California Privacy Notice

This California Privacy Notice ("Notice") supplements the information contained in the Privacy Policy of Rocketship Financial Corporation ("we," "us," or "our") and applies solely to residents of the State of California ("consumers" or "you"). We adopt this Notice to comply with the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), and other applicable California privacy laws. Any terms defined in the CCPA/CPRA have the same meaning when used in this Notice.

1. Information We Collect

We collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household ("personal information"). In the past twelve (12) months, we have collected the following categories of personal information from consumers:

• Identifiers: Name, alias, postal address, email address, telephone number, Social Security number, driver's license number, passport number, or other similar identifiers.
• Personal Information Categories (Cal. Civ. Code § 1798.80(e)): Financial information, such as bank account numbers, credit/debit card numbers, or other payment information.
• Protected Classification Characteristics: Age, gender, or other characteristics protected under California or federal law.
• Commercial Information: Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
• Internet or Other Electronic Network Activity: Browsing history, search history, and information regarding a consumer's interaction with our website or advertisements.
• Geolocation Data: Physical location or movements.
• Professional or Employment-Related Information: Current or past employment history or performance evaluations.
• Inferences: Inferences drawn from any of the above to create a profile about a consumer reflecting preferences, characteristics, or behavior.

We do not collect sensitive personal information, such as precise geolocation data, racial or ethnic origins, religious beliefs, or biometric data, unless required for specific services and with your consent.

2. Sources of Personal Information

We obtain the categories of personal information listed above from the following sources:

• Directly from you: When you provide information through our website, forms, or communications with us.
• Indirectly from you: Through automated technologies, such as cookies, when you interact with our website.
• Third parties: From business partners, service providers, or data brokers that provide us with consumer information.
• Publicly available sources: From government records or other publicly accessible databases.

3. Your Rights and Choices

The CCPA/CPRA provides California residents with specific rights regarding their personal information. You have the following rights:

• Right to Know: You may request that we disclose certain information about our collection and use of your personal information over the past 12 months.
• Right to Delete: You may request that we delete any of your personal information that we collected and retained, subject to certain exceptions.
• Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise your rights, please submit a verifiable consumer request by:

• Calling us at (888) 603-1007
• Emailing us at legal@rocketshipfinancial.com

4. Contact Information

If you have any questions or comments about this Notice, our Privacy Policy, the ways in which we collect and use your personal information, or your choices and rights regarding such use, please contact us at: