Privacy Policy

Last updated: August 14, 2026

This Privacy Policy describes our data and privacy practices for the information that is collected and processed by Trovy Technologies, Inc. and/or our subsidiaries and affiliates (“Trovy”) through the www.trovy.com website and the content contained therein, and any other website, feature, or service we offer or post that provides this policy (the “Site”). “We,” “our” means Trovy and its subsidiaries and affiliates. “You,” “your,” “visitor,” or “user” means the individual accessing this Site and/or using our services.

By continuing to use the Site, you agree to this Privacy Policy and the collection, use, disclosure, and storage of your personal information as described by this Privacy Policy.

Please also review our Terms of Use, available at https://trovy.com/terms-of-use, which govern your use of the Site.

If you apply for or obtain a financial product or service from Trovy, please review our Consumer Privacy Notice to learn how we collect, use, protect and share your personal information covered by the Gramm-Leach-Bliley Act (“GLBA”) and the privacy options available to you. Nonpublic personal information we process in connection with our financial products and services, such as information collected in connection with credit applications (including pre-qualification requests), account information and statements, and transaction and payment information, is governed by our Consumer Privacy Notice rather than this Privacy Policy. Personal information collected in connection with the Trovy Card may also be governed by the Consumer Privacy Notice of Cross River Bank, the issuer of the Trovy Card, which is available at https://www.crossriver.com/legal/privacy-notice. This Privacy Policy governs personal information we collect in connection with your use of the Site outside of your lending relationship with us, such as through cookies, tracking technologies, and advertising platforms, as described in more detail below.

1. Personal, Sensitive, and Non-Personal Information We Collect

When you use the Site, we may collect information about users of the Site directly, automatically, when you visit the site, and sometimes from third parties. Some of this data may be considered “personal information” or “personal data,” and some of which may be considered “sensitive” under applicable laws.

We will also treat other information, including IP addresses and cookie identifiers, as “personal information” where required by applicable law and we will treat certain personal information as “sensitive information” as required by applicable law.

Note that we may de-identify or pseudonymize personal information so that it is non-personal, such as aggregating (such as combining it with information about other individuals) and/or converting it to a code or otherwise removing characteristics that make the information personally identifiable to you. We maintain and use de-identified information without attempting to re-identify it, except where permitted by applicable law, such as to determine whether our de-identification processes satisfy legal requirements.

We will treat de-identified or pseudonymized information as non-personal to the fullest extent allowed by applicable law. If we combine non-personal information with personal information, then we will treat the combined information as personal information under this Privacy Policy.

Personal Information You Provide to Us Directly

Contact and Service-Related Information. We collect certain personal information from you directly, such as your name, address, Social Security number, telephone number, email address, asset information, income information, or any other information that you submit on applications or other forms made available through the Site.

Your Posts. We may offer the ability to submit or post messages, reviews, social media posts, or other content (“User Content”) through interactive or other features, such as reviews, discussion forums, or promotional activities (“Submission Features”). Your submission of User Content is subject to the Terms of Use (https://trovy.com/terms-of-use) for the Site, which give us right to use your User Content, online and offline, in connection with our promotional activities. Personal information, such as your name, username (from the Site or your social media account), or where you reside, may be publicly displayed with your User Content. Others may access it, use it, and share it. We are not responsible for how others use User Content you submit or post. In addition, in connection with certain activities, your personal information may be disclosed publicly. If you choose to post messages on our Site, we will collect such information about you as you may choose to disclose pursuant to your activities on the Site.

Chats & Other Communications & Correspondence. If you send us e-mails, letters or other personal correspondence or contact us through the Site’s chat functionality, or if other users or third parties send us correspondence about your activities or postings on the Site, we may collect such information into a file specific to you or share it with third parties who provide services to us, such as web functionality. Communications with our customer service agents may be recorded or monitored and used and retained to assist you and provide customer service, for quality assurance and to be able to better serve you, and to improve our products and services. If you do not consent, please do not continue with chat assistance or send other communications or correspondence to us.

Payment & Financial Information. If you obtain a financial product or service from us, we collect your payment information and some additional financial information, such as your employment status, income and bank account number.

You acknowledge that if you choose to post any information about your viewing history on a third-party platform, or by liking or sharing any content, the Video Privacy Protection Act of 1998 (18 U.S.C. § 2710) (or any similar state law) does not apply. However, to the extent it does apply in any manner, you are providing your informed, written consent to the disclosure of that information pursuant to the Video Privacy Protection Act.

