Privacy Policy

Effective Date: April 30, 2026
Company: Hybrid Financial Services Group
Website/App: https://getypop.com
Contact: privacy@getypop.com
Mailing Address: 2856 Roseau Way, Sacramento, CA 95833

This Privacy Policy explains how Hybrid Financial Services Group and its affiliates, service providers, banking partners, card issuers, processors, and program partners collect, use, share, and protect information when you use our websites, mobile applications, prepaid card programs, credit card programs, financial accounts, rewards programs, payment services, and related products and services.

This Privacy Policy applies to users, applicants, cardholders, account holders, website visitors, and other individuals who interact with us.

Because we provide financial products and services, certain information may also be governed by federal financial privacy laws, including the Gramm-Leach-Bliley Act, Regulation P, card network rules, bank partner requirements, fraud prevention obligations, and other applicable laws. The FTC’s GLBA materials describe privacy and safeguards obligations for covered financial institutions, including requirements around protecting customer information.

1. Information We Collect

We may collect the following categories of information.

A. Identification and Contact Information

This may include:

● Name

● Address

● Email address

● Phone number

● Date of birth

● Social Security number or taxpayer identification number

● Government-issued identification

● Identity verification information

● Business name, EIN, and business ownership information, where applicable

B. Financial and Account Information

This may include:

● Prepaid card account information

● Credit card application information

● Credit history and creditworthiness information

● Bank account information

● Payment card information

● Transaction history

● Account balances

● Direct deposit information

● Funding sources

● Repayment activity

● Chargebacks, disputes, and payment history

● Rewards, cashback, points, or incentive activity

C. Transaction and Usage Information

This may include:

● Purchases and merchant details

● Merchant category codes

● Transaction amounts

● Dates, times, and locations of transactions

● Card-present, card-not-present, online, and mobile wallet activity

● App usage, feature usage, and session activity

● Referral, promotion, loyalty, or rewards participation

D. Device, Technical, and Online Information

This may include:

● IP address

● Device identifiers

● Browser type

● Operating system

● Mobile carrier

● App version

● Cookies and similar technologies

● Log files

● Advertising identifiers

● Approximate location derived from your device or IP address

● Security signals used to detect fraud, bot activity, or account compromise

E. Geolocation Information

With your consent or as permitted by law, we may collect approximate or precise location information from your device to support fraud prevention, transaction verification, location-based rewards, nearby merchant offers, or account security.

F. Communications and Support Information

This may include:

● Customer service messages

● Call recordings, where permitted

● Chat messages

● Email correspondence

● Survey responses

● Feedback

● Dispute documentation

● Complaints and support tickets

G. Information From Third Parties

We may receive information from:

● Sponsor banks and issuing banks

● Card networks

● Payment processors

● Credit bureaus

● Identity verification providers

● Fraud prevention vendors

● Banking-as-a-service providers

● Rewards and merchant offer partners

● Marketing partners

● Data providers

● Public records

● Social media or creator platforms, if you connect them

● Employers, merchants, creators, affiliates, or program partners, where applicable

2. How We Use Information

We may use your information to:

● Open, maintain, and service accounts

● Issue prepaid cards, credit cards, virtual cards, or other payment credentials

● Process transactions

● Verify identity

● Conduct Know Your Customer, anti-money laundering, sanctions screening, and fraud checks

● Evaluate credit applications or eligibility

● Manage credit limits, repayment, billing, disputes, and collections

● Provide rewards, cashback, offers, perks, and loyalty benefits

● Send account alerts, statements, notices, and service messages

● Provide customer support

● Detect, prevent, and investigate fraud, unauthorized activity, money laundering, security incidents, and illegal activity

● Improve our products, services, app experience, and customer experience

● Personalize content, offers, recommendations, and financial insights

● Perform analytics, modeling, risk scoring, and product development

● Comply with legal, regulatory, contractual, audit, and reporting obligations

● Enforce our agreements and terms

● Support audits, compliance reviews, examinations, and regulatory inquiries

● Market our products and services, subject to your rights and preferences

3. How We Share Information

We may share information with the following categories of recipients.

A. Banking, Card, and Payment Partners

We may share information with sponsor banks, issuing banks, card networks, processors, program managers, settlement partners, payment gateways, and related financial infrastructure providers to provide prepaid card, credit card, payment, and account services.

