Tapcheck Inc. Privacy Policy

Last updated: February 18, 2026

Privacy title that would be too long and go on two lines

This Privacy Policy (the “Policy”) provides information about how Tapcheck Inc. (“Tapcheck,” “we,” “us,” or “our”) collects, uses, and discloses individually-identifiable information (“Personal Information”) about individuals who have signed up for our Services, who otherwise interact with our Services, who are employed by an employer we partner with, or whose information we otherwise receive from one of our Users (collectively, our “Users”). This Policy applies to Personal Information we collect through our website, mobile application, and any other online or offline services we may offer (collectively, our “Services”). This Policy is part of the Website Terms of Service and End User License Agreement that govern your use of the Services.

‍

Types of Personal Information We Collect

We collect the following categories of Personal Information in conjunction with our Services:

Identifiers, such as name, alias, postal address, unique personal identifier, online identifiers, Internet Protocol address, email address, business contact information, account name, signatures, copies of personally identifying documents, telephone number, or other similar identifiers.
Financial Information, including bank account number, credit card number, debit card number, account balance, transaction history, or any other financial information required to make an earned wage advance or recover the amount of an earned wage advance.
Characteristics of Protected Classifications under state or federal law, such as age, gender, and marital status.
Commercial Information, such as products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Internet or Other Network Information, such as browsing history, search history, information regarding your interactions with our websites or advertisements.
Geolocation Data, such as device location that is more granular than a city or town.
Audio, Electronic, Visual, and Similar Information, such as call and video recordings.
Professional or Employment-Related Information, such as work history, hours worked, salary or hourly wage, paycheck related information, and employer.
Inferences drawn from any of the Personal Information listed above to create a profile or summary about, for example, an individual’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. This category includes Sensitive Data Inferences, which are inferences made by us based on Personal Information, alone or in combination with other data, to indicate your Sensitive Personal Information.
Sensitive Personal Information, including:

Personal Information that reveals your:
- Social security, driver’s license, state identification card, or passport number;
- Account log-in, financial account number, debit card number, or credit card number in combination with any required security or access code, password, or credentials for allowing access to an account; or
- Precise geolocation that is used or intended to be used to locate you within a small geographic area (less than a radius of 1,850 feet).

To the extent required by law and depending on your state of residence, we may collect consent from you prior to collecting certain categories of Sensitive Personal Information

‍

‍Sources of Personal Information

‍We collect Personal Information from the following sources:

Directly From You. Tapcheck collects the Personal Information you manually provide when you use our Services. For example, we collect information when you create an account, submit a request for an earned wage advance, send us a message, refer your employer to Tapcheck, sign up for a Tapcheck card account, interact with our social media accounts, or otherwise interact with us. Types of Personal Information we may collect directly from you include, for example, your name, username and password, company name, business contact information, social security number, email address, and phone number.
From Other Users. Tapcheck may collect Personal Information about you from other Users of our Services. For example, we may offer functionality via our Services that allows our Users to invite their colleagues to use Tapcheck. Accordingly, we may receive contact information about you from other Users to allow those Users to send such invitations to you.
From Vendors & Third Parties. Tapcheck collects Personal Information from our vendors and from third parties, including employers, who disclose Personal Information to us. For example, if you create an account with Tapcheck, we will review the Personal Information you provide against Personal Information we receive from your employer to verify your identity prior to providing any earned wage advances to you.‍
Via Cookies & Other Tracking Technologies. Tapcheck collects Personal Information passively via cookies and other tracking technologies (collectively, “Cookies”). This information typically includes your IP address, the identity of your Internet service provider, the name and version of your operating system, the name and version of your browser, the date and time of your visit, your geolocation, and the pages you visit. For example, we use Google Analytics, a web analytics tool that helps us understand how visitors engage with our Services. To learn more about Google Analytics, visit http://www.google.com/intl/en/analytics/privacyoverview.html.

‍

‍How We Use Personal Information

‍We collect, process, and disclose the Personal Information we collect:

to provide the information, products, and services you request;
to process earned wage advances that you request;
to verify your identity and coordinate with your employer regarding your use of our Services;
for security, credit, or fraud prevention purposes;
to provide you with effective customer service;
to provide you with a personalized experience when you use our Services;
to contact you with information and notices related to your use of our Services;
to provide you information and offers on other features or services that we may provide;
to contact you with special offers and other information we believe will be of interest to you (in accordance with any privacy preferences you have expressed to us);
to invite you to participate in surveys and provide feedback to us (in accordance with any privacy preferences you have expressed to us);
to better understand your needs and interests;
to improve the content, functionality and usability of our Services;
to improve our products and services and to attract investors;
to improve our marketing and promotional efforts;
for our legal and compliance purposes; and
for any other purpose identified in an applicable privacy notice, click-through agreement or other agreement between you and us.

‍

Steps We Take to Safeguard Your Personal Information‍

We maintain reasonable administrative, physical, and technological measures to protect the confidentiality and security of Personal Information you submit on or through the Services. Unfortunately, no website, app, or database is completely secure or “hacker proof.” We therefore cannot guarantee that your Personal Information will not be disclosed, misused, or lost by accident or by the unauthorized acts of others.

‍

‍How We Disclose Personal Information

‍We disclose the categories of Personal Information we collect in the following contexts:

Between Our Corporate Group Entities. Tapcheck discloses Personal Information collected through our Services to other entities within our corporate group, including Tapcheck’s subsidiaries, Tapcheck Funding LLC and Tapcheck Funding SPV II LLC.
To Our Vendors. Tapcheck discloses Personal Information collected through our Services with vendors who act on our behalf. For example, we use vendors to operate our Services and help us with our promotional efforts. We impose contractual limitations on our vendors’ use of Personal Information they collect in conjunction with providing services to us.
With Your Employer. Tapcheck discloses certain Personal Information about our Users to their respective employers as part of providing our Services. For example, if you create an account with Tapcheck and request an earned wage advance, we will provide information back to your employer about the earned wage advance so that your employer can reflect the earned wage advance on your paystub and deduct the appropriate amount from your next paycheck.
To Third Parties for Marketing and Analytics Purposes. Tapcheck discloses Internet and other network information collected via Cookies, such as browsing history, search history, and information regarding your interactions with our websites or advertisements, to third party marketing and analytics providers for marketing and analytics purposes. For more details about these disclosures, please see our Supplemental Privacy Policy for Residents of Certain U.S. States.
As Described in a Privacy Notice or With Your Consent. We may disclose Personal Information as described in any privacy notice we provide to you via our Services, or with your consent if we obtain it from you in a particular context.
In Aggregate or De-Identified Form. We may aggregate or de-identify the Personal Information we collect, and we may disclose aggregated and/or de-identified information to our vendors and to third parties for our business operational purposes and for any other purposes permitted by applicable law. When we do so, we take reasonable measures to ensure that the information cannot be associated with a consumer or household, and we maintain and use the information in deidentified form. We will not attempt to reidentify the information, except that we may do so solely to determine whether our deidentification processes satisfy applicable legal requirements. After it has been deidentified, the information is no longer Personal Information and is not subject to this Policy.

We may also disclose Personal Information in the following contexts:

As Part of a Business Transfer. Your Personal Information may be transferred to a successor organization if, for example, we transfer the ownership or operation of the Services to another organization, if we merge with or are acquired by another organization, or if we liquidate our assets. In negotiating with a third party about entering into such an arrangement, we may need to disclose your Personal Information. In such cases, we will take reasonable measures to protect the Personal Information we disclose, and we will seek assurances that the successor organization’s use of your Personal Information will still be subject to this Policy and the privacy preferences you have expressed to us.
For Compliance with Laws and Protection of Our Rights and the Rights of Others. We may disclose your Personal Information when we, in good faith, believe disclosure is appropriate to comply with the law, a court order or a subpoena. We may also disclose your Personal Information to prevent or investigate a possible crime, such as fraud or identity theft; to protect the security of the Services; to enforce or apply our Website Terms of Service, End User License Agreement or other agreements; or to protect our own rights or property or the rights, property or safety of our users or others.

‍

Children Under the Age of Thirteen

‍Our Services are not intended for children or minors under the age of 13. If you believe that a child has submitted Personal Information on or through our Services, please contact us promptly at privacy@tapcheck.com so that we can take appropriate action.

‍

‍Links to Other Sites

‍Our Services may provide links to websites and services operated by third parties. We do not control the content or links that appear on these websites and services, and we are not responsible for their privacy practices. When you visit a third party’s website or use a third party’s services, such use is subject to the third party’s privacy policy and terms of use. We encourage you to review the privacy policy and any applicable terms of use posted on any website you visit or other services you access before providing any Personal Information to that third party.

‍

‍Changes to this Policy

‍This Policy describes Tapcheck’s current policies and practices with regard to the Personal Information we collect through the Services.We are continually improving and adding to the features and functionality of our Services. As a result of these changes (or changes in the law), we may need to update or revise this Policy. Accordingly, we reserve the right to update or modify this Policy at any time. When we do so, we will post the revised version of this Policy behind the link marked “Privacy Policy” in the footer of our website. Your continued use of our Services after we have posted the revised Policy constitutes your agreement to be bound by the revised Policy.

