Zendable, Inc. Privacy Notice
This Privacy Notice is effective as of September 14, 2026.
Contents
- Introduction
- Part I: Information We Collect
- Part II: How We Use Your Information
- Part III: How We Share Your Information
- Part IV: GLBA Annual Privacy Notice
- Part V: Automated Decision-Making and AI
- Part VI: Your Privacy Rights
- Part VII: Cookies and Tracking
- Part VIII: Data Security
- Part IX: Data Retention
- Part X: Children's Privacy
- Part XI: Changes to This Notice
- Part XII: Contact Us
Introduction
Zendable, Inc. ("we", "us", "our") offers unsecured personal loans and credit cards. Our partner bank originates these products, while we market, service, and support them. Each partner bank's privacy notice also applies to their customers.
This Notice explains how we collect, use, share, and protect your personal information and describes the privacy rights available under applicable law. It applies to applicants, borrowers, cardholders, website visitors, and others who interact with our products or services.
Contact Us
- Privacy requests and questions: privacy@zable.com
- Toll-free: 1-844-779-2253 (loans) — Mon–Fri 8 am to 9 pm ET
- Toll-free: 1-877-659-2253 (cards) — Mon–Fri 9 am to 6 pm ET
- Mail: Zendable, Inc., Privacy Office, 3100 Clarendon Blvd, Suite 200, Arlington, VA 22201
Part I: Information We Collect
Information You Provide
We collect information you provide when you apply for or use our products and services, including:
- Identifiers and contact information: name, address, email address, phone number, date of birth, and Social Security number
- Financial information: income, bank account details, credit preferences, account balances, transaction history, and credit scores
- Employment information: employer and employment status
- Application information: loan purpose, requested amount, and other application details
- Communications: messages and inquiries you send us
- Profile data: username and account credentials, interests, preferences, feedback, and survey responses
- Marketing and Communications data: your marketing and communication preferences
We collect sensitive personal information including Social Security number and financial account numbers. We use sensitive personal information only for the purposes permitted by applicable law, including providing requested financial products and services, fraud prevention, security, and compliance with legal obligations.
Information Collected Automatically
When you visit our website or use our mobile app, we automatically collect:
- Device and browser: IP address, device type, operating system, browser type and version, unique device identifiers
- Usage data: pages visited, links clicked, session duration, referring URLs, and navigation paths
- Tracking data: information collected through cookies and similar technologies — see the Cookies and Tracking section for details
- Approximate location: general geographic area derived from your IP address
Information from Third Parties
We receive information from consumer reporting agencies, identity verification and fraud prevention providers, financial account data providers (such as Plaid, with your consent), marketing partners, and other lawful data providers.
Part II: How We Use Your Information
We use personal information for the following purposes:
- Evaluating and processing applications: to assess eligibility, verify identity, underwrite products, and comply with the Equal Credit Opportunity Act (ECOA) and Fair Credit Reporting Act (FCRA) requirements, using automated systems that assist or substantially influence the outcome (see the Automated Decision-Making and AI section for details).
- Account servicing and communications: to manage accounts, process transactions, provide customer service, and communicate with you about your account.
- Identity verification, fraud prevention, and security: to verify your identity, detect and prevent fraud, and maintain the security of our systems and your information.
- Maintain and improve our Service: We research how users access and use it to help improve offerings and develop new products. We also operate, maintain, test, update, monitor, diagnose, and fix our systems.
- Legal and regulatory compliance: to comply with applicable federal and state laws and regulations, including applicable anti-money laundering laws, to report to credit bureaus, to respond to subpoenas or requests from government authorities, and to respond to lawful requests and legal processes.
- Managing our relationship with you: to notify you about changes to our terms or privacy policy, to ask you to leave a review or take a survey, and to respond to your inquiries.
- Marketing: to send promotional communications where permitted by law. You may opt out of promotional emails at any time by clicking the unsubscribe link in the email.
