Uno Privacy Policy

Uno is a financial technology service operated by Standard Economics, Corp. ("Uno," "we," "us," or "our"), a company incorporated in Delaware, United States.

Uno provides account-related and financial services through regulated partner institutions, infrastructure providers, and service providers, including account access, balance features, link-based features, card products, and other financial products (the "Services"). The Services may be offered in one or more jurisdictions and may expand or change over time.

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use Uno or interact with us.

Where required by applicable law in a jurisdiction where the Services are offered, this Privacy Policy is also intended to function as the local privacy notice for the relevant Service.

1. Information We Collect

A. Information You Provide

We may collect information you provide directly to us, including:

• Full name, phone number, email address, username, profile photo, date of birth, residential address, and account credentials
• Information submitted during signup, account setup, support, profile creation, and account recovery
• Government-issued identification information and related verification materials
• Transaction, settlement, and account identifiers needed to enable financial products or services
• Responses to forms, questionnaires, surveys, support requests, and applications
• Other information you choose to provide

B. Identity Verification and Biometric Data

Where identity verification is required, we or our partners may collect selfie images, liveness check images, document images, and derived biometric or facial geometry data for identity verification, fraud prevention, and security purposes.

Where required by law, we will obtain your explicit consent for collection or processing of biometric data. We retain biometric or identity verification data only as long as reasonably necessary for the verification purpose and as required by law or partner obligations.

C. Sensitive Personal Information

Other than identity verification or similar compliance-related information that may be required for certain Services, Uno does not intentionally request sensitive personal information unless it is reasonably necessary to provide or secure the Services or comply with law.

D. Information Collected Automatically

When you use the Services, we may automatically collect:

• Device identifiers, browser type, operating system, app version, IP address, and mobile network information
• Usage logs, feature interaction events, session data, diagnostics, performance information, and crash information
• Approximate location information inferred from device or network data
• Precise location information if you grant permission
• Online identifiers and usage information collected through cookies, pixels, SDKs, tags, local storage, and similar technologies

E. Information From Third Parties

We may receive information about you from third parties, including:

• Identity verification, compliance, and fraud-prevention providers
• Transaction processors, card issuers, servicing providers, settlement providers, and account providers
• Financial, settlement, identity, compliance, and operational partners
• Reporting agencies, financial history providers, risk assessment providers, and alternative data providers where relevant to a financial product
• Analytics, attribution, communications, and customer support vendors
• Publicly available databases, sanctions lists, government records, and adverse media sources

2. How We Use Information

We may use personal information to:

• Create, operate, maintain, and secure accounts, profiles, balance features, and Services
• Authenticate users and help recover access
• Provide balances, link-based features, pay links, request links, account activity, and related functionality
• Verify identity and eligibility for regulated or higher-risk features
• Process transactions, settlements, disbursements, withdrawals, and related account activity
• Evaluate eligibility for financial products and conduct ongoing account review
• Detect, prevent, investigate, and respond to fraud, abuse, scams, unauthorized activity, or security incidents
• Comply with applicable laws, regulations, subpoenas, court orders, and regulatory obligations
• Communicate with you about the Services, your account, transactions, support requests, applications, and legally required notices
• Improve, personalize, troubleshoot, and develop the Services
• Conduct analytics, research, quality assurance, and reporting
• Enforce our agreements and protect the rights, property, and safety of Uno, our users, our partners, and others

3. Automated Decision-Making and Risk Review

Uno and its partners may use automated systems, rules, or models to:

• Assess fraud, abuse, or scam risk
• Review account security and suspicious activity
• Evaluate eligibility for certain financial products or features
• Determine whether to delay, restrict, or reject certain actions

Where required by law, you may request information about significant automated decisions or request review using the contact details below.

4. How We Share Information

A. Financial and Operational Partners

We may share information with issuing banks, transaction providers, card programs, settlement partners, account providers, compliance providers, and other financial or operational partners where necessary to provide the relevant Service.

B. Service Providers

We may share information with vendors providing hosting, cloud storage, analytics, identity verification, customer support, communications, security, fraud prevention, engineering, and other operational support.

C. Financial Product, Risk, and Eligibility Partners

Where relevant to a financial product or application, we may share information with reporting agencies, risk providers, eligibility review partners, servicing providers, collections providers, and related vendors.

