Effective Date: March 3, 2026
SerraFi respects your privacy and is committed to protecting it through our compliance with this Privacy Policy and applicable privacy laws and regulations. This policy describes how we collect, process, use, retain, protect, and disclose Personal Information about you when providing services to you through the SerraFi Services. In this Privacy Policy, "SerraFi," "we," "our," or "us" refer to SerraFi, Inc. and its affiliates, and "you" and "your" refer to the business and the business's users applying for or using SerraFi Services.
SerraFi Services are intended for use by business customers and are not intended for personal, family, or household use. SerraFi Services may be integrated with certain Third-Party Service Providers. The privacy policies of these Third-Party Service Providers will govern their collection, use, disclosure, and processing of personal data. SerraFi is not responsible for the privacy practices of Third-Party Service Providers, and users should review their privacy policies separately.
Please read this policy carefully to understand our policies and practices regarding your information and how we treat it. By interacting with SerraFi Services or providing us with information, you acknowledge that you have read and understood this privacy policy and consent to the collection, use, and sharing of your information as described herein. This policy may change from time to time (see Changes to Our Privacy Policy). Your continued use of the SerraFi Services after we make changes as described here is deemed to be acceptance of those changes, so please check the policy periodically for updates.
Unless otherwise specified, defined terms in this Privacy Policy include both the singular and plural forms of such terms.
This policy applies to certain Personal Information we collect:
It does not apply to information collected by:
If you wish to exercise your rights regarding information that are not covered by our Privacy Policy, you should contact the entity that collected such information for assistance. If we receive a request intended for another third party, we will attempt to forward communications we receive from you to that entity for resolution. SerraFi is not responsible for the privacy practices of these third parties, which may differ from those in our Privacy Policy.
The SerraFi Services are not intended for, and we do not knowingly collect any personal data from, persons under the age of 18. If we learn we have collected or received Personal Information or any other data or information from a person under 18 years old without verification of parental consent, we will promptly delete that information, unless retention is required by law. If you believe we have inadvertently collected information from a person under 18, please contact us immediately at 1-888-737-7234.
The types and categories of Personal Information we collect or process may include:
Some of the information identified above may be considered sensitive data under certain laws. If required under applicable law, we will collect and process sensitive Personal Information only with your consent. If you choose not to provide or allow us to collect some information, we may not be able to provide you with requested features, services, or information.
We also collect certain usage data and technical information, which include deriving non-personal statistical or aggregated data from Personal Information that does not directly identify a specific person. Technical information also includes information about your internet connection and usage details about your interactions with the SerraFi Services, such as clickstream information to, through, and from the SerraFi Services (including date and time), products that you view or search for; page response times, download errors, length of your visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), or methods used to browse away from a page.
If we combine or connect non-personal statistical or technical data with Personal Information so that it directly or indirectly identifies an individual, we treat the combined information as Personal Information.
We collect information about you when you interact with the SerraFi Services, such as when you apply for the SerraFi Services and complete account opening and onboarding activities, link external financial accounts or authorize access to third-party financial data, participate in surveys, sweepstakes, contests, or promotions, or undergo identity verification procedures.
As you navigate through and interact with the SerraFi Services, we may use automatic data collection technologies to collect information. Information collected automatically may include Personal Information, usage details, IP addresses, operating system, and browser type, and other information collected through cookies, web beacons, and other tracking technologies including details of your interactions with the SerraFi Services, such as traffic data, location data, logs, and other communication data, and which resources and SerraFi Services features that you access and use.
Using automatic collection technologies helps us to improve the SerraFi Services and to deliver a better and more personalized experience. We may use these automatic collection technologies to collect information about your online activities over time and across third-party sites or other online services (behavioral tracking).
The technologies we use for this automatic data collection may include:
To the extent any of these automated technologies are considered targeted advertising, or profiling, under applicable laws, depending on where you live, you may opt out from use of these automated technologies for such uses by selecting the appropriate setting on your browser or device. Please note that some Services features may be unavailable as a result.
When you interact with the SerraFi Services, there are third parties, which may or may not include Third-Party Service Providers, that may use automatic collection technologies to collect information about your or your device. These third parties may include advertisers, ad networks, ad servers; analytics companies; your device manufacturer; and your internet or mobile service provider.