Part III: How We Share Your Information
Under California and Connecticut law, we share certain website and application activity data — collected through cookies and tracking technologies including the Meta Pixel and advertising tags in Google Tag Manager — with advertising partners for cross-context behavioral advertising and targeted advertising. These jurisdictions treat this sharing as a "sale" for purposes of your privacy rights. You may opt out of this sharing using the "Your Privacy Choices" link in our website footer, by enabling the Global Privacy Control (GPC) browser signal, or as described in Part VI. We disclose personal information only as described in this Notice or as otherwise permitted or required by law.
| We share with | Why |
|---|---|
| Partner banks | Partner banks originate or issue financial products that we market or service, as applicable. Each partner bank provides its own privacy notice. |
| Consumer reporting agencies | To obtain consumer reports and investigate consumer disputes as permitted by the FCRA, and to furnish account information as required or permitted by law. |
| Service providers | To help us operate our business, including technology, identity verification, fraud prevention, marketing, and customer service. We contractually require service providers to use your information only for the purposes we authorize. |
| Affiliates | To provide, service, and market financial products and services within the Zendable corporate family, as permitted by applicable law. |
| Marketing partners | To assist with marketing campaigns, including delivery of pre-screened offers where permitted by law, and to deliver targeted advertising through third-party advertising platforms (including Meta and Google). This sharing may constitute "sharing for cross-context behavioral advertising" under California law. California residents may opt out — see Part VI. |
| Investors and loan purchasers | To finance, administer, and service loan portfolios, including securitization trusts and whole-loan purchasers. |
| Government and regulatory authorities | When required by law, court order, subpoena, or regulatory examination; or to cooperate with law enforcement or protect the safety of our customers or the public. |
| Business transfers | In connection with a merger, acquisition, or sale of assets. We will provide notice as required by applicable law if your personal information becomes subject to materially different privacy practices. |
| With your consent | For any other purpose you authorize at the time of disclosure. |
Pre-screened offers involve sharing as permitted under the Fair Credit Reporting Act and do not constitute "sale" or "sharing for cross-context behavioral advertising" under applicable state privacy laws.
Part IV: GLBA Annual Privacy Notice
As a Gramm-Leach-Bliley Act (GLBA)-regulated financial institution, Zendable is required to provide you with this annual privacy notice explaining how we collect, share, and protect your nonpublic personal information (NPI).
| WHAT DOES ZENDABLE, INC. DO WITH YOUR PERSONAL INFORMATION? | |
|---|---|
| Why? | Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do. |
| What? |
The types of personal information we collect and share depend on the product or service you have with us. This information can include:
|
| How? | All financial companies need to share customers' personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers' personal information; the reasons Zendable, Inc. chooses to share; and whether you can limit this sharing. |
| Reasons we can share your personal information | Does Zendable share? | Can you limit this sharing? |
|---|---|---|
| For our everyday business purposes — such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus | Yes | No |
| For our marketing purposes — to offer our products and services to you | Yes | No |
| For joint marketing with other financial companies | No | We don't share |
| For our affiliates' everyday business purposes — information about your transactions and experiences | Yes | No |
| For our affiliates' everyday business purposes — information about your creditworthiness | Yes | Yes |
| For our affiliates to market to you | Yes | Yes |
| For nonaffiliates to market to you | No | We don't share |
| Questions? | |
|---|---|
| Call 1-844-779-2253 for loans, 1-877-659-2253 for cards, or go to www.zable.com | |
| To limit our sharing | |
|
| Who we are | |
|---|---|
| Who is providing this notice? | Zendable, Inc. is a financial services company that offers unsecured personal loans and consumer credit cards. Our partner bank originates these products, while we market, service, and support them. |
| What we do | |
| How does Zendable protect my personal information? | To protect your personal information from unauthorized access and use, we use security measures that comply with federal law, including the GLBA Safeguards Rule. These measures include computer safeguards and secured files and buildings. We restrict access to your personal information to those employees who need it to provide products or services to you. |
| How does Zendable collect my personal information? |
We collect your personal information, for example, when you:
|
| Why can't I limit all sharing? |
Federal law gives you the right to limit only:
|
| Definitions | |
| Affiliates | Companies related by common ownership or control. They can be financial and non-financial companies. Our affiliates include Zendable, LLC and Zendable Cards, LLC. |