D. Regulators, Authorities, and Legal Process

We may disclose information to regulators, law enforcement, courts, supervisory authorities, tax authorities, or other government bodies where required or permitted by law or where we believe disclosure is appropriate to protect rights, safety, or property.

E. Corporate Transactions

We may share information in connection with a merger, acquisition, financing, restructuring, sale of assets, bankruptcy, or similar transaction.

F. De-Identified and Aggregated Data

We may use and disclose aggregated, de-identified, or anonymized information that cannot reasonably be used to identify you.

5. Public Profiles and Pay Links

Certain profile and link-based features may involve public or semi-public display of information.

Depending on the feature, information visible to other users, recipients, or platforms may include:

• Your username
• Your display name
• Your profile image
• An amount associated with a link or transaction
• Limited transaction context
• Whether a pay link or request link exists

If you share a pay link, or if a pay link is previewed by a messaging platform, search engine, crawler, or social platform, related metadata may be processed by those third parties under their own policies.

6. Cookies and Tracking Technologies

We use cookies, pixels, SDKs, local storage, and similar technologies on our websites and Services to:

• Keep you signed in or maintain session integrity
• Secure the Services and prevent fraud
• Measure usage and performance
• Understand traffic sources and attribution
• Improve the Services
• Support marketing and campaign measurement

These technologies may load when you visit our websites or use the Services. They may collect online identifiers, IP addresses, device information, browser information, and interaction data.

You can manage certain technologies through browser settings and device settings. If we make additional preference tools available, we will describe them there. Some features may not function properly if you disable required technologies.

7. Sale and Advertising

We do not sell your personal information as that term is defined under the CCPA/CPRA.

We may disclose limited identifiers and usage information to analytics, attribution, or marketing partners as described in this Privacy Policy.

Depending on your location and applicable law, you may have rights related to certain advertising, analytics, or data-sharing practices.

8. Data Retention

We retain personal information for as long as reasonably necessary to:

• Provide and maintain the Services and your account
• Satisfy legal, regulatory, tax, accounting, compliance, and audit obligations
• Detect and prevent fraud, abuse, and security incidents
• Resolve disputes and enforce agreements
• Establish, exercise, or defend legal claims

Retention periods vary depending on the data type, the Service involved, and applicable law or partner requirements. Financial, transaction, compliance, and identity records may be retained for multiple years after account closure where required or permitted by law.

9. Your Rights and Choices

Depending on your location and applicable law, you may have rights to:

• Access personal information we hold about you
• Correct inaccurate information
• Request deletion or cancellation of certain information, subject to legal exceptions
• Object to or restrict certain processing
• Withdraw consent for certain optional processing activities
• Request a portable copy of certain information
• Opt out of marketing communications
• Request review of certain significant automated decisions where required by law

Depending on your location, these rights may include local access, correction, deletion, objection, portability, or similar rights available under applicable law.

To exercise rights, contact us using the information in Section 14. We may request information needed to verify your identity before processing your request.

Opting out of marketing does not affect transactional, legal, security, or servicing communications.

10. International Transfers

Uno is based in the United States, and your information may be transferred to or processed in the United States or other countries where we or our partners and vendors operate.

Those jurisdictions may not provide the same level of protection as your home jurisdiction. Where required, we use contractual, technical, and organizational safeguards intended to support lawful cross-border data transfers.

11. Security

We implement administrative, technical, and organizational safeguards designed to protect personal information. These may include encryption, access controls, security monitoring, vendor diligence, logging, incident response procedures, and workforce training.

No system is completely secure, and we cannot guarantee absolute security.

12. Children

The Services are intended only for individuals 18 years of age or older. We do not knowingly collect personal information from children under 18.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or Services. If we make material changes, we will provide notice as required by law or as otherwise appropriate under the circumstances.

14. Contact

For questions, privacy requests, or complaints, contact the Privacy Team at privacy@standardeconomics.com.

Mailing address: Standard Economics, Corp., 325 Pacific Avenue, San Francisco, CA 94111, United States.

You may also have the right to contact the privacy, consumer protection, or data protection authority in your jurisdiction, subject to applicable law.