California Privacy Policy (CCPA/CPRA)

1. Categories of personal information we collect

In the preceding twelve (12) months, we have collected the following statutory categories of personal information. We collect these from the sources described in Section 2 and use them for the purposes described in Section 3.

• A. Identifiers — name, email address, telephone number, IP address, and online/device identifiers. Collected: YES.
• B. Customer-records information (Cal. Civ. Code §1798.80(e)) — name, contact information, and property/transaction information you enter. Collected: YES.
• C. Protected-classification characteristics — Collected: NO (we do not request these).
• D. Commercial information — records of property inquiries and the tools/services you used. Collected: YES.
• E. Biometric information — Collected: NO.
• F. Internet or other network activity — browsing/usage activity and interactions with the Services. Collected: YES.
• G. Geolocation data — approximate location from IP or the city/ZIP you provide. Collected: YES.
• H. Sensory data (audio, visual) — Collected: NO (other than support communications you initiate).
• I. Professional or employment information — Collected: NO.
• J. Education information — Collected: NO.
• K. Inferences — inferences drawn to determine suitable lenders (e.g., a computed DSCR band). Collected: YES.

Sensitive personal information: we do not collect Social Security, driver’s-license, or financial-account numbers, precise geolocation, or other sensitive categories for purposes that would trigger the right to limit.

2. Sources of personal information

We collect personal information directly from you (the forms and tools you use), automatically from your device (cookies and similar technologies), and from service providers and partners that operate the Services and certify your consent.

3. Business and commercial purposes for collection

We collect and use personal information to provide the Services and the tools, to refer your inquiry to lenders/partners at your request, to maintain consent records, to communicate with you, to perform analytics and improve the Services, to maintain security and prevent fraud, and to comply with law — consistent with the “How we use your information” section of our Privacy Policy.

4. Disclosure of personal information

In the preceding twelve (12) months, we disclosed Categories A, B, D, F, G, and K for business purposes to: (i) lending and marketing partners, with your consent, to provide the matching you requested; and (ii) service providers and contractors that perform services on our behalf (hosting, analytics, consent certification, communications). We require these recipients to protect the information and use it only for the disclosed purposes.

5. “Sale” and “sharing” of personal information

We do not sell personal information in exchange for monetary consideration, and we do not sell or share the personal information of consumers we know to be under 16. Certain disclosures for cross-context behavioral advertising or measurement may be considered “sharing” (and potentially a “sale”) under the CCPA. We honor the Global Privacy Control (GPC) signal as a valid opt-out of sale/sharing, and you may also opt out via our Do Not Sell or Share page.

6. Retention

We retain each category of personal information for the period described in our Privacy Policy “How long we keep your information” section — consent records for at least five (5) years, and other categories for as long as reasonably necessary for the disclosed purposes and to comply with our legal obligations.

7. Your California rights

• Right to know/access — the categories and specific pieces of personal information we collected, the sources, the business/commercial purposes, and the categories of third parties to whom we disclosed it.
• Right to delete — your personal information, subject to statutory exceptions.
• Right to correct — inaccurate personal information we maintain.
• Right to opt out of sale/sharing — of your personal information (we honor GPC).
• Right to limit — the use and disclosure of sensitive personal information.
• Right to non-discrimination — for exercising your rights.
• Right to appeal — a denial of your request.

8. How to exercise your rights

You may submit a request to know, delete, correct, or opt out through our Your Privacy Choices hub, our Do Not Sell or Share page, or by emailing privacy@nightyield.com. Because we operate exclusively online and have a direct relationship with you, you may submit requests by email. We will verify your identity, generally by matching information you previously provided, before fulfilling a request to know or delete. You may use an authorized agent who provides written, signed authorization and verification of identity. We will respond within the timelines required by the CCPA and will inform you of your right to appeal any denial.

9. Request metrics and financial incentives

We are not a business that buys, sells, or shares the personal information of 10 million or more California residents in a calendar year, and therefore are not required to compile or publish annual request metrics; if that threshold applies in the future, we will publish the required metrics here. We do not offer financial incentives or price/service differences in exchange for the retention or sale of personal information.

10. California “Shine the Light”

California Civil Code §1798.83 permits California residents to request information regarding our disclosure of personal information to third parties for their direct-marketing purposes. We do not disclose personal information to third parties for their own direct marketing except as you direct when you consent to be matched. To make a Shine-the-Light request, email privacy@nightyield.com.

11. Contact

Misc Holdings Ltd., Attn: Privacy, 228 Park Avenue South, PMB 37100, New York, NY 10003 · privacy@nightyield.com.