Information We Collect from Third Parties

We may also collect personal information about you from third-party sources, such as from data aggregators, lead generation companies, joint marketing partners, third party websites, service providers, and other business partners, which we may combine with information that you provided to us or we previously collected. We may also supplement the data we collect with outside records from third parties, such as public data bases, publicly available social media pages, and third parties who enhance the data we have about you, in order to provide you with information or services you have requested, to tailor content, to offer you opportunities to purchase products or services that we believe may be of interest to you, and for other purposes. For example, we may receive information from a social media service about you if you use a social media account to log into the Site. The data collected and stored by third parties is subject solely to the third party’s privacy practices.

Information We Collect Automatically Through Your Access or Usage of Our Site

We and our third-party business partners (including any third-party service providers or third-party content, advertising, and analytics providers) may use a variety of technologies, including cookies and pixels, that automatically or passively collect certain information related to you, your device, your household, or your activities on the Site when you visit, use, or otherwise interact with the Site (“Device ID/Interaction Information”). Device ID/Interaction information may include, but is not limited to, information such as your IP address, your internet browser and operating system type, the date and time of your visit, and the website that referred you to us, mobile network information, device model, which URL you next go to, access times, search times, approximate geolocation data, mobile device identifier, or other unique identifier, search terms, pages viewed, time of your last interaction, time spent on the Site, and other details about how you’ve used the Site or our content and identifiers associated with cookies or other technologies that may uniquely identify your device or browser. We may combine this information with information obtained from other third-party sources along with quotes we provide to you to personalize the services we provide and the experience you have when interacting with us.

Cookies and Other Tracking Technologies

Our Site may use the following technologies to collect Device ID/Interaction Information:

• Cookies, which are small text files that websites store on user devices and that allow web servers to record users’ web browsing activities and remember their submissions, preferences, and login status as they navigate a site. Cookies used on our sites include both “session cookies” that are deleted when a session ends, “persistent cookies” that remain longer, “first-party” cookies that we place and “third-party” cookies that we place on our websites and app for social media, advertising, analytics companies, and other service providers.
• Logical storage technologies, like HTML5, that provide cookie-equivalent functionality but can store larger amounts of data on your device outside of your browser in connection with specific applications.
• Pixels or web beacons, also known as pixel tags or clear GIFs, enable collection, storage, and sometimes sharing of your information and/or your actions taken, such as whether you accessed or opened a webpage or email or that you viewed or clicked certain content. Certain pixels include computer-code snippets that enable the collection and sharing of information back to web servers of third parties.
• Session Replay Technologies. Trovy will capture your use of the Site and may record your use. We use third-party services, such as Hotjar and Amplitude, that employ software code to record users’ interactions with the Site in a manner that allows us to watch DVR-like replays of those user sessions. The use of such services allows us to visualize user interactions that helps us better understand our users’ experience to improve our services by identifying issues and friction points. To provide these services, Hotjar and Amplitude use first-party cookies and other technologies to collect personal data on our users’ behavior, and their devices on our behalf. This may include personal data like online identifiers (e.g. device’s IP address, user ID), identification data (e.g. name, email address, only if we explicitly collect it), technical data (e.g. device type and screen size, browser information), geographic location (country only), behavioral data (interactions with our website/app such as clicks, taps, scrolls), and any additional personal data that may explicitly submit through Hotjar or Amplitude. Hotjar and Amplitude may reuse this personal data to develop and improve tools and services for us and our users. For further details, please visit Hotjar’s Trust Portal and Privacy Policy and Amplitude’s Privacy Policy.
  • The replays include users’ clicks, mobile app touches, mouse movements, scrolls and keystrokes/key touches during those sessions. These replays help us diagnose usability problems, identify areas for improvement, and better understand how users interact with our Site.
• Embedded scripts and tools provided in Software Development Kits (“SDKs”), which collect data through mobile devices such as hardware model, operating system and version, identification numbers assigned to your mobile device (such as the ID for Advertising (IDFA) on Apple devices and the Advertising ID on Android devices), mobile network data, and app usage behavior.
• Data Collected Through Mobile Devices and SDKs: We use embedded scripts and tools provided in Software Development Kits (“SDKs”) to collect data through mobile devices such as hardware model, operating system and version, identification numbers assigned to your mobile device, such as the ID for Advertising (IDFA) on Apple devices, and the Advertising ID on Android devices, mobile network data, and website usage behavior. SDKs are software packages that contain a set of tools that can be used to build applications and implement new features in existing apps, including those that collect data from your device. Your mobile operating system may let you opt-out from having certain device identifiers used for interest-based advertising. You should refer to the instructions provided by your mobile device’s manufacturer; this information is typically available under the “settings” function of your mobile device. If your mobile device offers an uninstall process, you can stop us from collecting information through the app by uninstalling our app.