‍

‍Contact Us

‍If you have any questions about this Policy or our privacy practices, please contact us using the information provided below:

5850 Granite Pkwy, Suite 1000

Plano, TX 75024
866-697-6016

Email: privacy@tapcheck.com

‍‍

‍Supplemental Privacy Policy for Residents of Certain U.S. States

‍Last Updated: February 18, 2026

‍

This Supplemental Privacy Policy (the “Supplemental Policy”) provides information about how Tapcheck Inc. (“Tapcheck,” “we,” “us,” or “our”) collects, uses, and discloses Personal Information about residents of California and other states that have enacted comprehensive privacy legislation that applies to us (collectively, “U.S. Privacy Laws”). This Supplemental Policy applies to Personal Information we collect through our website, mobile application, and any other online or offline services we may offer (collectively, our “Services”). It pertains to Personal Information we collect about individuals who have signed up for our Services, who otherwise interact with our Services, who are employed by an employer we partner with, or whose information we otherwise receive from one of our Users (collectively, our “Users”), and it explains how our Users can exercise their privacy rights under U.S. Privacy Laws. Some portions of this Supplemental Policy apply only to residents of particular states. In those instances, we have indicated that such language applies only to those residents.

‍

Please note that this Supplemental Policy does not apply to individuals with whom we interact in an employment-related context or a business context. For our disclosures applicable to California residents with whom we interact in those contexts, please see our California Business Contact Privacy Policy, California Employee Privacy Policy, and California Applicant Privacy Policy.

‍

If you have a disability and need to access this policy in an alternative format, please contact us at privacy@tapcheck.com.

‍

‍A. Definitions

“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal Information also includes “Sensitive Personal Information” that we specifically describe in this Supplemental Policy.
“Sell,” “Sale,” or “Sold” means renting, releasing, or transferring an individual’s Personal Information to a Third Party for money or other valuable consideration.
“Share,” “Shared,” or “Sharing” means transferring an individual’s Personal Information to a Third Party for cross-context behavioral advertising or targeted advertising purposes, whether or not for money or other valuable consideration.
“Third Party” means any non-affiliated person that is not a Vendor.
“Vendor” means a service provider, contractor, or processor which collects, stores, or otherwise handles data for us and is bound by contractual obligations to use your Personal Information only as directed by us.

You may be familiar with different terms that are used to describe materially similar concepts in this section by the U.S. Privacy Laws in your state of residence. You can treat them as the same for the purpose of our Supplemental Policy. For example, we intend the term “Personal Information” here to have the same definition as “Personal Data” used in specific U.S. Privacy Laws.

‍

‍B. Collection of Personal Information

‍We, and our Vendors, collect and have collected in the past 12 months the following categories of Personal Information in conjunction with our Services:

Identifiers, such as name, alias, postal address, unique personal identifier, online identifiers, Internet Protocol address, email address, account name, signatures, copies of personally identifying documents, telephone number, or other similar identifiers.
Financial Information, including bank account number, credit card number, debit card number, account balance, transaction history, or any other financial information required to make an earned wage advance or recover the amount of an earned wage advance.
Characteristics of Protected Classifications under state or federal law, such as age, gender, and marital status.
Commercial Information, such as products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Internet or Other Network Information, such as browsing history, search history, information regarding your interactions with our websites or advertisements.
Geolocation Data, such as device location that is more granular than a city or town.
Audio, Electronic, Visual, and Similar Information, such as call and video recordings.
Professional or Employment-Related Information, such as work history, hours worked, salary or hourly wage, paycheck related information, and employer.
Inferences drawn from any of the Personal Information listed above to create a profile or summary about, for example, an individual’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. This category includes Sensitive Data Inferences, which are inferences made by us based on Personal Information, alone or in combination with other data, to indicate your Sensitive Personal Information.
Sensitive Personal Information, including:

Personal Information that reveals your:
- Social security, driver’s license, state identification card, or passport number;
- Account log-in, financial account number, debit card number, or credit card number in combination with any required security or access code, password, or credentials for allowing access to an account; or
- Precise geolocation that is used or intended to be used to locate you within a small geographic area (less than a radius of 1,850 feet).

To the extent required by law and depending on your state of residence, we may collect consent from you prior to collecting certain categories of Sensitive Personal Information.

‍

‍C. Purposes for Processing and Disclosing Personal Information

‍We, and our Vendors, collect, process, and disclose the Personal Information described in this Supplemental Policy:

to provide the information, products, and services you request;
to process earned wage advances that you request;
to verify your identity and coordinate with your employer regarding your use of our Services;
for security, credit, or fraud prevention purposes;
to provide you with effective customer service;
to provide you with a personalized experience when you use our Services;
to contact you with information and notices related to your use of our Services;
to provide you information and offers on other features or services that we may provide;
to contact you with special offers and other information we believe will be of interest to you (in accordance with any privacy preferences you have expressed to us);
to invite you to participate in surveys and provide feedback to us (in accordance with any privacy preferences you have expressed to us);
to better understand your needs and interests;
to improve the content, functionality and usability of our Services;
to improve our products and services and to attract investors;
to improve our marketing and promotional efforts;
for our legal and compliance purposes; and
for any other purpose identified in an applicable privacy notice, click-through agreement or other agreement between you and us.

To the extent we collect Sensitive Personal Information, we do not use such information for purposes other than those permitted by the California Consumer Privacy Act (“CCPA”) regulations.

‍

‍Retention of Personal Information.

‍We retain your Personal Information for the period reasonably necessary to provide goods and services to you and for the period reasonably necessary to support our business operational purposes listed in this Section C.

‍

‍Sale & Sharing of Personal Information.

We Sell and Share, and we have Sold and Shared in the past 12 months, Internet and other network information collected via cookies and other tracking technologies (“Cookies”), such as browsing history, search history, and information regarding your interactions with our websites or advertisements. We Sell and Share this category of Personal Information to third party marketing and analytics providers for marketing and analytics purposes. Subject to some exceptions, a “Sale” is the disclosure of Personal Information to a Third Party for monetary or other valuable consideration, and a “Share” is the disclosure of Personal Information to a Third Party for cross-context behavioral advertising or targeted advertising purposes, whether or not for money or other valuable consideration. Consumers have the right to opt-out of the Sale and Sharing of their Personal Information and can submit a request to opt out by visiting our Cookie Preference Center and clicking “Reject All” to opt out of non-strictly necessary Cookies.

‍

Please note that Tapcheck does not Sell or Share Personal Information that we collect about you in other contexts. For example, Tapcheck does not Sell or Share your name, contact information, wage information, or other information we may collect about you outside of the Cookie context.

‍

We also do not knowingly Sell or Share the Personal Information of consumers under the age of 16.

‍

‍D. Disclosure of Personal Information

‍We disclose, and we have disclosed in the past 12 months, the categories of Personal Information listed in Section B in the following contexts:

Between Our Corporate Group Entities. Tapcheck discloses Personal Information collected through our Services to other entities within our corporate group, including Tapcheck’s subsidiaries, Tapcheck Funding LLC and Tapcheck Funding SPV II LLC.
To Our Vendors. Tapcheck discloses Personal Information collected through our Services with vendors who act on our behalf. For example, we use vendors to operate our Services and help us with our promotional efforts. We impose contractual limitations on our vendors’ use of Personal Information they collect in conjunction with providing services to us.
With Your Employer. Tapcheck discloses certain Personal Information about our Users to their respective employers as part of providing our Services. For example, if you create an account with Tapcheck and request an earned wage advance, we will provide information back to your employer about the earned wage advance so that your employer can reflect the earned wage advance on your paystub and deduct the appropriate amount from your next paycheck.
To Third Parties for Marketing and Analytics Purposes. Tapcheck discloses Internet and other network information collected via Cookies, such as browsing history, search history, and information regarding your interactions with our websites or advertisements, to third party marketing and analytics providers for marketing and analytics purposes.
As Described in a Privacy Notice or With Your Consent. We may disclose Personal Information as described in any privacy notice we provide to you via our Services, or with your consent if we obtain it from you in a particular context.
In Aggregate or De-Identified Form. We may aggregate or de-identify the Personal Information we collect, and we may disclose aggregated and/or de-identified information to our vendors and to third parties for our business operational purposes and for any other purposes permitted by applicable law.

We may also disclose Personal Information in the following contexts:

As Part of a Business Transfer. Your Personal Information may be transferred to a successor organization if, for example, we transfer the ownership or operation of the Services to another organization, if we merge with or are acquired by another organization, or if we liquidate our assets. In negotiating with a third party about entering into such an arrangement, we may need to disclose your Personal Information. In such cases, we will take reasonable measures to protect the Personal Information we disclose, and we will seek assurances that the successor organization’s use of your Personal Information will still be subject to this Policy and the privacy preferences you have expressed to us.
For Compliance with Laws and Protection of Our Rights and the Rights of Others. We may disclose your Personal Information when we, in good faith, believe disclosure is appropriate to comply with the law, a court order or a subpoena. We may also disclose your Personal Information to prevent or investigate a possible crime, such as fraud or identity theft; to protect the security of the Services; to enforce or apply our Terms of Use or other agreements; or to protect our own rights or property or the rights, property or safety of our users or others.