B. Credit Bureaus and Credit-Related Providers

For credit card products, we may share information with credit bureaus, credit reporting agencies, credit scoring providers, debt verification providers, and similar entities as permitted or required by law.

C. Identity, Fraud, Compliance, and Security Providers

We may share information with vendors that help us verify identity, prevent fraud, conduct sanctions screening, monitor transactions, secure accounts, and comply with legal obligations.

D. Service Providers

We may share information with companies that provide services such as:

● Cloud hosting

● Data storage

● Customer support

● Analytics

● Marketing operations

● Email and SMS delivery

● App development

● Compliance tools

● Risk monitoring

● Statement delivery

● Dispute processing

● Collections support

● Legal and accounting services

E. Rewards, Merchant, and Program Partners

We may share information with merchant offer providers, rewards partners, affiliate partners, creator partners, and participating merchants when needed to provide rewards, cashback, promotions, referrals, or program benefits.

F. Legal, Regulatory, and Safety Purposes

We may disclose information to law enforcement, regulators, government agencies, courts, auditors, examiners, or other parties when we believe disclosure is required or appropriate to:

● Comply with law

● Respond to subpoenas, court orders, or regulatory requests

● Prevent fraud or financial crime

● Protect rights, property, or safety

● Enforce agreements

● Investigate misuse of our services

G. Business Transfers

We may share or transfer information as part of a merger, acquisition, financing, investment, reorganization, bankruptcy, sale of assets, or similar business transaction.

4. Information Sharing Under Financial Privacy Laws

Federal law gives consumers the right to limit some but not all sharing by financial institutions. Financial institutions must provide privacy notices describing their practices, and Regulation P includes a model privacy form that many institutions use.

Depending on the products you use and the structure of our program, you may receive a separate Financial Privacy Notice from us, our sponsor bank, our issuing bank, or another financial institution involved in your account.

That notice may explain whether and how you can limit sharing for:

● Affiliates’ everyday business purposes

● Affiliates’ marketing purposes

● Nonaffiliates’ marketing purposes

We do not sell your nonpublic personal information in a way that violates applicable financial privacy laws.

5. Credit Card Information

If you apply for or use a credit card product, we or our bank partners may collect and use additional information to evaluate your eligibility, verify identity, manage credit risk, service your account, process payments, report account activity, prevent fraud, and comply with legal obligations.

This may include credit reports, income information, employment information, repayment history, outstanding balances, late payments, delinquencies, disputes, and collections activity.

Credit card activity may be reported to credit bureaus as permitted or required by law.

6. Prepaid Card Information

If you apply for or use a prepaid card, stored value account, virtual card, or related product, we may collect and use information to open and service your account, process loads and purchases, monitor transactions, provide disclosures, prevent fraud, support disputes, and comply with applicable banking, payments, and anti-money laundering requirements.

Prepaid cards may be issued by a sponsor bank or issuing bank. Your cardholder agreement and related disclosures will identify the issuing bank and applicable terms.

7. Cookies and Tracking Technologies

We may use cookies, pixels, SDKs, device identifiers, and similar technologies to:

● Keep you signed in

● Remember preferences

● Secure your account

● Prevent fraud

● Analyze usage

● Improve our website and app

● Measure marketing performance

● Personalize content and offers

You may be able to control cookies through your browser or device settings. Some features may not work properly if cookies are disabled.

8. Marketing Communications

We may send you marketing emails, text messages, push notifications, or in-app messages about products, offers, rewards, promotions, and features.

You may opt out of certain marketing communications by following the unsubscribe instructions in the message or adjusting your preferences in the app. Even if you opt out of marketing messages, we may still send important account, legal, security, transaction, or service-related communications.

9. Data Security

We use administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

These safeguards may include encryption, access controls, monitoring, authentication, vendor oversight, incident response procedures, employee training, and security reviews.

No system is completely secure, and we cannot guarantee absolute security of your information.

The FTC’s Safeguards Rule requires covered financial institutions to maintain safeguards to protect customer information, and covered entities may have security event reporting obligations for certain events affecting 500 or more people.