Cookie Opt-outs. You can disable cookies via most browsers. This may affect site functionality. To opt out of cookies on our site, click the “Your Privacy Options” link in the footer of our website, click “cookie choices” and select your preference.

2. How We Use Collected Information

We may use personal information and Device ID/Interaction Information for the following purposes:

• To provide the Site and services to you;
• To maintain your account and verify information you provide to us;
• To complete and fulfill your loan application;
• To respond to and fulfill your requests;
• For our marketing efforts, such as to send you marketing communications that we believe may be of interest to you, and to serve you targeted advertisements on third-party platforms (including Meta/Facebook and Instagram) based on your prior interactions with the Site, including actions you take during the application process (“retargeting”);
• For personalization, including to give each user a more consistent and personalized experience when interacting with us, and to tailor content and advertising we display to you or others, on the Site or elsewhere, including content in emails we may send to you, to tell you about new products, promotions, opportunities, or other general information about Trovy or other products and services that we believe will be of interest to you;
• For our business purposes, such as for our normal operating procedures and internal purposes, including analysis and to develop new products and services, marketing endeavors, to track marketing effectiveness, for marketing research, to detect and troubleshoot problems, monetize our Site, understand how you use the Site, including tracking traffic, usage, trends, and navigation patterns, conducting sales auditing;
• To improve the Site and for analytics purposes;
• For security and to protect the integrity of our Site, to investigate or detect fraud or illegal activities, and for archival and backup purposes in connection with the provision of the Site;
• For business transitions, such as in connection with a merger, acquisition, consolidation, bankruptcy, or other corporate transition, including during due diligence; or
• For any other purpose as disclosed at the time of collection or otherwise to which you consent.

The Fair Credit Reporting Act gives you the opportunity to limit the sharing of “non-experience information” among our affiliates. “Non-experience information” includes information that is used, expected to be used, or collected for the purpose of establishing your eligibility for consumer credit, insurance or deposit accounts, and is not related solely to your transactions or other experiences with us, including information:

• From your applications, such as your income or marital status
• From a credit report, such as your credit history
• From sources used to verify representations made by you, such as your open lines of credit or employment history
• Within our family of companies, we may share the customer information we collect with:
• Our subsidiary and affiliated businesses, providing financial and other services such as Trovy Lending Co.

3. How We Share Personal Information

We may share personal information with third parties as described in this Privacy Policy. We do not share your personal information with third parties for those third parties’ direct marketing purposes without providing you the ability to consent (opt-in or opt-out).

Please note that we are not responsible for the privacy practices of any third party. If you decide that you do not want to receive communications from a third party, or have questions about their privacy practices, you will need to contact that third party directly.

We may share the information (including personal information) we have collected about you with the following third parties and in the circumstances described below or elsewhere in this Privacy Policy, as disclosed at the time you provide information, or otherwise with your consent:

• Vendors who provide credit, identity verification or other necessary services;
• Our banking partners, including Cross River Bank, N.A. the issuer of the Trovy Card, in connection with the issuance, servicing, and administration of your account;
• Service providers involved in originating, closing, and servicing your loan, such as property valuation, remote online notarization, loan servicing, and payment processing providers;
• Third-party service providers performing services on our behalf, such as hosting the Site or assisting us in providing functionality on the Site (including chat functionality), providing data analysis and research, and sending out email updates about the Site or our products and services. Certain service providers may use AI/machine learning models to provide services to us on our behalf. We and our service providers may also use non-personal information (including de-identified or aggregated information) to develop, train, test, and improve machine learning or AI models and related products and services;
• Trovy Technologies, Inc.’s subsidiaries and affiliates, that provide quality services or products you may be interested in (unless you’ve opted out);
• Advertising technology partners such as Meta Platforms, Inc., to facilitate retargeting campaigns and measure advertising performance as further described in the “Third Party Advertisers and Analytics and Similar Third Parties” section below;
• For any purpose to which you expressly consent or when you direct us to share your information;
• To protect our rights or the rights or safety of others;
• As may be required by law or regulation, including to respond to a subpoena, regulation, binding order of a data protection agency, legal process, governmental request or other legal or regulatory process, or to law enforcement or other government officials as we believe necessary or appropriate in connection with an investigation of fraud or other activity that is illegal or may expose us to legal liability; and
• If you apply for a job with us, we or our service provider(s) may collect and share the information that you submit in connection with your application, and we may use a careers portal operated by a third party, in which case your registration and use of the portal will be subject to the third party’s privacy practices.