E. Sources of Personal Information

‍We collect Personal Information from the following sources:

Directly From You. Tapcheck collects the Personal Information you manually provide when you use our Services. For example, we collect information when you create an account, submit a request for an earned wage advance, send us a message, refer your employer to Tapcheck, sign up for a Tapcheck card account, interact with our social media accounts, or otherwise interact with us. Types of Personal Information we may collect directly from you include your name, username and password, company name, business contact information, social security number, email address, and phone number.
From Other Users. Tapcheck may collect Personal Information about you from other Users of our Services. For example, we may offer functionality via our Services that allows our Users to invite their colleagues to use Tapcheck. Accordingly, we may receive contact information about you from other Users to allow those Users to send such invitations to you.
From Vendors & Third Parties. Tapcheck collects Personal Information from our vendors and from third parties, including employers, who disclose Personal Information to us. For example, if you create an account with Tapcheck, we will review the Personal Information you provide against Personal Information we receive from your employer to verify your identity prior to providing any earned wage advances to you.
Via Cookies & Other Tracking Technologies. Tapcheck collects Personal Information passively via cookies and other tracking technologies (collectively, “Cookies”). This information typically includes your IP address, the identity of your Internet service provider, the name and version of your operating system, the name and version of your browser, the date and time of your visit, your geolocation, and the pages you visit. For example, we use Google Analytics, a web analytics tool that helps us understand how visitors engage with our Services. To learn more about Google Analytics, visit http://www.google.com/intl/en/analytics/privacyoverview.html.

‍

F. Data Subject Rights

‍Residents who reside in states with U.S. Privacy Laws have the following rights regarding our collection and use of the Personal Information, subject to certain exceptions. Please read this section carefully as some rights vary by state.

Rights That Require Verification. You may exercise the data subject rights below by contacting us at privacy@tapcheck.com, by calling 866-697-6016, or by clicking here. You may also authorize an agent to make data subject requests on your behalf. In such instances, authorized agents may use the same methods as you to submit the requests on your behalf. To verify your identity and protect your Personal Information, we may ask the requestor to provide information that will enable us to verify your identity in order to comply with your data subject request, such as asking your agent to provide proof of signed permission from you, or asking you to confirm with us directly that you provided the agent with permission to submit the request. In some instances, we may decline to honor your request if an exception applies under applicable law. We will respond to your request consistent with applicable law.
- Right to Know: You have the right to know the following details about our privacy practices at or before the point of collection. We have provided such information in this Supplemental Policy. You may also request that we provide you with information about the following aspects of how we have handled your Personal Information specifically in the 12 months preceding your request:
  - The categories of Personal Information we have collected about you;
  - The categories of sources from which we collected such Personal Information;
  - The business or commercial purpose for collecting, Selling, or Sharing Personal Information about you;
  - The categories of Personal Information about you that we disclosed and the categories of Third Parties to whom we disclosed such Personal Information;
  - The categories of Personal Information about you that we Sold or Shared, or used for targeted advertising purposes, and the categories of Third Parties with whom we Sold or Shared such Personal Information;
  - If we collect Sensitive Personal Information, the categories of Sensitive Personal Information to be collected, the purposes for which it is collected or used, and whether that information is Sold or Shared; and
  - The length of time we intend to retain each category of Personal Information, or if that is not possible, the criteria used to determine that period.
- Right to Deletion: You may request that we delete any Personal Information, subject to certain exceptions.
- Right to Correction: You may request that we correct any inaccurate Personal Information we maintain about you. Please note this right does not apply to Iowa and Utah residents.
- Right to Access Specific Pieces of Personal Information and Data Portability: You may ask to obtain the specific pieces of Personal Information we have collected about you in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the Personal Information to another entity without hindrance. You may not exercise this right more than two times in a calendar year.
- Right to Withdraw Consent: If we have collected your consent for processing of your Sensitive Personal Information in conjunction with our Services, you may withdraw your consent at any time. If you have consented to collection of your precise geolocation data via our mobile application, you can withdraw your consent for collection of precise geolocation data by updating your location sharing preferences via the settings on your device. If you have consented to collection of other types of Sensitive Personal Information in conjunction with our Services, you may withdraw your consent for such processing by contacting us via the methods listed above, under the header “Exercising Your Data Subject Rights.”
Rights that Do Not Require Verification. You may exercise these rights through the “Your Privacy Choices” link below or at the footer of every page on our website. The “Your Privacy Choices” link will open our Cookie Preference Center, and you can then click “Reject All” to opt out of Sale and Sharing of Personal Information.
- Right to Opt-Out of Sale: You have the right to opt out of the Sale of your Personal Information.
- Right to Opt-Out of the Sharing of Your Personal Information or the Use of Your Personal Information for Targeted Advertising: You have the right to opt-out of the Sharing of your personal information or our use of your Personal Information for targeted advertising purposes.

Your Privacy Choices

Opt-Out Preference Signals. Some web browsers or devices offer settings where you may pre-set a signal to websites that you do not want to have your online activity and behavior tracked, sold, shared, or otherwise used for targeted advertising purposes. We recognize the opt-out preference signals that we are required to recognize for compliance with applicable law. Where required by U.S. Privacy Laws, we treat the opt-out preference signals we are required to comply with as a valid request to opt-out of sale, sharing, and processing for purposes of targeted advertising, as applicable, for the browser or device through which the signal is sent and any consumer profile we have associated with that browser or device, including pseudonymous profiles. Further, if we know the identity of the consumer from the opt-out preference signal, we will also treat the opt-out preference signal as a valid request to opt out of sale and sharing for such consumer. Consumers may use opt-out preference signals by downloading or otherwise activating them for use on supported browsers and setting them to send opt-out preference signals to websites they visit. Please note, however, that our sites are not currently configured to recognize the “Do Not Track” signal.
Non-Discrimination. We will not discriminate against you for exercising your data subject rights. For example, we will not deny goods or services to you, charge you different prices or rates, or provide a different level of quality for products or services as a result of you exercising your data subject rights. Please note, however, that if you withdraw your consent for processing of Sensitive Personal Information or request that we delete your Personal Information, we may no longer be able to provide our Services to you if the sensitive data is necessary for our provision of such Services. Where permitted by applicable U.S. Privacy Laws, we may also deny your data subject rights request if an applicable exception applies.
Appeals. Residents of certain states have the right to appeal our decisions on their data subject requests. This section does not apply to California or Utah residents, or to residents who reside in other states where the applicable U.S. Privacy Law does not give them the right to appeal Controllers’ decisions regarding data subject rights. To appeal our decision on your data subject requests, you may contact us at privacy@tapcheck.com. Please enclose a copy of or otherwise specifically reference our decision on your data subject request, so that we may adequately address your appeal. We will respond to your appeal in accordance with applicable law.

‍

G. Other Disclosures

Residents Under Age 18. If you are under the age of 18 and a registered user of our Services or website, you may ask us to remove content or data that you have posted to the Services or website by writing to privacy@tapcheck.com. Please note that your request does not ensure complete or comprehensive removal of the content or data as, for example, some of your content or data may have been reposted by another user.
Disclosure for California Residents
- Direct Marketing. California Civil Code § 1798.83 permits California residents to annually request certain information regarding our disclosure of Personal Information to other entities for their direct marketing purposes in the preceding calendar year. We do not disclose Personal Information, as defined by California Civil Code § 1798.83, to third parties for their direct marketing purposes.
- Financial Incentives for California Residents. We do not provide financial incentives to California residents who allow us to collect, retain, Sell, or Share their Personal Information. We will describe such programs to you if and when we offer them to you.‍
Disclosure for Nevada Residents. To the extent we collect Personal Information that identifies you through an online website or service among the categories of Personal Information listed in Section B, we do not sell that Personal Information for monetary consideration.

‍

H. Changes and Contact Information

Changes to this Supplemental Policy. This Supplemental Policy describes Tapcheck’s current policies and practices with regard to the Personal Information we collect through the Services. We are continually improving and adding to the features and functionality of our Services. As a result of these changes (or changes in the law), we may need to update or revise this Supplemental Policy. Accordingly, we reserve the right to update or modify this Supplemental Policy at any time. When we do so, we will post the revised version of this Supplemental Policy behind the link marked “Privacy Policy” in the footer of our website. Your continued use of our Services after we have posted the revised Supplemental Policy constitutes your agreement to be bound by the revised Supplemental Policy.

Contact Us. If you have any questions about this Supplemental Policy or our privacy practices, please contact us at privacy@tapcheck.com.

