Privacy Policy

Effective Date: 08/28/2025

1) Introduction
This Privacy Policy explains how Next Cash LLC (“Next Cash,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards personal information when you use the Next Cash mobile application (the “App”). By using the App, you agree to the practices described in this Policy. If you do not agree, please do not use the App.

This Policy is written to reflect U.S. laws and industry best practices, including the Federal Trade Commission Act, Gramm-Leach-Bliley Act (GLBA) for financial privacy, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and other state privacy laws (e.g., Virginia, Colorado, Connecticut, Utah). Some rights described below may not apply to GLBA-regulated data, to non-residents of certain states, or where an exemption otherwise applies.

2) Company Information
Next Cash LLC, a duly incorporated company with its registered office at:
525 Randall Ave Ste 100
Cheyenne, Wyoming 82001-2772 USA
Email: support@nextcash.us

3) Scope & Audience
This Policy applies to personal information we process about App users, applicants, and account holders. It does not cover workforce, job applicants, or business-to-business contacts, which may be governed by separate notices. This Policy also does not apply to third parties that you access via links or integrations from within the App; review their privacy policies separately.

4) “Notice at Collection” (California/CPRA & Similar U.S. State Laws)
Categories of Personal Information We Collect:
• Identifiers (e.g., name, email, phone number, date of birth, address, government-issued IDs where legally required, device identifiers).
• Financial Information (e.g., income, employment details, pay schedule, bank account/routing numbers, repayment and transaction history).
• Sensitive Personal Information (SPI) (e.g., SSN if legally required for identity verification and fraud prevention, precise identity documents, account log-in credentials). We use SPI only for permitted purposes (e.g., providing the service, security, legal compliance) and do not use it to infer characteristics.
• Internet/Technical Data (e.g., IP address, device type, OS, mobile carrier, App usage data, crash logs).
• Geolocation (approximate, to support state-specific compliance and fraud prevention).
• In-App Activity & Preferences (features used, settings).
• User Content & Communications (support requests, feedback).
• Inferences/Eligibility Signals (automated or manual assessments to support eligibility decisions and fraud screening).

Sources:
• Directly from you (application forms, in-App inputs, uploads).
• Your device and interactions with the App (automatic collection).
• Service providers and partners (identity verification, fraud prevention, payment processors, analytics).
• Public records and lawful third-party sources where permitted.

Purposes of Use:
• Provide, operate, and maintain the App and cash-advance features.
• Verify identity, assess eligibility, prevent fraud and financial crimes.
• Process and service transactions; facilitate funding and repayments.
• Communicate about your account, terms, and updates.
• Comply with law, industry standards, and contractual obligations.
• Improve the App, perform analytics, and ensure security and integrity.
• Provide customer support and handle disputes.
• Offer rewards/features you opt into (see “Financial Incentives & Rewards”).

Retention:
We retain personal information for as long as reasonably necessary to provide the service and fulfill the purposes above, including to comply with legal, tax, accounting, and regulatory obligations, resolve disputes, and enforce agreements. Typical retention periods include:
• Account, KYC, and transaction records: the life of the account plus up to 7 years after closure.
• Compliance and risk-management records: up to 7 years (or longer if legally required).
• Marketing preferences and communications: up to 3 years after last interaction.
• Device and analytics data: up to 24 months, then de-identified or deleted.
Actual retention may vary based on legal requirements, investigations, litigation holds, or internal policies.

Selling/Sharing:
• We do not sell personal information.
• We do not share personal information for cross-context behavioral advertising (as defined under CPRA).
If that changes, we will update this Policy and provide required opt-out mechanisms (including honoring Global Privacy Control signals where applicable).

5) Information We Collect in More Detail
• Identity & Contact Data: name, email, phone, address, date of birth, government-issued IDs (where required), selfie/ID images for verification if you choose to provide them.
• Financial & Transactional Data: income, employer, pay schedule, bank account/routing numbers, repayment history, offer acceptance, transfers and disbursements, charge/fee assessments.
• Sensitive Personal Information (SPI): SSN, government ID numbers, account log-in credentials. We use SPI only for limited, necessary purposes (fraud prevention, compliance, servicing) and do not use it for targeted advertising or profiling unrelated to providing the App.
• Device/Usage Data: IP, device identifiers, device type, OS, app version, diagnostics, performance metrics, crash logs, in-App actions.
• Location Data: approximate location derived from IP or device, used for compliance and fraud risk.
• Communications & Content: support messages, uploaded documents, survey responses, dispute details.