Trovy Family of Companies. Trovy includes several other companies, some of which operate as subsidiaries or affiliates. When Trovy collects data through any of our brands or companies, it will be accessible across the Trovy family of brands and companies. The data will be used for business, operational, and marketing purposes.

SMS/MMS/RCS Message Data. Please note, we do not share personal information we collect specific to our SMS/MMS/RCS text message programs (such as mobile number and record of consent) with third parties for their own direct marketing purposes without your specific consent.

We limit the information that we send service providers, and require that our service providers only use shared personal information to perform the services requested and have adequate security measures in place to protect any of your shared personal information.

For example, after you authorize us to verify your credit history, we send the minimal set of information needed (potentially including your social security number) to ensure we are requesting the correct record in an encrypted form to the relevant credit bureaus with the sole purpose of retrieving your credit report and associated credit history data. We would not send the same level of information to a service provider where it is not essential to perform their services.

Third Parties to Whom You Direct Us to Share Your Information. We may share your information when you direct us to do so or otherwise with your consent. For example, during the application process you may choose to connect an external financial account or use a third-party service to verify your identity, income, employment, or account information; when you do, we may share your information with that third party, or the third party may collect your information directly, in order to provide the service, and you will typically be presented with the third party’s terms or privacy policy at that time. The third party’s privacy policy governs its collection and use of your information.

For retrieving bank information and verifying income in connection with loan applications, we use Finicity Corporation “Finicity” and/or Plaid Inc. (“Plaid”) as third-party service providers. If you choose to connect an external financial account through Finicity or Plaid during the application process, Finicity or Plaid will access and transmit your account information on our behalf. By using Finicity’s service, you agree that Finicity’s Privacy Policy governs Finicity’s collection and use of your information. By using Plaid’s service, you agree that Plaid’s Privacy Policy governs Plaid’s collection and use of your information. You may revoke Plaid’s access to your accounts at any time through Plaid’s consumer portal at plaid.com/consumer-help-center/. Finicity’s Privacy Policy is available at https://www.finicity.com/privacy/ and Plaid’s Privacy Policy is available at plaid.com/legal/privacy-policy/.

When you initiate a balance transfer draw, we work with third-party service providers to retrieve real-time account and balance information from your existing creditors and facilitate payment to those creditors on your behalf. This retrieval occurs at your direction and with your express consent, which you will be asked to provide at the time of the transaction.

Changes in Control. In the event that we enter into a corporate transaction, such as a reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings), personal information that we have collected may be transferred in the course of that corporate transaction to the relevant third-party purchaser, joint venture partner, merged entity, assignee or similar party. We may also share your personal information in the due diligence process for such a transaction, and with individuals assisting in the transaction or in connection with a bankruptcy.

Non-Personal Data. Except as expressly prohibited by law, we may share non-personal data that we collect, such as certain Device ID/Interaction Information, aggregate user statistics, or otherwise de-identified or pseudonymized data (including email addresses), and/or our analyses derived from such data, with third parties in our discretion, including for targeted advertising purposes.

4. Third Party Advertisers and Analytics and Similar Third Parties

We may use third party business partners, such as analytics companies, ad agencies, network advertisers, and others who provide us with data about the Site, users, and our advertisements, and who deliver ads to you on our behalf on the Site and elsewhere online. We and our third party business partners collect certain data about your visits to and activity on the Site and other websites and services, and may use this data to target advertising to you and others and to assess the effectiveness of our advertising. We may also disclose (or permit third parties to collect) data, such as Device ID/Interaction Information, or aggregate, de-identified, or pseudonymized information, with these third parties for similar purposes.

These third parties may set and access their own tracking technologies on your device (including cookies, pixel tags or other technology) and may otherwise collect or have access to your personal information over time, including about your visits to the Site as well as other websites and online services. Companies that we share data with, including ad agencies and networks, may use the data, often in combination with their existing data, in order to present more relevant advertisements that may be of interest to you, and to help us and third parties to do the same.

• DAA Opt-Out. Some of the companies we use may be members of the Digital Advertising Alliance (“DAA”). You may visit the DAA’s website (https://optout.aboutads.info/), which provides information regarding targeted advertising and offers an opt-out for DAA-participating companies.
• Mobile Device/AppChoices. Mobile devices may contain settings that allow you to disable tracking advertising and/or analytics. In addition, the digital advertising industry has provided the ability for mobile users to register at AppChoices (https://youradchoices.com/appchoices) for their intent not to receive targeted advertising.
• GPC. Global Privacy Controls (GPC) offered by some web browsers are settings that automatically inform websites of your privacy preferences with regard to third party online tracking including exercising your rights and requesting the web application to disable tracking you for certain purposes. When you choose to turn on the GPC setting in your browser, your browser sends a special signal to websites, analytics companies, ad networks, plug in providers, and/or other web services you encounter while browsing to exercise your privacy rights and stop tracking your activity for certain purposes. You can learn more about and set up GPC at this link https://globalprivacycontrol.org/.
• Google Analytics. We use Google Analytics, which uses cookies and similar technologies to collect and analyze data to help us understand how the Site is used and report on activities and trends. This service may also collect data about the use of other websites, apps, and online services. You can learn about Google’s practices (https://policies.google.com/technologies/partner-sites), and opt out of them by downloading the Google Analytics opt-out browser add-on (https://tools.google.com/dlpage/gaoptout).
• Meta Pixel. We use a tracking tool provided by Meta Platforms, Inc. (“Meta”), to track actions visitors take on our Site—such as visiting specific pages or completing steps in our application flow—and to serve targeted advertisements to those visitors on Meta’s platforms, including Facebook and Instagram (“retargeting”). Information collected through the Meta Pixel may be transmitted to Meta and used by Meta in accordance with Meta’s Data Policy, available at facebook.com/policy. You can manage your Meta ad preferences at facebook.com/settings?tab=ads, or opt out of interest-based advertising more broadly through the Digital Advertising Alliance at optout.aboutads.info.
• Microsoft Clarity. Clarity enables us to make data-driven decisions on what works and what doesn’t. Clarity captures the interactions on our website such as how the page has rendered and what interactions users undertake such as mouse movements, clicks, scrolls. Clarity uses marketing cookies to track visitors across our website. When the script is installed, Clarity’s cookies send anonymous and non-personally identifiable information about website users. Clarity is a user behavior analytics tool that helps us understand how users interact with our website. Clarity is GDPR-compliant as a data controller. For more information, see the Microsoft Privacy Statement: https://privacy.microsoft.com/privacystatement and https://docs.microsoft.com/en-us/clarity/cookie-consent. You can opt out of Microsoft Clarity cookies by clicking “Your Privacy Options” link in the footer of our website, click “cookie choices” and select your preference.

Please note that opting out through these mechanisms does not opt you out of being served advertising, and you will continue to receive generic ads while online. Your opt-out choices are browser and device specific; if you disable your cookies, upgrade your browser after opting out, or use multiple different devices, please opt-out on each device and each browser separately.

5. Social Media and Other Third-Party Platforms

The Site may permit or facilitate interactions with an interactive third-party website or service (“Social Media”), such as enabling you to “like” or “share” content. If you choose to share content or otherwise post information from or via the Site to Social Media, that data may be public, and the third party may have access to data about you and your use of the Site. You may also choose to participate on Social Media in a way that connects that third-party service with the Site (such as posting to one of our pages on a Social Media site). Doing so may allow us to collect (or the third party to share) data about you. These third-party Social Media platforms may be able to collect certain data about your visits to the Site regardless of whether or not you affirmatively interact with the feature and whether or not you are logged into (or have) an account with the third-party platform.

We may also receive data about you if other users of Social Media give us access to their profiles and you are one of their connections or “friends”. The data we collect is subject to this Privacy Policy. The data collected and stored by the third party remains subject to the third party’s privacy practices, including, without limitation, whether the third party continues to share data with us, the types of data shared, and your choices with regard to what is visible to others on that third-party website or service. The third party may allow you to remove the application or feature, in which case we will no longer collect data about you through the application or feature, but may retain the data previously collected.