‍

‍California Business Contact Privacy Policy

‍

‍Last Updated: February 18, 2026

‍

This California Business Contact Privacy Policy (“Policy”) provides information about how Tapcheck Inc. (“Tapcheck,” “we,” “us,” or “our”) collects, uses, and discloses Personal Information about California residents whose personal information we collect in a business-related context (collectively, “you,” “your,” “Business Contacts”), such as our vendors, third parties, and their employees, independent contractors, or other individuals who interact with our website, mobile application, and any other online or offline services we may offer (collectively, our “Services”). We have adopted this Policy to explain what Personal Information may be collected about you, how we use this information, and under what circumstances we may disclose this information, in accordance with the California Consumer Privacy Act (“CCPA”).

‍

Please note that this Policy does not apply to individuals with whom we interact in an employment-related context or a consumer context. For our disclosures applicable to California residents with whom we interact in those contexts, please see our Supplemental Privacy Policy for Residents of Certain U.S. States, California Employee Privacy Policy, and California Applicant Privacy Policy.

‍

If you have a disability and need to access this policy in an alternative format, please contact us at privacy@tapcheck.com.

‍

A. Definitions

“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. It does not include de-identified or aggregate information, public information lawfully available from governmental records, or other information that falls outside of the scope of the CCPA.
“Third Party” means any non-affiliated person that is not a Vendor.
“Vendor” means a service provider or contractor which collects, stores, or otherwise handles data for us and is bound by contractual obligations to use your Personal Information only as directed by us.
Other CCPA Definitions: as used in this Policy, the terms “Collect,” “Processing,” “Sale,” and “Share,” and other terms defined in the CCPA and their conjugates, have the meanings afforded to them in the CCPA, whether or not such terms are capitalized herein, unless contrary to the meaning thereof.

‍

B. Collection of Personal Information

‍We, and our Vendors, collect and have collected in the past 12 months the following categories of Personal Information about Business Contacts:

Identifiers, such as name, alias, postal address, unique personal identifier, online identifiers, Internet Protocol address, email address, account name, signatures, copies of personally identifying documents, telephone number, or other similar identifiers.
Commercial Information, such as products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Internet or Other Network Information, such as browsing history, search history, information regarding your interactions with our websites or advertisements.
Geolocation Data, such as device location that is more granular than a city or town.
Audio, Electronic, Visual, and Similar Information, such as call and video recordings.
Professional or Employment-Related Information, such as work history and employer.
Inferences drawn from any of the Personal Information listed above to create a profile or summary about, for example, an individual’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

We do not collect Sensitive Personal Information about Business Contacts.

‍

‍C. Purposes for Processing and Disclosing Personal Information

‍We, and our Vendors, collect, process, and disclose the Personal Information described in this Policy:

to provide the information, products, and services you request;
to contract with you for the provision of services;
to improve the content, functionality, and usability of our services;
to contact you with information and notices related to your interaction with our services;
to provide you with effective customer service;
to improve our products and services and to attract investors;
to provide you payment or feedback for services rendered to us;
for security, credit, or fraud prevention purposes;
to better understand your needs and interests;
to improve our marketing and promotional efforts;
for our legal and compliance purposes; and
for any other purpose identified in an applicable privacy notice, click-through agreement or other agreement between you and us.

‍

Retention of Personal Information.

‍

‍Sale & Sharing of Personal Information.

We Sell and Share, and we have Sold and Shared in the past 12 months, Internet and other network information collected via cookies and other tracking technologies (“Cookies”), such as browsing history, search history, and information regarding your interactions with our websites or advertisements. We Sell and Share this category of Personal Information to third party marketing and analytics providers for marketing and analytics purposes. Subject to some exceptions, a “Sale” is the disclosure of Personal Information to a Third Party for monetary or other valuable consideration, and a “Share” is the disclosure of Personal Information to a Third Party for cross-context behavioral advertising, whether or not for money or other valuable consideration.

‍

Business Contacts have the right to opt-out of the Sale and Sharing of their Personal Information and can submit a request to opt out by visiting our Cookie Preference Center and clicking “Reject All” to opt out of non-strictly necessary Cookies.

‍

Please note that Tapcheck does not Sell or Share Personal Information that we collect about you in other contexts. For example, Tapcheck does not Sell or Share your name, contact information, or other information we may collect about you outside of the Cookie context.

‍

We also do not knowingly Sell or Share the Personal Information of consumers under the age of 16.

‍

‍D. Disclosure of Personal Information

‍We disclose, and we have disclosed in the past 12 months, the categories of Personal Information listed in Section B in the following contexts:

Between Our Corporate Group Entities. Tapcheck discloses Personal Information collected through our Services to other entities within our corporate group, including Tapcheck’s subsidiaries, Tapcheck Funding LLC and Tapcheck Funding SPV II LLC.
To Our Vendors. Tapcheck discloses Personal Information to vendors who act on our behalf. For example, we use vendors to operate our Services and help us with our promotional efforts. We impose contractual limitations on our vendors’ use of Personal Information they collect in conjunction with providing services to us.
To Third Parties for Marketing and Analytics Purposes. Tapcheck discloses Internet and other network information collected via Cookies, such as browsing history, search history, and information regarding your interactions with our websites or advertisements, to third party marketing and analytics providers for marketing and analytics purposes.
As Described in a Privacy Notice or With Your Consent. We may disclose Personal Information as described in any privacy notice we provide to you, or with your consent if we obtain it from you in a particular context.
In Aggregate or De-Identified Form. We may aggregate or de-identify the Personal Information we collect, and we may disclose aggregated and/or de-identified information to our vendors and to third parties for our business operational purposes and for any other purposes permitted by applicable law.

We may also disclose Personal Information in the following contexts:

As Part of a Business Transfer. Your Personal Information may be transferred to a successor organization if, for example, we transfer the ownership or operation of the Services to another organization, if we merge with or are acquired by another organization, or if we liquidate our assets. In negotiating with a third party about entering into such an arrangement, we may need to disclose your Personal Information. In such cases, we will take reasonable measures to protect the Personal Information we disclose, and we will seek assurances that the successor organization’s use of your Personal Information will still be subject to this Policy and the privacy preferences you have expressed to us.
For Compliance with Laws and Protection of Our Rights and the Rights of Others. We may disclose your Personal Information when we, in good faith, believe disclosure is appropriate to comply with the law, a court order or a subpoena. We may also disclose your Personal Information to prevent or investigate a possible crime, such as fraud or identity theft; to protect the security of the Services; to enforce or apply our Terms of Use or other agreements; or to protect our own rights or property or the rights, property or safety of our users or others.

‍

E. Sources of Personal Information

‍We collect Personal Information from the following sources:

Directly From You. Tapcheck collects the Personal Information you manually provide when you use our Services. For example, we collect information when you communicate with us, interact with our social media accounts, or otherwise interact with us. Types of Personal Information we may collect directly from you include your name, username and password, company name, business contact information, email address, and phone number.
From Vendors & Third Parties. Tapcheck collects Personal Information from our vendors and from third parties who disclose Personal Information to us.
Via Cookies & Other Tracking Technologies. Tapcheck collects Personal Information passively via cookies and other tracking technologies (collectively, “Cookies”). This information typically includes your IP address, the identity of your Internet service provider, the name and version of your operating system, the name and version of your browser, the date and time of your visit, your geolocation, and the pages you visit. For example, we use Google Analytics, a web analytics tool that helps us understand how visitors engage with our Services. To learn more about Google Analytics, visit http://www.google.com/intl/en/analytics/privacyoverview.html.

‍

F. Data Subject Rights

‍Business Contacts have the following rights regarding our collection and use of their Personal Information, subject to certain exceptions.

Rights That Require Verification. You may exercise the data subject rights below by contacting us at privacy@tapcheck.com, by calling 866-697-6016, or by clicking here. You may also authorize an agent to make data subject requests on your behalf. In such instances, authorized agents may use the same methods as you to submit the requests on your behalf. To verify your identity and protect your Personal Information, we may ask the requestor to provide information that will enable us to verify your identity in order to comply with your data subject request, such as asking your agent to provide proof of signed permission from you, or asking you to confirm with us directly that you provided the agent with permission to submit the request. In some instances, we may decline to honor your request if an exception applies under applicable law. We will respond to your request consistent with applicable law.
- Right to Know: You have the right to know the following details about our privacy practices at or before the point of collection. We have provided such information in this Policy. You may also request that we provide you with information about the following aspects of how we have handled your Personal Information specifically in the 12 months preceding your request:
  - The categories of Personal Information we have collected about you;
  - The categories of sources from which we collected such Personal Information;
  - The business or commercial purpose for collecting, Selling, or Sharing Personal Information about you;
  - The categories of Personal Information about you that we disclosed and the categories of Third Parties to whom we disclosed such Personal Information;
  - The categories of Personal Information about you that we Sold or Shared, or used for targeted advertising purposes, and the categories of Third Parties with whom we Sold or Shared such Personal Information;
  - If we collect Sensitive Personal Information, the categories of Sensitive Personal Information to be collected, the purposes for which it is collected or used, and whether that information is Sold or Shared; and
  - The length of time we intend to retain each category of Personal Information, or if that is not possible, the criteria used to determine that period.
- Right to Deletion: You may request that we delete any Personal Information we collected from you, subject to certain exceptions.
- Right to Correction: You may request that we correct any inaccurate Personal Information we maintain about you.
- Right to Access Specific Pieces of Personal Information: You may ask to obtain the specific pieces of Personal Information we have collected about you. You may not exercise this right more than two times in a calendar year.
Rights that Do Not Require Verification. You may exercise these rights through the “Your Privacy Choices” link below or at the footer of every page on our website. The “Your Privacy Choices” link will open our Cookie Preference Center, and you can then click “Reject All” to opt out of Sale and Sharing of Personal Information.
- Right to Opt-Out of Sale: You have the right to opt out of the Sale of your Personal Information.
- Right to Opt-Out of the Sharing of Your Personal Information or the Use of Your Personal Information for Targeted Advertising: You have the right to opt-out of the Sharing of your personal information or our use of your Personal Information for targeted advertising purposes.

Your Privacy Choices

Opt-Out Preference Signals. Some web browsers or devices offer settings where you may pre-set a signal to websites that you do not want to have your online activity and behavior tracked, sold, shared, or otherwise used for targeted advertising purposes. We recognize the opt-out preference signals that we are required to recognize for compliance with applicable law. Where required by U.S. Privacy Laws, we treat the opt-out preference signals we are required to comply with as a valid request to opt-out of sale, sharing, and processing for purposes of targeted advertising, as applicable, for the browser or device through which the signal is sent and any consumer profile we have associated with that browser or device, including pseudonymous profiles. Further, if we know the identity of the consumer from the opt-out preference signal, we will also treat the opt-out preference signal as a valid request to opt out of sale and sharing for such consumer. Consumers may use opt-out preference signals by downloading or otherwise activating them for use on supported browsers and setting them to send opt-out preference signals to websites they visit. Please note, however, that our sites are not currently configured to recognize the “Do Not Track” signal.
Non-Discrimination. We will not discriminate against you for exercising your data subject rights. For example, we will not deny goods or services to you, charge you different prices or rates, or provide a different level of quality for products or services as a result of you exercising your data subject rights. Where permitted, we may also deny your data subject rights request if an applicable exception applies.

G. Steps We Take to Safeguard Business Contact Personal Information

‍We maintain reasonable administrative, physical, and technological measures to protect the confidentiality and security of your Personal Information. Unfortunately, no website, app, or database is completely secure or “hacker proof.” We therefore cannot guarantee that your Personal Information will not be disclosed, misused, or lost by accident or by the unauthorized acts of others.

‍

‍H. Other Disclosures

Residents Under Age 18. If you are under the age of 18 and a registered user of our Services or website, you may ask us to remove content or data that you have posted to the Services or website by writing to privacy@tapcheck.com. Please note that your request does not ensure complete or comprehensive removal of the content or data as, for example, some of your content or data may have been reposted by another user.
Direct Marketing. California Civil Code § 1798.83 permits California residents to annually request certain information regarding our disclosure of Personal Information to other entities for their direct marketing purposes in the preceding calendar year. We do not disclose Personal Information, as defined by California Civil Code § 1798.83, to third parties for their direct marketing purposes.
Financial Incentives. We do not provide financial incentives to California Business Contacts who allow us to collect, retain, Sell, or Share their Personal Information. We will describe such programs to you if and when we offer them to you.

‍

I. Changes and Contact Information

Changes to this Policy. This Policy describes Tapcheck’s current policies and practices with regard to Personal Information we collect about Business Contacts. We are continually improving and adding to the features and functionality of our Services. As a result of these changes (or changes in the law), we may need to update or revise this Policy. Accordingly, we reserve the right to update or modify this Policy at any time. When we do so, we will post the revised version of this Policy on this page. Your continued use of our Services after we have posted the revised Policy constitutes your agreement to be bound by the revised Policy.

Contact Us. If you have any questions about this Policy or our privacy practices, please contact us at privacy@tapcheck.com.

‍

California Employee Privacy Policy

‍Last Updated: February 18, 2026

‍

This California Employee Privacy Policy (“Policy”) provides information about how Tapcheck Inc. (“Tapcheck,” “we,” “us,” or “our”) collects, uses, and discloses Personal Information about California employees, independent contractors, and other individuals who interact with Tapcheck in an employment-related capacity (collectively, “Employees”). We have adopted this Policy to explain what Personal Information may be collected about you, how we use this information, and under what circumstances we may disclose this information, in accordance with the California Consumer Privacy Act (“CCPA”).

‍

Please note that this Policy does not apply to individuals with whom we interact in a business-related context or a consumer context. It also does not apply to job applicants and prospective job applicants. For our disclosures applicable to California residents with whom we interact in those contexts, please see our Supplemental Privacy Policy for Residents of Certain U.S. States, California Business Contact Privacy Policy, and California Applicant Privacy Policy.

‍

If you have a disability and need to access this policy in an alternative format, please contact us at privacy@tapcheck.com.

‍

‍A. Definitions

“Personal Information” means information that information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular Employee or household. Personal Information includes Sensitive Personal Information, but does not include protected health information covered by the Health Insurance Portability and Accountability Act (“HIPAA”), nonpublic personal information under the Gramm-Leach-Bliley Act (“GLBA”), or any other information that falls outside of the scope of the CCPA.
“Sensitive Personal Information” includes Personal Information that reveals an Employee’s (i) social security number, driver’s license, state identification card, or passport number, (ii) account log-in, financial account, debit card, or credit card number in combination with any required security or access code, (iii) precise geolocation, (iv) racial or ethnic origin, citizenship or immigration status, religious or philosophical beliefs, or union membership, (v) mail, email, and text messages contents, unless Tapcheck is the intended recipient of the communication, (vi) genetic data, or (vii) neural data. Sensitive Personal Information also includes biometric information for the purpose of uniquely identifying an Employee, Personal Information concerning an Employee’s health, and Personal Information concerning the Employee’s sex life or sexual orientation.
“Third Party” means any non-affiliated person that is not a Vendor.
“Vendor” means a service provider or contractor which collects, stores, or otherwise handles data for us and is bound by contractual obligations to use your Personal Information only as directed by us.
Other CCPA Definitions: as used in this Policy, the terms “Collect,” “Processing,” “Sale,” and “Share,” and other terms defined in the CCPA and their conjugates, have the meanings afforded to them in the CCPA, whether or not such terms are capitalized herein, unless contrary to the meaning thereof.

‍

B. Collection of Personal Information

‍We, and our Vendors, collect and have collected in the past 12 months the following categories of Personal Information about Employees:

Identifiers, such as name, alias, postal address, unique personal identifier, online identifiers, Internet Protocol address, email address, account name, signatures, copies of personally identifying documents, telephone number, or other similar identifiers.
Financial Information, including bank account number, credit card number, debit card number, or any other financial information.
Characteristics of Protected Classifications under state or federal law, such as age, gender, and marital status.
Internet or Other Network Information, such as browsing history, search history, information regarding your interactions with our websites or advertisements.
Geolocation Data, such as device location that is more granular than a city or town.
Audio, Electronic, Visual, and Similar Information, such as call and video recordings.
Professional or Employment-Related Information, such as work history and prior employer.
Inferences drawn from any of the Personal Information listed above to create a profile or summary about, for example, an individual’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. This category includes Sensitive Data Inferences, which are inferences made by us based on Personal Information, alone or in combination with other data, to indicate your Sensitive Personal Information.
Sensitive Personal Information, including:

Personal Information that reveals your:
- Social security, driver’s license, state identification card, or passport number;
- Precise geolocation that is used or intended to be used to locate you within a small geographic area (less than a radius of 1,850 feet);
- Racial or ethnic origin, religious or philosophical beliefs, or union membership;
- Contents of an Employee’s email and text messages, unless the business is the intended recipient thereof; or
Personal Information Collected and analyzed concerning an Employee’s health; and
Personal Information Collected and analyzed concerning an Employee’s sexual orientation.

‍

C. Purposes for Collecting, Processing, and Disclosing Employee Personal Information

‍We, and our Vendors, collect, process, and disclose the Employee Personal Information described in this Policy to:

Manage your Employee relationship with us;
Manage and provide compensation, payroll, tax, and benefits planning, enrollment, and administration;
Provide you access to Tapcheck systems, networks, databases, equipment, and facilities;
Manage our workforce and its performance, including personnel planning, productivity monitoring, and evaluation;
Manage workforce development, education, training, and certification;
Monitor, maintain, and secure Tapcheck systems, networks, databases, equipment, and facilities;
Authenticate your identity and verify your access permissions;
Arrange, confirm, and monitor work-related travel, events, meetings, and other activities;
Assess your working capacity or the diagnosis, treatment, or care of a condition impacting your fitness for work, and other preventative or occupational medicine purposes (including work-related injury and illness reporting);
Contact and communicate with you regarding your employment, job performance, compensation, and benefits, or in the event of a natural disaster or other emergency;
Contact and communicate with your designated emergency contact(s) in the event of an emergency, illness, or absence; and
Contact and communicate with your dependents and designated beneficiaries in the event of an emergency or in connection with your benefits.

