Privacy Notice

This notice explains what personal information eBurst Payments (“we,” a trade name of eBurst Services Inc) collects, how we use and share it, and the choices you have. It is provided under the Gramm-Leach-Bliley Act and applies to applicants, customers and website visitors.

Information we collect

• Information you give us: name, date of birth, contact details, address, employment and income, business details, and the purchase you’re financing.
• Bank information through Plaid (with your permission): account balances, up to 90 days of transactions, account owner name, institution name and the last four digits of account numbers.
• Plan information: payment history, balances and communications with us.
• Device and usage information: IP address, browser type and pages visited, used for security and fraud prevention.
• Phone financing: the financed device’s model and IMEI, and device payment protection status.

How we use information

• To verify your identity and evaluate your application.
• To service your plan, process payments and send required notices.
• To prevent fraud and protect our systems.
• To comply with law and respond to legal requests.

How we share information

Reason we can share your information	Do we share?	Can you limit it?
For our everyday business purposes — processing your application and payments, maintaining your plan, responding to court orders and legal investigations	Yes	No
With service providers who help us operate (for example Plaid for bank verification, NMI for payment processing, email and SMS providers), under confidentiality obligations	Yes	No
With the partner shop or provider you are financing a purchase from — limited to application status and funding (never your bank data)	Yes	No
For our marketing purposes — to offer our products and services to you	Yes	Yes — contact us
For joint marketing with other financial companies	No	We don’t share
With non-affiliates to market to you	No	We don’t share

We do not sell your personal information.

How we protect information

We use encryption in transit and at rest for sensitive data such as bank connection tokens, role-based staff access with activity logging, and secure facilities and vendors. No system is perfectly secure, but we work to protect your information with safeguards appropriate to its sensitivity.

Every account is protected by two-step verification: signing in requires your password and a passkey (Face ID, fingerprint or device PIN) or a one-time code from an authenticator app.

Retention

We end our access to your bank through Plaid once it’s no longer needed for your application, and we keep application and plan records only as long as the law requires (at least 25 months after a credit decision under Regulation B, 12 CFR 1002.12(b), and longer while a plan is open), then securely delete or de-identify them. Details are in our Data Retention & Deletion Policy.

Your choices

To limit marketing or update your information, sign in to your account or contact us. You can disconnect a bank anytime under Profile & security → Connected banks, or at my.plaid.com. You can close your account and request deletion of your data under Profile & security, or by contacting us.