Protecting data is our top priority We apply best practices that align with security industry standards for protecting personal information. Our policies safeguard the collection, use, and disclosure of information. We use a variety of methods to keep our network secure and data safe. More information can be found here. Data security When consumers share personal information, it’s transferred with TLS 1.2 or higher, a cryptographic protocol, then stored with AES 256-bit or higher encryption at rest. Restricted access We store encryption keys at an off-site facility. Access to customer data requires multi-factor authentication and is restricted to authorized personnel. How Affirm utilizes information Providing consumers control over privacy choices To perform and improve our services, including: performing transactions, maintaining accounts, Consumers are able to opt out at any time by and delivering relevant marketing based on changing their preferences in the app or emailing consumers’ communication preferences. [email protected]. Consumers have the right to receive notice of any Affirm never sells personal information. information we collect and to request or delete personal information, subject to applicable laws. 18