In addition to the purposes identified above, Tapcheck may use and disclose any and all Employee Personal Information that we collect as necessary or appropriate to:

Comply with laws and regulations, including (without limitation) applicable tax, health and safety, anti-discrimination, immigration, labor and employment, and social welfare laws;
Monitor, investigate, and enforce compliance with and potential breaches of Tapcheck policies and procedures and legal and regulatory requirements;
Comply with civil, criminal, judicial, or regulatory inquiries, investigations, subpoenas, or summons; and
Exercise or defend the legal rights of Tapcheck and its employees, affiliates, customers, contractors, and agents.

To the extent we collect Sensitive Personal Information about Employees, we use and disclose it only for purposes permitted by the CCPA regulations.

‍

‍Retention of Employee Personal Information

‍We retain your Personal Information for the duration of your Employee relationship with us, as applicable, and longer as may be required by applicable laws or necessary for our legitimate business purposes listed in Section C.

‍

‍Sale and Sharing of Employee Personal Information

‍We generally do not Sell or Share, and we have not Sold or Shared in the past 12 months, the Personal Information we collect about Employees. Subject to some exceptions, a “Sale” is the disclosure of Personal Information to a Third Party for monetary or other valuable consideration, and a “Share” is the disclosure of Personal Information to a Third Party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration.

‍

However, we do Sell and Share, and we have Sold and Shared in the past 12 months, Internet and other network information collected via cookies and other tracking technologies (“Cookies”), such as browsing history, search history, and information regarding your interactions with our websites or advertisements. We Sell and Share this category of Personal Information to third party marketing and analytics providers for marketing and analytics purposes.

‍

You have the right to opt-out of the Sale and Sharing of your Personal Information and can submit a request to opt out by visiting our Cookie Preference Center and clicking “Reject All” to opt out of non-strictly necessary Cookies.

‍

Please note that Tapcheck does not Sell or Share Personal Information that we collect about you in other contexts. For example, Tapcheck does not Sell or Share your name, contact information, employment-related information, or other information we may collect about you outside of the Cookie context.

‍

We also do not knowingly Sell or Share the Personal Information of consumers under the age of 16.

‍

‍D. How We Disclose Employee Personal Information

‍We disclose and have disclosed in the past 12 months, the categories of Personal Information listed in Section B in the following contexts:

Between Our Corporate Group Entities. Tapcheck discloses Personal Information collected through our Services to other entities within our corporate group, including Tapcheck’s subsidiaries, Tapcheck Funding LLC and Tapcheck Funding SPV II LLC.
To our Vendors. Tapcheck discloses Personal Information to vendors who act on our behalf. For example, we use vendors to provide us with benefits and wellness services, website services, as well as other products and services, such as web hosting, data analysis, customer service, infrastructure services, technology services, email delivery services, legal services, and other similar services. These vendors may need Personal Information about you to perform their obligations. We impose contractual limitations on our vendors’ use of Personal Information they collect in conjunction with providing services to us.
To Third Parties for Marketing and Analytics Purposes. Tapcheck discloses Internet and other network information collected via Cookies, such as browsing history, search history, and information regarding your interactions with our websites or advertisements, to third party marketing and analytics providers for marketing and analytics purposes.
As Described in a Privacy Notice or With Your Consent. We may disclose Personal Information as described in any privacy notice we provide to you, or with your consent if we obtain it from you in a particular context.
In Aggregate or De-Identified Form. We may aggregate or de-identify the Personal Information we collect, and we may disclose aggregated and/or de-identified information to our vendors, and to third parties for our business operational purposes and for any other purposes permitted by applicable law. When we do so, we take reasonable measures to ensure that the information cannot be associated with an Employee or household, and we maintain and use the information in deidentified form. We will not attempt to reidentify the information, except that we may do so solely to determine whether our deidentification processes satisfy applicable legal requirements. After it has been deidentified, the information is no longer Personal Information and is not subject to this Policy.

We may also disclose Personal Information in the following contexts:

As Part of a Business Transfer. Your Personal Information may be transferred to a successor organization if, for example, we transfer the ownership or operation of our business to another organization, if we merge with or are acquired by another organization, or if we liquidate our assets. In negotiating with a third party about entering into such an arrangement, we may need to disclose your Personal Information. In such cases, we will take reasonable measures to protect the Personal Information we disclose, and we will seek assurances that the successor organization’s use of your Personal Information will still be subject to this Policy and the privacy preferences you have expressed to us.
For Compliance with Laws and Protection of Our Rights and the Rights of Others. We may disclose Personal Information when we, in good faith, believe disclosure is appropriate to comply with the law, a court order, or a subpoena. We may also disclose Personal Information to prevent or investigate a possible crime, such as fraud or identity theft; to protect the security of our services; to enforce or apply our Terms of Use or other agreements; or to protect our own rights or property or the rights, property, or safety of our users or others.

‍

E. Sources of Personal Information

‍We collect Personal Information from the following sources:

Directly From You. Tapcheck collects the Personal Information you manually provide to us in the course of your employment. Types of Personal Information we may collect directly from you include your name, username and password, information, email address, phone number, emergency contact names and contact information, and related details.
From Vendors & Third Parties. Tapcheck collects Personal Information from our vendors and from third parties who disclose Personal Information to us. For example, this may include information we collect from professional organizations, educational institutions, social media platforms, and vendors and third parties that help us screen and onboard individuals for hiring purposes.
Via Cookies & Other Tracking Technologies. Tapcheck collects Personal Information passively via cookies and other tracking technologies (collectively, “Cookies”). This information typically includes your IP address, the identity of your Internet service provider, the name and version of your operating system, the name and version of your browser, the date and time of your visit, your geolocation, and the pages you visit. For example, we use Google Analytics, a web analytics tool that helps us understand how visitors engage with our Services. To learn more about Google Analytics, visit http://www.google.com/intl/en/analytics/privacyoverview.html.

‍

F. Data Subject Rights

‍Employees have the following rights regarding our collection and use of your Personal Information, subject to certain exceptions.

Rights That Require Verification. Employees may exercise the data subject rights below by contacting us at privacy@tapcheck.com, by calling 866-697-6016, or by clicking here. You may also authorize an agent to make data subject requests on your behalf. In such instances, authorized agents may use the same methods as you to submit the requests on your behalf. To verify your identity and protect your Personal Information, we may ask the requestor to provide information that will enable us to verify your identity in order to comply with your data subject request, such as asking your agent to provide proof of signed permission from you, or asking you to confirm with us directly that you provided the agent with permission to submit the request. In some instances, we may decline to honor your request if an exception applies under applicable law. We will respond to your request consistent with applicable law.
- Right to Know: You have the right to know the following details about our privacy practices at or before the point of collection. We have provided such information in this Policy. You may also request that we provide you with information about the following aspects of how we have handled your Personal Information specifically in the 12 months preceding your request:
  - The categories of Personal Information we have collected about you;
  - The categories of sources from which we collected such Personal Information;
  - The business or commercial purpose for collecting, Selling, or Sharing Personal Information about you;
  - The categories of Personal Information about you that we disclosed and the categories of Third Parties to whom we disclosed such Personal Information;
  - The categories of Personal Information about you that we Sold or Shared, or used for targeted advertising purposes, and the categories of Third Parties with whom we Sold or Shared such Personal Information;
  - If we collect Sensitive Personal Information, the categories of Sensitive Personal Information to be collected, the purposes for which it is collected or used, and whether that information is Sold or Shared; and
  - The length of time we intend to retain each category of Personal Information, or if that is not possible, the criteria used to determine that period.‍
- Right to Deletion: You may request that we delete any Personal Information we collected from you, subject to certain exceptions.‍
- Right to Correction: You may request that we correct any inaccurate Personal Information we maintain about you. ‍
- Right to Access Specific Pieces of Personal Information: You may ask to obtain the specific pieces of Personal Information we have collected about you. You may not exercise this right more than two times in a calendar year.

Rights that Do Not Require Verification. You may exercise these rights through the “Your Privacy Choices” link below or at the footer of every page on our website. The “Your Privacy Choices” link will open our Cookie Preference Center, and you can then click “Reject All” to opt out of Sale and Sharing of Personal Information.
- Right to Opt-Out of Sale: You have the right to opt out of the Sale of your Personal Information.
- Right to Opt-Out of the Sharing of Your Personal Information or the Use of Your Personal Information for Targeted Advertising: You have the right to opt-out of the Sharing of your personal information or our use of your Personal Information for targeted advertising purposes.

Your Privacy Choices

Opt-Out Preference Signals. Some web browsers or devices offer settings where you may pre-set a signal to websites that you do not want to have your online activity and behavior tracked, sold, shared, or otherwise used for targeted advertising purposes. We recognize the opt-out preference signals that we are required to recognize for compliance with applicable law. Where required by U.S. Privacy Laws, we treat the opt-out preference signals we are required to comply with as a valid request to opt-out of sale, sharing, and processing for purposes of targeted advertising, as applicable, for the browser or device through which the signal is sent and any consumer profile we have associated with that browser or device, including pseudonymous profiles. Further, if we know the identity of the consumer from the opt-out preference signal, we will also treat the opt-out preference signal as a valid request to opt out of sale and sharing for such consumer. Consumers may use opt-out preference signals by downloading or otherwise activating them for use on supported browsers and setting them to send opt-out preference signals to websites they visit. Please note, however, that our sites are not currently configured to recognize the “Do Not Track” signal.
Non-Discrimination. We will not discriminate against you for exercising your data subject rights. For example, we will not make hiring, firing, promotional, or disciplinary decisions, or otherwise retaliate against you, as a result of you exercising your data subject rights. Where permitted, we may also deny your data subject rights request if an applicable exception applies.

G. Steps We Take to Safeguard Employee Personal Information

We maintain reasonable administrative, physical, and technological measures to protect the confidentiality and security of your Personal Information. Unfortunately, no website, app, or database is completely secure or “hacker proof.” We therefore cannot guarantee that your Personal Information will not be disclosed, misused, or lost by accident or by the unauthorized acts of others.

‍H. Financial Incentives

‍We do not provide financial incentives to California Employees who allow us to collect, retain, Sell, or Share their Personal Information. We will describe such programs to you if and when we offer them to you.

‍

‍I. Changes to This Policy

‍This Policy describes Tapcheck’s current policies and practices with regard to Personal Information we collect about Employees. We may also update our privacy practices with respect to Employee Personal Information from time to time to address changes in our business practices and applicable legal requirements. As a result of these changes (or changes in the law), we may need to update or revise this Policy. Accordingly, we reserve the right to update or modify this Policy at any time.

‍

‍J. Contact Us

‍More information about our general privacy practices can be found in our Privacy Policy. If you have any questions about this Policy or our privacy practices, please contact us at privacy@tapcheck.com.

‍

California Applicant Privacy Policy

‍

Last Updated: February 18, 2026

‍

This California Applicant Privacy Policy (“Policy”) provides information about how Tapcheck Inc. (“Tapcheck,” “we,” “us,” or “our”) collects, uses, and discloses Personal Information about California job applicants and prospective job applicants who interact with Tapcheck in an employment-related capacity (collectively, “Applicants”). We have adopted this Policy to explain what Personal Information may be collected about you, how we use this information, and under what circumstances we may disclose this information, in accordance with the California Consumer Privacy Act (“CCPA”).

‍

Please note that this Policy does not apply to individuals with whom we interact in a business-related context or a consumer context. It also does not apply to Tapcheck employees and independent contractors. For our disclosures applicable to California residents with whom we interact in those contexts, please see our Supplemental Privacy Policy for Residents of Certain U.S. States, California Business Contact Privacy Policy, and California Employee Privacy Policy.

‍

If you have a disability and need to access this policy in an alternative format, please contact us at privacy@tapcheck.com.

‍

A. Definitions

“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular Applicant or household. Personal Information includes Sensitive Personal Information, but does not include protected health information covered by the Health Insurance Portability and Accountability Act (“HIPAA”), nonpublic personal information under the Gramm-Leach-Bliley Act (“GLBA”), or any other information that falls outside of the scope of the CCPA.
“Sensitive Personal Information” includes Personal Information that reveals an Applicant’s (i) social security number, driver’s license, state identification card, or passport number, (ii) account log-in, financial account, debit card, or credit card number in combination with any required security or access code, (iii) precise geolocation, (iv) racial or ethnic origin, citizenship or immigration status, religious or philosophical beliefs, or union membership, (v) mail, email, and text messages contents, unless Tapcheck is the intended recipient of the communication, (vi) genetic data, or (vii) neural data. Sensitive Personal Information also includes biometric information for the purpose of uniquely identifying an Applicant, Personal Information concerning an Applicant’s health, and Personal Information concerning the Applicant’s sex life or sexual orientation.
“Third Party” means any non-affiliated person that is not a Vendor.
“Vendor” means a service provider or contractor which collects, stores, or otherwise handles data for us and is bound by contractual obligations to use your Personal Information only as directed by us.
“Other CCPA Definitions:” as used in this Policy, the terms “Collect,” “Processing,” “Sale,” and “Share,” and other terms defined in the CCPA and their conjugates, have the meanings afforded to them in the CCPA, whether or not such terms are capitalized herein, unless contrary to the meaning thereof.

‍

B. Collection of Personal Information

We, and our Vendors, collect and have collected in the past 12 months the following categories of Personal Information about Applicants:

Identifiers, such as name, alias, postal address, unique personal identifier, online identifiers, Internet Protocol address, email address, account name, signatures, copies of personally identifying documents, telephone number, or other similar identifiers.
Financial Information, including bank account number, credit card number, debit card number, or any other financial information.
Characteristics of Protected Classifications under state or federal law, such as age, gender, and marital status.
Internet or Other Network Information, such as browsing history, search history, information regarding your interactions with our websites or advertisements.
Geolocation Data, such as device location that is more granular than a city or town.
Audio, Electronic, Visual, and Similar Information, such as call and video recordings.
Professional or Employment-Related Information, such as work history and prior employer.
Inferences drawn from any of the Personal Information listed above to create a profile or summary about, for example, an individual’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. This category includes Sensitive Data Inferences, which are inferences made by us based on Personal Information, alone or in combination with other data, to indicate your Sensitive Personal Information.
Sensitive Personal Information, including:

Personal Information that reveals your:
- Social security, driver’s license, state identification card, or passport number;
- Racial or ethnic origin;
Personal Information Collected and analyzed concerning an Applicant’s health; and
Personal Information Collected and analyzed concerning an Applicant’s sexual orientation.

‍

C. Purposes for Collecting, Processing, and Disclosing Applicant Personal Information

We, and our Vendors, collect, process, and disclose the Applicant Personal Information described in this Policy to:

Evaluate a potential employee relationship with you;
Perform background checks and verify past employment, educational history, professional standing, and other qualifications;
Evaluate, determine, and arrange compensation, payroll, and benefits;
Assess your fitness and physical capacity for work; and
Contact you regarding your application and potential employee relationship with us.

In addition to the purposes identified above, Tapcheck may use and disclose any and all Applicant Personal Information that we collect as necessary or appropriate to:

Comply with laws and regulations, including (without limitation) applicable tax, health and safety, anti-discrimination, immigration, labor and employment, and social welfare laws;
Monitor, investigate, and enforce compliance with and potential breaches of Tapcheck policies and procedures and legal and regulatory requirements;
Comply with civil, criminal, judicial, or regulatory inquiries, investigations, subpoenas, or summons; and
Exercise or defend the legal rights of Tapcheck and its employees, affiliates, customers, contractors, and agents.

To the extent we collect Sensitive Personal Information about Applicants, we use and disclose it only for purposes permitted by the CCPA regulations.

‍

Retention of Applicant Personal Information

We retain your Personal Information for the duration of your Applicant relationship with us, as applicable, and longer as may be required by applicable laws or necessary for our legitimate business purposes listed in Section C.

‍

Sale and Sharing of Applicant Personal Information

We generally do not Sell or Share, and have not Sold or Shared in the past 12 months, the Personal Information we collect about Applicants. Subject to some exceptions, a “Sale” is the disclosure of Personal Information to a Third Party for monetary or other valuable consideration, and a “Share” is the disclosure of Personal Information to a Third Party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration.

‍

Please note that Tapcheck does not Sell or Share Personal Information that we collect about you in other contexts. For example, Tapcheck does not Sell or Share your name, contact information, application-related information, or other information we may collect about you outside of the Cookie context.

We also do not knowingly Sell or Share the Personal Information of consumers under the age of 16.

‍

D. How We Disclose Applicant Personal Information

We disclose and have disclosed in the past 12 months, the categories of Personal Information listed in Section B in the following contexts:

Between Our Corporate Group Entities. Tapcheck discloses Personal Information collected through our Services to other entities within our corporate group, including Tapcheck’s subsidiaries, Tapcheck Funding LLC and Tapcheck Funding SPV II LLC.
To our Vendors. Tapcheck discloses Personal Information to vendors who act on our behalf. For example, we use vendors to provide us with benefits and wellness services, website services, as well as other products and services, such as web hosting, data analysis, customer service, infrastructure services, technology services, email delivery services, legal services, and other similar services. These vendors may need Personal Information about you to perform their obligations. We impose contractual limitations on our vendors’ use of Personal Information they collect in conjunction with providing services to us.
As Described in a Privacy Notice or With Your Consent. We may disclose Personal Information as described in any privacy notice we provide to you, or with your consent if we obtain it from you in a particular context.
In Aggregate or De-Identified Form. We may aggregate or de-identify the Personal Information we collect, and we may disclose aggregated and/or de-identified information to our vendors, and to third parties for our business operational purposes and for any other purposes permitted by applicable law. When we do so, we take reasonable measures to ensure that the information cannot be associated with an Applicant or household, and we maintain and use the information in deidentified form. We will not attempt to reidentify the information, except that we may do so solely to determine whether our deidentification processes satisfy applicable legal requirements. After it has been deidentified, the information is no longer Personal Information and is not subject to this Policy.