6) How We Use Personal Information
• App Delivery & Account Services: create and manage accounts, process applications, provide and service cash advances, enable repayments and funding.
• Eligibility & Risk: verify identity, evaluate eligibility, reduce fraud and abuse, secure accounts.
• Operations & Improvements: maintain and enhance the App, conduct testing, quality assurance, and analytics.
• Compliance & Legal: satisfy KYC/AML obligations, respond to lawful requests, enforce terms.
• Communications: send transaction alerts, policy updates, and service-related notices. You may opt out of non-essential marketing communications.
• Rewards & Features You Opt Into: administer in-App rewards, point accrual and redemption, waitlists, and card programs.

7) Cookies, SDKs, and Similar Technologies
We may use mobile SDKs and similar technologies to deliver core functionality (e.g., authentication), measure performance, detect fraud, and understand App usage. You can manage certain permissions in your device settings (e.g., Location, Camera, Photos). Because this is a mobile App, browser-based cookie controls may be limited.

8) How We Disclose Information
We disclose personal information to:
• Service Providers/Processors: identity verification, KYC/AML, fraud prevention, cloud hosting, payment processing, analytics, customer support, communications.
• Financial Partners: banks, payment networks, and licensed lenders when needed to evaluate, originate, fund, or service products you request.
• Professional Advisors: auditors, accountants, lawyers, and consultants bound by confidentiality.
• Authorities & Law Enforcement: to comply with law, legal process, or to protect rights, safety, and property.
• Business Transfers: in connection with a merger, acquisition, reorganization, or sale of assets.
We require recipients to protect your information and use it only for the purposes disclosed.

9) Your Choices & Controls
• Marketing Emails/SMS: You can opt out of promotional emails by following unsubscribe instructions. For SMS, reply STOP to opt out of non-essential messages. Transactional or legally required messages may continue.
• Device Permissions: Manage Location, Camera, Photos, and Notifications via your device settings. Some features may not function without certain permissions.
• Do Not Track & Global Privacy Control: Browser “Do Not Track” is not consistently honored industry-wide. If we ever engage in “sale” or “sharing” under CPRA, we will honor legally recognized opt-out signals (e.g., Global Privacy Control) as required.
• Analytics Preferences: Where available, we may provide in-App toggles for optional analytics.

10) State Privacy Rights (California, Virginia, Colorado, Connecticut, Utah)
Depending on your state of residence, and subject to exemptions (e.g., GLBA-covered data), you may have rights to:
• Access/Know: request details about personal information we collected about you.
• Delete: request deletion of personal information we collected from you.
• Correct: request correction of inaccurate personal information.
• Portability: obtain a portable copy of certain personal information.
• Opt Out: of “sale,” “sharing” (cross-context behavioral advertising), or certain profiling/automated decision-making, where applicable.
• Appeal: if we deny your request (e.g., Virginia/Colorado/Connecticut).

How to Exercise Your Rights:
Email support@nextcash.us with the subject line “Privacy Request” and specify your state and request type (Access/Deletion/Correction/etc.). We will verify your identity by matching information you provide with the information we maintain. If we cannot verify, we may request additional information or deny the request. Authorized agents may submit requests with appropriate documentation (e.g., signed permission or a valid power of attorney). We will respond within the time period required by applicable law.

Note on GLBA Data:
Certain personal information processed in connection with providing financial products and services is subject to GLBA and may be exempt from some state privacy rights. We will apply the appropriate law based on the data and context.

Nevada “Do Not Sell”:
We do not sell personal information. Nevada residents may still submit a “do not sell” request to support@nextcash.us.

California “Shine the Light”:
We do not disclose personal information to third parties for their own direct marketing.

11) Automated Decision-Making & Profiling
We may use automated tools and risk models to support identity verification, fraud detection, and eligibility assessments. These processes help us deliver fast decisions and protect users. You can contact us to learn more about how these tools function in a given context. Where required by law, we will provide additional information or options regarding profiling and automated decisions.

12) Financial Incentives & Rewards (CCPA/CPRA)
We may offer rewards, points, promotions, or other benefits (collectively, “Rewards Programs”) that can constitute a “financial incentive” under California law. Participation is voluntary and subject to the applicable program terms. Categories of personal information involved may include identifiers, contact data, in-App activity, and transaction history to administer accrual, redemption, and fraud prevention.
• How to Opt In/Out: Join by following the in-App prompts; you may withdraw at any time via App settings or by contacting support@nextcash.us.
• Valuation Method: We use a reasonable, good-faith estimate of the value of personal information based on expenses associated with the program (e.g., technology, operations, fraud controls) and anticipated benefits to us (e.g., increased engagement).
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights, though certain features may require specific data to function.

13) Children’s Privacy (COPPA)
The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us at support@nextcash.us and we will take appropriate steps to delete it. Users must be at least 18 to apply for cash-advance services.

14) Data Security
We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest where appropriate, least-privilege access controls, and monitoring. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

15) Data Retention (Additional Detail)
We apply data-minimization and retention policies appropriate to the type of information and the purposes of processing. When retention periods expire, we will delete or de-identify data unless a longer period is required by law, contract, audits, investigations, or dispute resolution. De-identified or aggregated data may be retained and used for legitimate business purposes.

16) International Users
The App is intended for U.S. users. If you access the App from outside the United States, you understand that your information may be processed in the U.S., where data protection laws may differ from those in your jurisdiction.

17) Third-Party Links & Services
The App may include links to or integrations with third-party websites and services. We are not responsible for their privacy practices. Review their privacy policies to understand how they process your information.

18) GLBA & FCRA Disclosures
GLBA: Some information we collect and process in providing financial products and services is subject to GLBA. For such data, the GLBA privacy notice (if provided to you) will govern in case of conflict with this Policy.
FCRA: If, in the future, we obtain or furnish information to consumer reporting agencies (CRAs), your rights under the Fair Credit Reporting Act apply (e.g., the right to dispute inaccurate information). Currently, we do not perform hard credit checks. If this changes, we will update this Policy and provide any required notices.

19) Changes to This Privacy Policy
We may revise this Policy from time to time. Material changes will be communicated via the App or by email. The “Effective Date” above indicates when this Policy was last updated. Your continued use of the App after changes take effect means you accept the updated Policy.

20) Contact Us
If you have questions, requests, or complaints about this Policy or our privacy practices, contact:
Next Cash LLC
525 Randall Ave Ste 100
Cheyenne, Wyoming 82001-2772 USA
Email: support@nextcash.us

21) Key Definitions (Simplified)
• “Personal information” means information that identifies, relates to, describes, or can reasonably be linked with a particular consumer or household, as defined under applicable law.
• “Sensitive personal information” includes data like SSN, government IDs, precise geolocation, account log-in credentials, and similar categories defined by applicable law.
• “Sell” or “Share” have meanings under state privacy laws (e.g., CPRA). We do not sell or share personal information as those terms are defined.

Appendix A – Category-by-Category Summary (CPRA Reference)
Identifiers: collected; sources include you, device, verification providers; used for account setup, KYC, fraud prevention, servicing; disclosed to service providers, financial partners, and as legally required; not sold/shared.
Financial Information: collected; sources include you and your financial institutions; used for eligibility, funding, repayments; disclosed to financial partners and service providers; not sold/shared.
Sensitive Personal Information: collected only where legally necessary (e.g., SSN, IDs); used for identity verification, fraud prevention, compliance; disclosed to verification vendors and as required by law; not sold/shared; not used to infer characteristics.
Internet/Technical Data: collected automatically; used for security, performance, analytics; disclosed to hosting/analytics providers; not sold/shared.
Geolocation (approximate): collected; used for compliance and fraud prevention; disclosed to service providers; not sold/shared.
In-App Activity/Preferences: collected; used to provide features, rewards, support; disclosed to necessary service providers; not sold/shared.
User Content/Communications: collected; used for support, disputes; disclosed to support providers, legal authorities as required; not sold/shared.
Inferences/Eligibility Signals: generated/collected; used for eligibility and risk models; disclosed to service providers and financial partners; not sold/shared.