| Nonaffiliates | Companies not related by common ownership or control. They can be financial and non-financial companies. Zendable, Inc. does not share with nonaffiliates so they can market to you. |
| Joint marketing | A formal agreement between non-affiliated financial companies that together market financial products or services to you. Zendable, Inc. does not jointly market with non-affiliated financial companies. |
| Other important information | |
| California Residents | Under California law, we will not share information we collect about you with companies outside of Zendable, unless the law allows. For example, we may share information with your consent, to service your accounts, or to provide rewards or benefits you are entitled to. We will limit sharing among our companies to the extent required by California law. |
| Nevada Residents | We are providing you this notice under Nevada state law. Nevada law requires we provide the following contact information: Bureau of Consumer Protection, Office of the Nevada Attorney General, 555 E. Washington St., Suite 3900, Las Vegas, NV 89101; Phone: 702-486-3132; Email: aginfo@ag.nv.gov. Zendable, Inc., 3100 Clarendon Blvd, Suite 200, Arlington, VA 22201; Phone: 1-844-779-2253; Email: privacy@zable.com. |
| Vermont Residents | Under Vermont law, we will not share information we collect about Vermont residents with companies outside of our corporate family, unless the law allows. For example, we may share information with your consent, to service your accounts or under joint marketing agreements with other financial institutions. We will not share information about your creditworthiness within our corporate family except with your consent, but we may share information about our transactions or experiences with you within our corporate family without your consent. |
Part V: Automated Decision-Making and AI
We use automated decision-making technology (ADMT) to assist in underwriting, fraud prevention, pricing, and credit limit decisions. These systems use information from your application, consumer reports, identity verification providers, and fraud signals. Where required by law, we provide adverse action notices explaining the principal reasons for a credit decision. Our customer service chatbot uses generative AI and will identify itself as an AI when you interact with it.
Part VI: Your Privacy Rights
The privacy rights available to you may depend on the state where you reside. We do not discriminate against you for exercising any privacy right.
To exercise your privacy rights, email us at privacy@zable.com with your full name, state of residence, and a description of your request. We will acknowledge receipt of your request and provide a response as required by applicable law. We may request additional information to verify your identity before processing your request.
Authorized agents may submit requests on your behalf. We may require written authorization from you and independent verification of your identity.
If we deny your privacy request, you may appeal by emailing privacy@zable.com with "Privacy Appeal" in the subject line. We will review your appeal and respond within the timeframe required by applicable law.
California Residents
Because Zendable, Inc. is subject to the Gramm-Leach-Bliley Act (GLBA) and the Fair Credit Reporting Act (FCRA), personal information we collect in connection with underwriting, servicing, and collection of loans and credit cards—such as credit scores, financial account numbers, and income—is exempt under GLBA/FCRA exceptions. Non-exempt information, such as website analytics and marketing data, remains subject to California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), rights requests.
The categories of personal information described in this Notice reflect information we have collected in the preceding 12 months. To the extent your information is not exempt, California residents may have the right to:
- Know what personal information we collect and how it is used and shared
- Access and obtain a copy of their personal information
- Correct inaccurate personal information
- Delete personal information (subject to exceptions)
- Limit the use and disclosure of sensitive personal information
- Opt out of the use of automated decision-making technology for significant decisions (to the extent not exempt under applicable federal law)
- Opt out of sharing for cross-context behavioral advertising (opt-out instructions below)
- Non-discrimination for exercising these rights
We share certain online activity data with advertising partners (including Meta and Google) for cross-context behavioral advertising. California law treats this sharing as both a "sale" and "sharing" of personal information, and you have the right to opt out. To opt out:
- Your Privacy Choices link: Click "Your Privacy Choices" in the footer of our website.
- Global Privacy Control (GPC): Enable the GPC signal in your browser. We recognize GPC as a valid opt-out request.
- Contact us: Email privacy@zable.com | Phone: 1-844-779-2253 (loans) or 1-877-659-2253 (cards)
Sensitive Personal Information: Under California law, we process sensitive personal information (including Social Security numbers and financial account information) strictly for the purposes of providing the financial services you have requested—loan processing, servicing, and account management. These uses constitute exempt purposes under California Civil Code § 1798.121, and therefore we do not provide a separate "Limit the Use of My Sensitive Personal Information" option.
To submit other California privacy requests, email privacy@zable.com.
Connecticut Residents
Applicable law: Connecticut Data Privacy Act (CTDPA), as amended by Public Act No. 25-113 (SB 1295), effective July 1, 2026.
Scope note: Nonpublic personal information (NPI) that we collect under the Gramm-Leach-Bliley Act (GLBA) — including information used to underwrite, service, or collect on your loan or credit card account, and information collected during your application process — is subject to GLBA privacy protections. To the extent CTDPA provides greater protections than GLBA, CTDPA rights also apply to your personal information. Other information we process about you that is not GLBA NPI, such as website and app analytics, remains subject to the rights described below.
Your CTDPA Rights
- Right to Access: Confirm whether we process your personal data and request a copy.
- Right to Correct: Request correction of inaccurate personal data.
- Right to Delete: Request deletion of personal data we hold about you (subject to GLBA/FCRA retention obligations).
- Right to Data Portability: Request a copy of your personal data in a portable, readily usable format.
- Right to Opt Out: Opt out of (a) targeted advertising, (b) sale of personal data, and (c) profiling in furtherance of decisions that produce legal or similarly significant effects.
- Right to Know Third-Party Sharing: Request a list of third parties to whom we have disclosed your personal data. We share online activity data with advertising partners (including Meta and Google) for targeted advertising; Connecticut law treats this sharing as a sale of personal data. See the "How We Share Your Information" and "Cookies and Tracking" sections of this Notice, and use the opt-out methods described there.
Connecticut ADMT Rights
Connecticut residents have the right to opt out of profiling used in furtherance of decisions that produce legal or similarly significant effects. Our use of automated decision-making technology for underwriting, fraud prevention, pricing, and credit limit decisions are GLBA-regulated credit underwriting decisions and are therefore exempt from this right. To the extent you have rights under the CTDPA regarding automated decisions not related to credit underwriting, you may contact us to exercise those rights by emailing privacy@zable.com with the subject line "Automated Decision Request."
Use of Personal Data to Train AI Models
Zendable does not use personal data collected from Connecticut consumers — including chat logs, financial profiles, or application data — to train large language models (LLMs) or other generative AI systems. We use AI tools, including those provided by third-party vendors, to process your information only as an input to generate an output for you (for example, a credit decision or a chatbot response), not as training data. Our contracts with AI vendors prohibit them from using Zendable customer data to train their models. If we begin allowing vendors to use your data for AI training, we will update this Notice and provide direct notice to affected Connecticut residents as required by law.
How to Exercise Connecticut Rights
- Email: privacy@zable.com
- Toll-free: 1-844-779-2253 (loans) or 1-877-659-2253 (cards)
- Global Privacy Control (GPC): Enable the GPC signal in your browser. We recognize GPC as a valid request to opt out of targeted advertising and the sale of personal data for Connecticut residents.
We will respond to your request within 45 days; we may extend this period by an additional 45 days where reasonably necessary, with notice. If you are dissatisfied with our response, you may appeal by emailing privacy@zable.com with subject line "Appeal — CT Privacy Request." We will respond to your appeal within 60 days with a written explanation of our decision. If your appeal is denied, you may contact the Connecticut Attorney General at portal.ct.gov/AG.
Nevada Residents
We are providing you this notice under Nevada state law (NRS Chapter 603A). We do not sell Nevada residents' covered personal information within the meaning of Nevada's privacy law. We will respond to verified opt-out requests within 60 days, with a 30-day extension where we provide notice.
Contact Information
Nevada Attorney General — Bureau of Consumer Protection: 555 E. Washington St., Suite 3900, Las Vegas, NV 89101 | Phone: 702-486-3132 | Email: aginfo@ag.nv.gov
Zendable, Inc.: 3100 Clarendon Blvd, Suite 200, Arlington, VA 22201 | Phone: 1-844-779-2253 | Email: privacy@zable.com
Vermont Residents
Vermont law imposes additional restrictions on the sharing of personal information. We obtain your affirmative consent before sharing nonpublic personal financial information about Vermont residents with non-affiliated third parties, except as permitted by Vermont law (for example, sharing necessary to process your application or service your account). We also obtain your consent before sharing information about your creditworthiness with our affiliates, though we may share information about our transactions or experiences with you within our corporate family without your consent.
Part VII: Cookies and Tracking
We may use cookies, web beacons, pixels, and similar technologies on our website and mobile application for the following purposes:
| Cookie Type | Purpose | Can You Opt Out? |
|---|---|---|
| Strictly Necessary | Core website and app functionality (login, session management, security) | No — these cannot be disabled |
| Fraud Detection | Detect and prevent fraudulent applications and account access. Includes device fingerprinting (Iovation), bot detection (reCAPTCHA), and identity verification (Alloy) used during application flows only. | No — required for security |
| Analytics & Session Recording | Website and application performance analytics (Google Analytics) and session recording for debugging and service improvement (Smartlook). Session recordings capture mouse movements, clicks, scrolls, and keystrokes; form fields containing sensitive information (such as SSNs and account numbers) are masked. Applies to all products. | Yes — via browser settings or by contacting us at privacy@zable.com |
| Advertising | Targeted advertising and campaign measurement through advertising platforms including Meta Pixel and Google Tag Manager advertising tags. This may constitute "sharing" for cross-context behavioral advertising under California law or targeted advertising under Connecticut law. | Yes — California and Connecticut residents: click "Your Privacy Choices" in our website footer or enable the Global Privacy Control (GPC) signal in your browser. Other residents may opt out by contacting privacy@zable.com. |
California residents may opt out of advertising data sharing that constitutes "sharing" under the CCPA, and Connecticut residents may opt out of targeted advertising and the sale of personal data under the CTDPA, by clicking "Your Privacy Choices" in our website footer, by enabling the Global Privacy Control (GPC) signal in your browser (recognized as a valid opt-out request for both states), or by emailing privacy@zable.com or calling 1-844-779-2253 (loans) or 1-877-659-2253 (cards).
California and Connecticut residents may opt out of advertising data sharing using the methods described above. Your opt-out choice is stored in a cookie on your browser and expires after 13 months. You will need to renew your opt-out preference if you wish to continue opting out after the cookie expires. Alternatively, you may use the Global Privacy Control (GPC) signal, which does not rely on cookies and persists across browser sessions.
Part VIII: Data Security
We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, and destruction, in accordance with applicable law. We contractually require our service providers that process personal information on our behalf to maintain appropriate administrative, technical, and physical safeguards consistent with applicable law.
Security incident reporting: If you suspect your Zendable account has been compromised, contact us immediately at 1-844-779-2253 (loans) or 1-877-659-2253 (cards). We will notify you of security incidents affecting your personal information as required by applicable law.
Part IX: Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this Notice, including to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary by information type and applicable law. Financial records are generally retained for the periods required under applicable federal and state law, or as required for business reasons.
Part X: Children's Privacy
Our products and services are intended solely for adults aged 18 and older. We do not knowingly collect personal information from individuals under the age of 18. If we learn that we have collected personal information from a minor, we will promptly delete it in accordance with applicable law. If you believe a minor has submitted information to us, contact privacy@zable.com.
Part XI: Changes to This Notice
If we make material changes to this Notice, we will post the updated Notice on our website and provide additional notice where required by applicable law.
Part XII: Contact Us
To exercise any privacy right described in this Notice, or for questions about our privacy practices, contact us through any of the following channels:
| Channel | Details |
|---|---|
| Privacy Requests | privacy@zable.com |
| Loans Phone | 1-844-779-2253 — Mon–Fri 8 am to 9 pm ET |
| Cards Phone | 1-877-659-2253 — Mon–Fri 9 am to 6 pm ET |
| Zendable, Inc. — Privacy Office, 3100 Clarendon Blvd, Suite 200, Arlington, VA 22201 |
Connecticut AG: For Connecticut residents who have exhausted our appeal process: portal.ct.gov/AG
California CPPA: For California residents: cppa.ca.gov
This Notice is provided in compliance with the GLBA, CCPA/CPRA, CTDPA, and other applicable laws.