This California, Oregon, and Minnesota Privacy Statement was last updated on 07/16/2025.

This Privacy Statement is for California, Oregon, and Minnesota Residents only and supplements AmeriSave’s Privacy Policy notice. This policy describes the personal information that AmeriSave (“we,” “our,” or “us”) collects in the course of its business, explains how this information is collected, used, shared, and disclosed, describes rights provided by the California Consumer Privacy Act (CCPA), Oregon Consumer Privacy Act (OCPA), and Minnesota Consumer Data Privacy Act (MCDPA) to California, Oregon, and Minnesota residents (“consumers” or “you”) regarding their personal information, and explains how consumers can exercise those rights.

Personal information is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household (“personal information”). “Personal information” does not include: (1) publicly available information, such as information that is lawfully made available from federal, state, or local records, and (2) de-identified or aggregate consumer information.

The CCPA, OCPA, and MCDPA require us to disclose certain informationregarding our collection, use, and sharing of personal information. However, as a business, we are subject to the Gramm-Leach-Bliley Act (GLBA). The CCPA, OCPA, and MCDPA provide an exemption for personal information that is covered by the GLBA. The GLBA exemption does not completely remove financial institutions from the scope of CCPA, OCPA, and MCDPA, however, this section of the privacy policy outlines our processing activities related to only the personal information in scope. To view the full extent of our privacy practices related to all personal information outside of the CCPA, OCPA, and
MCDPA, please review our general privacy policy.

The following table outlines the categories of personal information that we have collected about consumers. For each category, if applicable, we have identified the categories of sources from which that information was collected, the business or commercial purpose(s) for which the information was collected, and the categories of third parties with whom we share personal information.

Business or commercial purposes are defined as follows:

• Account Services: Account services include: (1) fulfilling or meeting the reason for which the personal information was provided. For example, if you have provided personal information to us in order to obtain financing, we will use that information to determine if you qualify for such financing and under what terms and conditions; (2) providing services, products, or information you may have requested from us; and (3) performing services such as maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, or providing similar services on our own behalf or on the service provider’s behalf.
• Security and Fraud Detection: Security and fraud detection services include detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity; and prosecuting those responsible for that activity.
• Debugging: We engage in debugging to identify and repair errors that impair existing intended functionality in our systems.
• Improvement of Products and Services: We use personal information to verify, maintain, and improve our products and services.
• Internal Research: We use personal information for our internal research related to technological development and demonstration.
• Legal Obligations: We use personal information to fulfill legal obligation. Those may include to fulfill or meet the regulatory reporting requirements (e.g., Home Mortgage Disclosure Act, state and federal reporting).
• Job Qualification: We may use your personal information if you are applying for a position at AmeriSave to determine if you meet the applicable job qualifications.
• Short-term Transient Use: We may use your personal information for short-term, transient use.
• Audits: We use personal information to audit current interactions with you and related transactions (e.g., counting and verifying ad impressions, auditing compliance).
• Merger/Acquisition/Bankruptcy, etc.: We may use your personal information as part of a merger, acquisition, bankruptcy, or other transaction where a third party assumes control of us.
• Commercial/Economic Interests: We use personal information to advance our commercial or economic interest.

AmeriSave does not currently sell your personal information as the term is defined under applicable privacy laws, however, we do “share” the following categories of personal information as defined by the CCPA, OCPA, and MCDPA to our cookie and tracker providers:

• Internet/Network activity; and
• Geolocation data.

AmeriSave does not knowingly sell personal information of California, Oregon, or Minnesota consumers under the age of sixteen (16) years.

Residents of California, Oregon and Minnesota are provided with the following privacy rights.

The Right to Opt-Out of the Sharing of Personal Information:

You have the right to request that we discontinue the sharing of your personal information that we have collected about you. You may submit this request by updating your cookie preferences through our “Your Privacy Choices” link at the bottom of the page.

You have the right to request that we provide you with certain information about the personal information we collect, use, or disclose about you as well as the categories and specific pieces of information that we have collected about you. Specifically, you have the right to request the following information:

• The categories of personal information we have collected about you.
• The categories of sources from which we have collected personal information about you.
• Our business or commercial purpose for collecting your personal information.
• Our business or commercial purpose for disclosing the category of personal information about you.
• The specific pieces of personal information we have about you.
• If we disclosed your personal information for a business or commercial purpose:
  • The categories of personal information that we disclosed about you for a business or commercial purpose; and
  • The categories of third parties to whom your personal information was disclosed for a business or commercial purpose, and which category of personal information was disclosed to that category of third party.

A household may request to know aggregate household personal information by submitting a verifiable consumer request. Also, if all consumers in a household jointly request access to specific pieces of information for the household, and we can individually verify all the members of the household, then we will comply with the request.

However, there is certain information that we will not disclose to you. This information includes but is not limited to your Social Security number, driver’s license number or other government-issued identification number, financial account number, any health insurance or medical identification number, an account password, or security questions and answer. Also, we will not provide you with specific pieces of personal information if the disclosure creates a substantial, articulable, and unreasonable risk to the security of that personal information, your account with us, or the security of our systems or networks. This right does not apply to Business Consumers.

You have the right to request that we delete any personal information that we have collected from you and maintained about you. Once we receive and confirm your verifiable consumer request, if we determine that we must comply with a deletion request and delete your personal information from our records, we will also direct any service providers we work with to also delete your personal information from their records.

A household may request the deletion of aggregate household personal information by submitting a verifiable consumer request. If all consumers in a household jointly request deletion of household personal information, and we can individually verify all the members of the household, then we will comply with the request.

Please note that we may deny your deletion request for a number of different reasons, which are identified in the CCPA, OCPA and MCDPA. Should we deny your deletion request, we will notify you of the reasons for denial. This right does not apply to Business Consumers.

You have the right to request that AmeriSave correct any inaccurate personal information that we have collected from you and retain. Once we have received the personal information from you to be updated and verify your identity, we will update the information where necessary within our systems.

Residents of Oregon have the right to appeal our decision if we deny one of your requests listed above. Please see the “Exercising Your Privacy Rights” section listed below for details on how to submit this request.

Residents of Minnesota have the right to question decisions made based on the profiling of their personal data when such decisions produce legal or similarly significant effects. Consumers can request an explanation of the profiling process, the reasoning behind the decision, and guidance on actions they could take to achieve a different outcome in the future. Consumers also have the right to review the personal data used in the profiling. If the decision is found to be based on inaccurate data, consumers can request that the data be corrected and the decision reevaluated. For details on how to exercise this right, please refer to the “Exercising Your Privacy Rights” section below.

Exercising Your Privacy Rights

If you are a resident of California, Oregon, or Minnesota and would like to exercise your rights as outlined, please contact us through either of the following options. Before we can process your request, we will ask you a series of questions in order to attempt to verify your identity. If you use an authorized agent to make a request on your behalf, we may ask the agent to verify their own identity and confirm with you that you provided the authorized agent permission to submit the request.

• Calling us at (888) 700-4026
• Visiting www.amerisave.com
• Completing our Privacy Request Web Form

You will be asked to provide certain personal information to allow us to verify your identity, such as your email address and phone number. Only you (or an authorized agent) may make a verifiable consumer request for your personal information.

We will generally avoid requesting additional information from you to verify you. However, if we cannot verify your identity based on the information we currently maintain, we may request additional information from you, which will only be used to verify your identity and for security or fraud-prevention purposes. We will delete any new personal information we collect to verify your identity as soon as practical after processing your request unless otherwise required by the CCPA, OCPA, and MCDPA. Generally, if we are unable to verify your identity, we will inform you of this inability and explain why we were unable to do so.

Once we receive your verifiable consumer request, we will confirm our receipt of your request within 10 days and provide you with additional information about how we will process the request. Our goal is to respond to your request within 45 days of receiving the request, beginning on the day we receive the request. However, in the event that we need more time (up to 90 days) to respond to your request, we will provide you with notice and an explanation of the reasons that we will take more than 45 days to respond. If we are unable to comply with a given request, we will provide you with a response explaining why we have not taken action on your request and identifying any rights you may have to appeal the decision.

We will not charge you to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

You may designate an authorized agent to make a request on your behalf. If you would like to use an authorized agent, which is an individual or business registered with the Secretary of State that you have authorized to act on your behalf, to submit a request to opt-out, you must provide the authorized agent with written permission to do so and verify your own identity directly with us. We may deny a request from an agent that does not submit proof that they are authorized to act on your behalf.

We will not discriminate against you for exercising any of your privacy rights. For example, unless otherwise permitted by the CCPA or OCPA, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you with a different level or quality of goods or services.
• Suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

We retain personal information as necessary to achieve the purposes for which it was collected. In some cases, we may retain personal information to comply with legal requirements, for tax or audit purposes, or for other purposes permitted under applicable laws. The duration for which we keep personal information is determined based on various factors, including the purposes for which the information was collected, relevant recordkeeping laws, applicable statutes of limitations, and obligations to preserve evidence for legal or regulatory purposes.

We reserve the right to amend the Privacy Policy at any time and for any reason, without notice to you, other than the posting of the amended Privacy Policy. Users should check site to see the current Privacy Policy that is in effect and any changes that may have been made to it. The provisions contained herein supersede all previous notices or statements regarding our privacy practices.

If you have any questions regarding our privacy policies, our California, Oregon, and Minnesota Privacy Statement, the ways in which we collect, use, and disclose your personal information, or how to exercise your rights under the CCPA, OCPA or MCDPA, please do not hesitate to contact us at:

Phone: (888) 700-4026

Website: www.amerisave.com

Postal Address: AmeriSave Mortgage Corporation, 1200 Altmore Avenue, Building 2 – Suite 300, Sandy Springs, GA 30342 Attn: Customer Service