These third parties may use tracking technologies to collect information about you when you use the SerraFi Services. The information they collect may be associated with your Personal Information or they may collect information, including Personal Information, about your online activities over time and across different websites, apps, platforms, and other online services.
They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.
We do not control and are not responsible or liable for these third parties' tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.
We may receive Personal Information and other data and information about you from other sources and combine that with the information we collect directly from you. For example, we may obtain information about you from Third-Party Service Providers that we engage to perform services on our behalf. We may also receive information from public sources, advisors, introducers, referrers, brokers, and other reporting organizations or exchanges that serve the financial services industries. We also may receive Personal Information from business partners that we engage to share consumer information with us, including your personal preferences and demographic information so that we can better provide you with a personalized experience.
We use information that we collect about you or that you provide to us, including any Personal Information, to:
The usage information we collect, whether connected to your Personal Information or not, helps us improve the SerraFi Services and deliver a better and more personalized experience by enabling us to:
The SerraFi Services and the purposes for which your Personal Information is processed may cause your Personal Information to be processed and/or stored outside of your country of residence, including the United States. The locations to which your Personal Information is transferred may have different privacy protections than those in your jurisdiction of residence.
By supplying your Personal Information to SerraFi either directly or indirectly, you consent to your information being transferred across international borders to SerraFi and its affiliates, Third-Party Service Providers, and other agents. Other outside contractors we engage are subject to our contractual requirements for safeguarding Personal Information.
We may disclose Personal Information that we collect, or you provide as described in this privacy policy:
We may also disclose your Personal Information:
The categories of Personal Information we may disclose include:
We may use and disclose anonymized and aggregated information about our users without restriction, as permitted by law.
This section describes mechanisms you can use to control certain uses and disclosures of your information and rights you may have under state law, depending on where you live.
SerraFi does not control these third-party opt-out links or mechanisms or whether any particular company chooses to participate in these third-party opt-out programs. We are not responsible for any choices you make using these mechanisms or the continued availability or accuracy of these mechanisms. We are not responsible for any loss of functionality of the SerraFi Services that result from your decision to opt out.
Depending on your state of residency, you may have certain rights related to your Personal Information and other information and data we collect from you. The exact scope of these rights varies by state. There are also several exceptions where we may not have an obligation to fulfill your request. These rights include:
To exercise any of these rights, please submit a request by emailing help@serrafi.com with "Privacy Rights Request" in the subject line and include: (1) your full name; (2) your email address or other contact information associated with your account; (3) the specific right you wish to exercise; and (4) sufficient information to allow us to verify your identity. We will respond to your request within the timeframe required by applicable law. In certain jurisdictions, you may have the right to appeal a decision we've made in response to your request. To appeal such a decision, please submit an email to help@serrafi.com with the subject line "Privacy Request Appeal" and include information relevant to the appeal and the original request reference number if available.
We use commercially reasonable administrative, physical, and technical safeguards designed to protect your personal data from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. These safeguards include physical access security, administrative security measures, data encryption, firewalls, and other appropriate security technologies to protect financial and sensitive information. We review and enhance our security systems as necessary. We offer users multi-factor authentication which is designed to protect accounts, and we encourage you to enable and use this added protection. However, no website, mobile application, system, electronic storage, or online service is completely secure, and we cannot guarantee the security of your personal data transmitted to, through, using, or in connection with the SerraFi Services. In particular, email, texts, and chats sent to or from the SerraFi Services may not be secure, and you should carefully decide what information you send to us via such communications channels. You are solely responsible and liable for the transmission of personal data to the SerraFi Services.
The safety and security of your information also depends on you. You are solely responsible and liable for taking steps to protect your personal data against unauthorized use, disclosure, and access.
We keep the categories of personal data described in this policy for as long as reasonably necessary to fulfill the purposes described or for as otherwise legally permitted or required, such as maintaining the SerraFi Services, operating our organization, complying with our legal obligations (including financial recordkeeping and reporting requirements), resolving disputes, and for safety, security, and fraud prevention. For financial and transactional data, we may be required to retain certain information for specific periods under applicable financial services laws and regulations. At the end of the retention period, personal data will be deleted, destroyed, or deidentified.