We may also disclose Personal Information in the following contexts:

As Part of a Business Transfer. Your Personal Information may be transferred to a successor organization if, for example, we transfer the ownership or operation of our business to another organization, if we merge with or are acquired by another organization, or if we liquidate our assets. In negotiating with a third party about entering into such an arrangement, we may need to disclose your Personal Information. In such cases, we will take reasonable measures to protect the Personal Information we disclose, and we will seek assurances that the successor organization’s use of your Personal Information will still be subject to this Policy and the privacy preferences you have expressed to us.
For Compliance with Laws and Protection of Our Rights and the Rights of Others. We may disclose Personal Information when we, in good faith, believe disclosure is appropriate to comply with the law, a court order, or a subpoena. We may also disclose Personal Information to prevent or investigate a possible crime, such as fraud or identity theft; to protect the security of our services; to enforce or apply our Terms of Use or other agreements; or to protect our own rights or property or the rights, property, or safety of our users or others.

‍

E. Sources of Personal Information

We collect Personal Information from the following sources:

Directly From You. Tapcheck collects the Personal Information you manually provide to us in the course of your application process. Types of Personal Information we may collect directly from you include your name, username and password, information, email address, phone number, resume, cover letter, prior employment and educational history, and related details.
From Vendors & Third Parties. Tapcheck collects Personal Information from our vendors and from third parties who disclose Personal Information to us. For example, this may include information we collect from professional organizations, educational institutions, social media platforms, and vendors and third parties that help us screen and onboard individuals for hiring purposes.
Via Cookies & Other Tracking Technologies. Tapcheck collects Personal Information passively via cookies and other tracking technologies (collectively, “Cookies”). This information typically includes your IP address, the identity of your Internet service provider, the name and version of your operating system, the name and version of your browser, the date and time of your visit, your geolocation, and the pages you visit. For example, we use Google Analytics, a web analytics tool that helps us understand how visitors engage with our Services. To learn more about Google Analytics, visit http://www.google.com/intl/en/analytics/privacyoverview.html.

‍

F. Your Privacy Rights

Applicants have the following rights regarding our collection and use of your Personal Information, subject to certain exceptions.

Rights That Require Verification. Applicants may exercise the data subject rights below by contacting us at privacy@tapcheck.com, by calling 866-697-6016, or by clicking here. You may also authorize an agent to make data subject requests on your behalf. In such instances, authorized agents may use the same methods as you to submit the requests on your behalf. To verify your identity and protect your Personal Information, we may ask the requestor to provide information that will enable us to verify your identity in order to comply with your data subject request, such as asking your agent to provide proof of signed permission from you, or asking you to confirm with us directly that you provided the agent with permission to submit the request. In some instances, we may decline to honor your request if an exception applies under applicable law. We will respond to your request consistent with applicable law.
- Right to Know: You have the right to know the following details about our privacy practices at or before the point of collection. We have provided such information in this Policy. You may also request that we provide you with information about the following aspects of how we have handled your Personal Information specifically in the 12 months preceding your request:
  - The categories of Personal Information we have collected about you;
  - The categories of sources from which we collected such Personal Information;
  - The business or commercial purpose for collecting, Selling, or Sharing Personal Information about you;
  - The categories of Personal Information about you that we disclosed and the categories of Third Parties to whom we disclosed such Personal Information;
  - The categories of Personal Information about you that we Sold or Shared, or used for targeted advertising purposes, and the categories of Third Parties with whom we Sold or Shared such Personal Information;
  - If we collect Sensitive Personal Information, the categories of Sensitive Personal Information to be collected, the purposes for which it is collected or used, and whether that information is Sold or Shared; and
  - The length of time we intend to retain each category of Personal Information, or if that is not possible, the criteria used to determine that period.‍
- Right to Deletion: You may request that we delete any Personal Information we collected from you, subject to certain exceptions.‍
- Right to Correction: You may request that we correct any inaccurate Personal Information we maintain about you.‍
- Right to Access Specific Pieces of Personal Information: You may ask to obtain the specific pieces of Personal Information we have collected about you. You may not exercise this right more than two times in a calendar year.

Rights that Do Not Require Verification. You may exercise these rights through the “Your Privacy Choices” link below or at the footer of every page on our website. The “Your Privacy Choices” link will open our Cookie Preference Center, and you can then click “Reject All” to opt out of Sale and Sharing of Personal Information.
- Right to Opt-Out of Sale: You have the right to opt out of the Sale of your Personal Information.
- Right to Opt-Out of the Sharing of Your Personal Information or the Use of Your Personal Information for Targeted Advertising: You have the right to opt-out of the Sharing of your personal information or our use of your Personal Information for targeted advertising purposes.

Your Privacy Choices

Opt-Out Preference Signals. Some web browsers or devices offer settings where you may pre-set a signal to websites that you do not want to have your online activity and behavior tracked, sold, shared, or otherwise used for targeted advertising purposes. We recognize the opt-out preference signals that we are required to recognize for compliance with applicable law. Where required by U.S. Privacy Laws, we treat the opt-out preference signals we are required to comply with as a valid request to opt-out of sale, sharing, and processing for purposes of targeted advertising, as applicable, for the browser or device through which the signal is sent and any consumer profile we have associated with that browser or device, including pseudonymous profiles. Further, if we know the identity of the consumer from the opt-out preference signal, we will also treat the opt-out preference signal as a valid request to opt out of sale and sharing for such consumer. Consumers may use opt-out preference signals by downloading or otherwise activating them for use on supported browsers and setting them to send opt-out preference signals to websites they visit. Please note, however, that our sites are not currently configured to recognize the “Do Not Track” signal.
Non-Discrimination. We will not discriminate against you for exercising your data subject rights. For example, we will not make hiring, firing, promotional, or disciplinary decisions, or otherwise retaliate against you, as a result of you exercising your data subject rights. Where permitted, we may also deny your data subject rights request if an applicable exception applies.

G. Steps We Take to Safeguard Applicant Personal Information

‍

H. Financial Incentives

‍

We do not provide financial incentives to California Applicants who allow us to collect, retain, Sell, or Share their Personal Information. We will describe such programs to you if and when we offer them to you.

I. Changes to This Policy

‍

This Policy describes Tapcheck’s current policies and practices with regard to Personal Information we collect about Applicants. We may also update our privacy practices with respect to Applicant Personal Information from time to time to address changes in our business practices and applicable legal requirements. As a result of these changes (or changes in the law), we may need to update or revise this Policy. Accordingly, we reserve the right to update or modify this Policy at any time.

J. Contact Us

‍

More information about our general privacy practices can be found in our Privacy Policy. If you have any questions about this Policy or our privacy practices, please contact us at privacy@tapcheck.com.

Table of contents

Types of Personal Information We Collect

‍Sources of Personal Information

‍How We Use Personal Information

Steps We Take to Safeguard Your Personal Information‍

‍How We Disclose Personal Information

Children Under the Age of Thirteen

‍Links to Other Sites

‍Changes to this Policy

‍Contact Us

‍Supplemental Privacy Policy for Residents of Certain U.S. States

‍A. Definitions

‍B. Collection of Personal Information

‍C. Purposes for Processing and Disclosing Personal Information

‍Retention of Personal Information.

‍Sale & Sharing of Personal Information.

‍D. Disclosure of Personal Information

E. Sources of Personal Information

F. Data Subject Rights

G. Other Disclosures

H. Changes and Contact Information

‍California Business Contact Privacy Policy

A. Definitions

B. Collection of Personal Information

‍C. Purposes for Processing and Disclosing Personal Information

Retention of Personal Information.

‍Sale & Sharing of Personal Information.

‍D. Disclosure of Personal Information

E. Sources of Personal Information

F. Data Subject Rights

G. Steps We Take to Safeguard Business Contact Personal Information

‍H. Other Disclosures

I. Changes and Contact Information

California Employee Privacy Policy

‍A. Definitions

B. Collection of Personal Information

C. Purposes for Collecting, Processing, and Disclosing Employee Personal Information

‍Retention of Employee Personal Information

‍Sale and Sharing of Employee Personal Information

‍D. How We Disclose Employee Personal Information

E. Sources of Personal Information

F. Data Subject Rights

G. Steps We Take to Safeguard Employee Personal Information

‍H. Financial Incentives

‍I. Changes to This Policy

‍J. Contact Us

California Applicant Privacy Policy

A. Definitions

B. Collection of Personal Information

C. Purposes for Collecting, Processing, and Disclosing Applicant Personal Information

Retention of Applicant Personal Information

Sale and Sharing of Applicant Personal Information

D. How We Disclose Applicant Personal Information

E. Sources of Personal Information

F. Your Privacy Rights

G. Steps We Take to Safeguard Applicant Personal Information

H. Financial Incentives

I. Changes to This Policy

J. Contact Us