10. Data Retention

We retain information for as long as reasonably necessary to:

● Provide services

● Maintain accounts

● Process transactions

● Resolve disputes

● Prevent fraud

● Comply with legal and regulatory obligations

● Meet audit, tax, accounting, reporting, and recordkeeping requirements

● Enforce agreements

Because we provide financial services, we may be required to retain certain information even after your account is closed.

11. Your Privacy Choices

Depending on where you live and the products you use, you may have rights to:

● Access certain personal information

● Correct inaccurate information

● Delete certain information

● Limit certain uses or disclosures

● Opt out of certain marketing

● Opt out of certain affiliate or nonaffiliate sharing, where applicable

● Appeal certain privacy decisions, where applicable

Some rights may be limited because financial institutions are required to retain and use certain information for fraud prevention, legal compliance, transaction processing, credit reporting, dispute resolution, and account servicing.

To submit a privacy request, contact us at:

Email: privacy@getypop.com]
Mail: 2856 Roseau Way, Sacramento, CA 95833
Phone: 408.767.3593

We may need to verify your identity before processing your request.

12. California Privacy Notice

This section applies to California residents to the extent required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act.

Some personal information collected, processed, sold, or disclosed under the Gramm-Leach-Bliley Act or certain other financial privacy laws may be exempt from some California privacy law requirements. However, information outside those financial privacy exemptions may still be subject to California privacy law obligations.

Categories of Personal Information We May Collect

We may collect:

● Identifiers

● Personal records information

● Protected classification information, where required for legal or compliance purposes

● Commercial information

● Financial information

● Internet or electronic network activity

● Geolocation information

● Audio, electronic, or visual information

● Professional or employment information

● Inferences

● Sensitive personal information, such as Social Security number, government ID, financial account credentials, precise geolocation, or information used for identity verification

Sources of Information

We may collect information from:

● You

● Your devices

● Banks and card issuers

● Payment processors

● Credit bureaus

● Identity verification providers

● Fraud prevention vendors

● Merchants

● Rewards partners

● Service providers

● Public records

● Affiliates and business partners

Business or Commercial Purposes

We may use personal information for the purposes described in this Privacy Policy, including account servicing, transaction processing, fraud prevention, compliance, customer support, analytics, marketing, and product development.

Sale or Sharing of Personal Information

We do not sell personal information in exchange for money. However, some advertising, analytics, or marketing activities may be considered “sharing” or “sale” under California law, depending on how those terms are interpreted.

Where required, we will provide a “Do Not Sell or Share My Personal Information” mechanism.

Sensitive Personal Information

We use sensitive personal information only as reasonably necessary to provide financial services, verify identity, prevent fraud, comply with law, secure accounts, and provide requested services, unless otherwise permitted by law.

California Rights

California residents may have the right to:

● Know what personal information we collect, use, disclose, sell, or share

● Access personal information

● Delete personal information

● Correct inaccurate personal information

● Opt out of sale or sharing

● Limit certain uses of sensitive personal information

● Not be discriminated against for exercising privacy rights

To exercise California privacy rights, contact us at [privacy@[company].com] or [insert request link].

13. Children’s Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13 without parental consent.

Certain products may be available to minors only with a parent, guardian, or authorized adult, where permitted by law and program terms.

14. Third-Party Links and Services

Our website or app may contain links to third-party websites, services, merchants, creators, rewards partners, or financial partners. We are not responsible for the privacy practices of third parties. Their privacy policies and terms apply to their services.

15. Bank Partner and Program Partner Notices

Certain financial products may be provided by, issued by, or serviced through third-party banks, card issuers, payment processors, program managers, or other partners.

Your cardholder agreement, deposit agreement, credit card agreement, rewards terms, and related disclosures may identify additional privacy notices that apply to your account.

If there is a conflict between this Privacy Policy and a bank partner’s legally required privacy notice, the applicable bank partner notice may control that financial product.

16. International Users

Our services are intended for users located in the United States unless otherwise stated. If you access our services from outside the United States, your information may be processed in the United States, where privacy laws may differ from those in your location.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the effective date above. If required by law, we will provide additional notice or obtain consent.

Your continued use of our services after an updated Privacy Policy becomes effective means you acknowledge the updated policy.

18. Contact Us

For questions about this Privacy Policy or our privacy practices, contact us at:

Hybrid Financial Services Group
Email: privacy@getypop.com]
Mail: 2856 Roseau Way, Sacramento, CA 95833
Phone: 408.767.3593