6. Your Choices

Marketing Messages from Us. You may opt-out of marketing communications from us at any time as set forth below:

• Email. You may unsubscribe from marketing emails we send you through the opt-out mechanism included in each such email. Note, however, that we reserve the right to send you certain communications relating to your use of the Site or your application, account, or loan, notices of changes to this Privacy Policy or other terms, or similar administrative and transactional messages;
• Text Messages. If you sign up to receive SMS, MMS or RCS messages from Trovy, you may unsubscribe by replying “STOP” and get help by replying “HELP”.

Correct Your Information. You are responsible for maintaining the accuracy of the data you submit to us, such as your contact data. If you would like to request to correct your information, you may do so by emailing support@trovy.com. Trovy will make good faith efforts to make requested changes in our then active databases as soon as reasonably practicable. Note, however, that data may persist internally for administrative purposes and that residual data may remain on backup media or for other reasons.

7. How We Protect Personal Information

We use commercially reasonable physical, technical, and administrative security measures to protect personal information we collect from loss, misuse, unauthorized access, or improper disclosure, taking into due account the risks involved in the processing and the nature of the personal data. For example, we use encryption technologies when transmitting information to and from the Site and with our third-party service providers. Please understand that no security technology is completely secure, and remember that when communicating with us, email is not a secure form of communication when transmitting sensitive or personal information. We cannot guarantee or promise that your personal information or private communications will remain private, and you provide us your information at your own risk.

8. Links to Other Sites

The Site may contain links to third-party websites, such as social media websites. This Privacy Policy is only applicable to this Site, and we have no control of these third-party websites’ information practices. Please be sure to review these third-party websites’ privacy policies before visiting these third-party websites.

9. General Audience Site

This Site is general audience and is not intended for children younger than 18 years of age. We do not knowingly collect personal information directly from an individual younger than the age 18. If you are under the age of 18, please do not submit any personal information through the Site, app, or service. If you have reason to believe that we may have accidentally received personal information from an individual under age 18, please contact us immediately at 833-987-6890.

10. Consent to Transfer

Trovy is a US-based company. Please be aware that the information we collect will be transferred to and processed in the United States. By accessing or using the Site, or providing us with any information, you fully understand and unambiguously consent to the transfer to, and processing, usage, sharing, and storage of your information in the United States, where the privacy laws may not be as comprehensive as those in the country where you reside and/or are a citizen. As a result, this data may be subject to access requests from governments, courts, or law enforcement in the United States and other countries according to the laws in those jurisdictions.

11. Updates to this Privacy Policy

To the extent permitted by applicable law, we reserve the right to update this Privacy Policy at our discretion at any time. When we do, we will let you know of material changes by appropriate means such as by posting the revised Privacy Policy on our website with a new “Last Updated” date. Any changes to this Privacy Policy will become effective when posted unless indicated otherwise. Your continued use of the Site after these updates are posted, to the fullest extent permitted by applicable law, represents your consent to the new Privacy Policy. Please regularly check this Privacy Policy for any such updates. However, we will provide notice and obtain your consent (opt-in or opt-out) if required by law. Note that you may need to consent to our new policies to continue using the Site.

12. Your Nevada Privacy Rights

We do not currently sell your covered information as those terms are defined under applicable Nevada law. You may still submit an opt-out request, and we will honor that request as required by Nevada law if we were to engage in such a sale in the future. If you are a Nevada resident and would like to opt out of the sale of your covered information, please submit your request to privacy@trovy.com or by calling us at 833-987-6890. Your request must include your full name, street address, city, state, zip code, and an email address so that we can contact you if needed regarding this request. If you previously provided a phone number, it will assist us in making sure we identify you as someone who wants to opt out. You may also be required to take reasonable steps as we determine from time to time in order to verify your identity and/or the authenticity of the request. We will respond to your request within sixty (60) days, either confirming that your request has been processed or indicating that we need an additional thirty (30) days to complete the request. Note: As a financial institution subject to the Gramm-Leach-Bliley Act (“GLBA”), Trovy is exempt from Nevada’s opt-out requirements with respect to personal information governed by the GLBA.

13. Data Subject Rights

You may contact us at privacy@trovy.com or 833-987-6890 to:

• Request access to the personal information we have about you, if any;
• Request that we change or correct any data we have about you;
• Request that we delete any personal information about you that we are not required by law to keep; and
• Express any concern you have about our use of your personal data.

We will take reasonable steps to verify your identity before responding to a request.

14. Contacting Us

If you have any questions, you can contact us at 833-987-6890 or privacy@trovy.com.