This Biometric Information and Retention Policy applies to any individuals about whom we have collected biometric data in connection with our identity verification features and services. "Biometric information" includes "biometric identifiers" and "biometric information" as defined under applicable federal, state, and local laws governing the collection and processing of biometric information.
When you apply for or access certain features of the SerraFi Services, we may ask you to submit (or we may ask your permission to take) a photograph of you and an image or photo of your government-issued identification document (such as your driver's license, state identification card, or passport). We, and our Third-Party Service Providers who assist us under contract in performing identity verification procedures, may use facial recognition technologies to match your photo to your government-issued identification. Facial recognition technology involves the processing of biometric information about the unique features of your facial geometry to perform the verification.
We and our Third-Party Service Providers will only use your biometric information to provide the SerraFi Services. It is our policy to protect, use, transmit, store, and destroy your biometric information in accordance with applicable laws and by using appropriate technical and organizational measures that are the same as or more protective than the manner in which we protect, use, transmit, and store other confidential and sensitive information. We will only disclose your biometric information to other entities with your consent, or where required by applicable law, including in response to legal process (such as a subpoena or warrant).
We and our Third-Party Service Providers will retain your biometric information only until the first of the following occurs: (1) the initial purpose for collecting or obtaining your biometric information has been satisfied; or (2) within three (3) years of your last interaction with us.
Following this timeframe, we and our service providers will delete and permanently destroy your biometric information.
We may update this policy from time to time, and we will provide notice of any such changes to the policy as required by law. The date the privacy policy was last updated is identified at the top of the page. We will notify you of changes to this policy by updating the "last updated" date and posting the updated policy on the SerraFi Services. We may email or otherwise communicate reminders about this policy, but you should check the SerraFi Services periodically to see the current policy and any changes we have made to it. If we make material changes to this Privacy Policy, we will use commercially reasonable efforts to provide you with notice as appropriate under the circumstances, such as by displaying a prominent notice within the SerraFi Services or by sending you an email. Your continued use of the SerraFi Services after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.
If you are a California resident, the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), requires us to provide you with the following additional information about:
Under the CCPA, "sharing" is defined as the targeting of advertising to a consumer based on that consumer's Personal Information obtained from the consumer's activity across websites, and "selling" is defined as the disclosure of Personal Information to third parties in exchange for monetary or other valuable consideration. Our use of third-party analytics services and online advertising services may result in the disclosure of online identifiers (e.g., cookie data, IP addresses, device identifiers, and usage information) in a way that may be considered a "sale" or "sharing" under the CCPA.
For more information about each category of personal information, purpose of use, and third parties to which we disclose personal information, please see the "Personal Information that We Collect or Process," "How We Collect Your Personal Information and Other Data," "How We Use Your Information," and "Who We Disclose Your Information To" sections of our Privacy Policy.
Your Choices Regarding "Sharing" and "Selling": You have the right to opt out of our sale/sharing of your personal information for purposes of online advertising and related activities.
If we ever offer any financial incentives in exchange for your personal information, we will provide you with appropriate information about such incentives.
The CCPA also allows you to limit the use or disclosure of your "sensitive personal information" (as defined in the CCPA) if your sensitive personal information is used for certain purposes. Please note that we do not use or disclose sensitive personal information other than for business purposes for which you cannot opt out under the CCPA.
Please see the "Your Privacy Rights" section of our Privacy Policy above for information about the additional rights you have with respect to your personal information under California law and how to exercise them.
The California "Shine the Light" law gives residents of California the right under certain circumstances to opt out of the disclosure of certain categories of personal information (as defined in the Shine the Light law) with third parties for their direct marketing purposes, or in the alternative, that we provide a cost-free means for consumers to opt out of any such disclosure. We do not currently disclose your personal information to third parties for their own direct marketing purposes.
If you have any questions about this Privacy Policy, you want to make a complaint regarding any breach of your privacy by us, or you want to correct or update your Personal Information in our possession, you may contact us by sending an email to help@serrafi.com.