclose your personal information and using us to intentionally interact with third parties. If you do not consent to these transfers, do not use our Services.

We do not knowingly collect or sell the Personal Information of minors under 16 years of age.

Right to Request Deletion of Personal Information

If you are a California resident, you have the right to request that we delete the Personal Information about you that we have collected or maintain. However, per the CCPA, we are not required to comply with a request to delete if it is necessary for us to maintain the Personal Information in order to, for example, complete a transaction, detect security incidents, comply with a legal obligation, or otherwise use the Personal Information, internally, in a lawful manner that is compatible with the context in which you provided the information.

How to Submit a Request to Know or Delete

You may submit a request to know or delete by completing our online request form available here, emailing ccpa@thesavingsgroup.com or by calling us at (855) 350-7900. If you submit a request to delete online, you may be asked to confirm separately that you want your Personal Information deleted.

Our Process for Verifying a Request to Know or Delete

We will comply with your request upon verification of your identity and, to the extent applicable, the identity of the California resident on whose behalf you are making such request.

For requests to access categories of Personal Information and for requests to delete Personal Information that is not sensitive and does not pose a risk of harm by unauthorized deletion, we will verify your identity to a “reasonable degree of certainty” by verifying at least two data points that you previously provided to us and which we have determined to be reliable for the purpose of verifying identities.

For requests to access specific pieces of Personal Information or for requests to delete Personal Information that is sensitive and poses a risk of harm by unauthorized deletion, we will verify your identity to a “reasonably high degree of certainty” by verifying at least three pieces of Personal Information previously provided to us and which we have determined to be reliable for the purpose of verifying identities. In addition, you will be required to submit a signed declaration under penalty of perjury stating that you are the individual whose Personal Information is being requested.

Right to Opt-Out of Sale of Personal Information

If you are a California resident, you have the right to direct us to stop selling your Personal Information. To opt-out of our use of third-party advertising Cookies, please see the section “How You Can Opt-Out of Cookies” above. In addition, you may submit a request to opt-out of sales through our interactive webform available by clicking on this link: “Do Not Sell My Personal Information.” You also may submit a request by calling us toll-free at 855.350.7900 or emailing us at ccpa@thesavingsgroup.com.

Right to Non-Discrimination for the Exercise of a California Resident’s Privacy Rights

We will not discriminate against California residents if they exercise any of the rights provided in the CCPA as described in this section “Notice to California Residents.” As such, we will not deny goods or services to that California

resident; charge different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; provide a different level or quality of goods or services to the California resident; or suggest that the California resident will receive a different price or rate for goods or services or a different level or quality of goods or services. However, we are permitted to charge a California resident a different price or rate, or provide a different level or quality of goods or services, if that difference is reasonably related to the value provided to us by the individual’s data.

Authorized Agents

If you are submitting a request on behalf of a California resident, please submit the request through one of the designated methods discussed above. After submitting the request, we will require additional information to verify your authority to act on behalf of the California resident.

Shine the Light Law

If you are a California resident, California Civil Code § 1798.83 permits you to request information regarding the disclosure of your personal information by us to third parties for the third-parties’ direct marketing purposes (as those terms are defined in that statute). To make such a request, please send an email to ccpa@thesavingsgroup.com or write to us at 9300 United Drive, Ste 180, Austin, Texas 78758.

13. ACCESSIBILITY

We are committed to ensuring this Privacy Policy is accessible to individuals with disabilities. If you wish to access this Privacy Policy in an alternative format, please contact us as described below.

14. HOW TO CONTACT US

To contact us for questions or concerns about our privacy policies or practices please call RateGenius at 866-728-3436; AUTOPAY at 844-276-3272; Tresl at 866-504-3272 or email us at privacy@thesavingsgroup.com.