Privacy Policy

---

PRIVACY POLICY

Effective Date: January 1, 2026

This privacy policy (“Privacy Policy”) describes the information 360 Vault Exchange, LLC (“we,” “us,” or “360 Vault Exchange”) collects when you use or access our website and any of our platforms, products, or services (collectively, the “Services”). It also explains how we use and share the information and what steps we take to protect it. By visiting and using our website or using our Services, you consent to our collection and use of your information as described in this Privacy Policy. Please read this Privacy Policy in its entirety.

We reserve the right to modify, alter, or otherwise update this Privacy Policy at any time to address changing legal obligations, technologies, business practices, and our users’ needs, and we encourage you to check back periodically so that you are always aware of the most current policies and practices we have in place to protect personal information.

Please also review the Terms & Conditions that govern your use of our Services.

We comply with applicable federal and state privacy laws and regulations.

1. INFORMATION WE COLLECT

The types of information we gather depend on the products or Services you have with us. This information may include:

• Your name and contact information;

• Your home and/or business address;

• Information you provide in connection with a loan inquiry, application, underwriting, or transaction, which may include government-issued identifiers (such as driver’s license number and Social Security number, where applicable and provided by you);

• Your date of birth, gender, and marital status (where applicable and provided by you);

• Login credentials when you log into our (or a service provider’s) platform;

• Business ownership information, including profit-sharing and ownership interests; and

• Financial information, including (without limitation) net worth, bank statements, and tax returns (where applicable and provided by you).

If you use our (or a service provider’s) platform, we may also collect information about the browser or device you are using, including:

• IP address or other device-identifying information, browser type, browser language, and the date and time of your request;

• One or more cookies that may uniquely identify your device; and

• Information obtained through cookies, flash cookies, web beacons, embedded scripts, or similar tracking technologies.

We may supplement information with data from third parties. This information may include:

• Information from other sources, such as financial records, employment history, and background information (including, without limitation, criminal background/history), and other third-party data; and

• Information from reporting agencies and state and federal government agencies (such as state motor vehicle departments) and credit reporting agencies (including credit reports/history/scores).

• Third-party data collected from using internet sites and mobile applications.

We treat all information about you, whether received from you or from a third party, in accordance with this Privacy Policy and our Terms & Conditions.

2. HOW WE USE THE INFORMATION WE COLLECT

We use the information we collect to provide, maintain, protect, optimize, and improve our Services and to enhance your user experience. We may also use the information we collect in the following ways:

Regular Business Purposes

We use the information you provide to update your account(s), process or service requested or authorized transactions, and evaluate and underwrite loan requests and applications.

For Our Own Analytic Purposes

We may use your information to develop new Services, conduct research, and create anonymous or aggregated reporting for our own use.

For Our Own Marketing Purposes

We may use your information to offer our products or Services to you.

To Comply with Legal Requirements

It may be necessary to provide information collected from you to respond to subpoenas, discovery requests, legal investigations, court orders, or otherwise comply with the law. We may share information pursuant to a governmental agency or investigatory body request. We may be required to disclose an individual’s personal information in response to a lawful request by public authorities, including to meet national security or law enforcement requirements.

3. HOW YOUR INFORMATION IS SHARED

We do not share, sell, rent, or otherwise distribute your personal information except as described below:

With Our Service Providers

We may share your personal information with other companies and individuals to perform functions or services for us or on our behalf, such as hosting this website, sending email messages, making phone calls, and processing requests for background and credit checks. These parties are contractually or otherwise restricted from using personal information for purposes other than providing services for us or on our behalf.

For Administrative and Legal Reasons

See Section 2 above. Additionally, we reserve the right to disclose or use information if we have a good faith belief that such action is necessary to: (a) protect and defend our rights, property, or liability (or those of our service providers), other users of this website, or the public; (b) enforce the Terms & Conditions; (c) respond to claims that content violates the rights of third parties; (d) respond to claims of suspected or actual illegal activity; (e) detect, address, or prevent fraud, security, or technical issues; or (f) respond to an audit.

With Business Partners

We may disclose personal and other sensitive information, as necessary, in connection with providing our products and services. In order to originate, place, sell, and/or service loans or related products, we may disclose your information to loan buyers, financing providers, insurers, reinsurers, intermediaries, brokers, lenders, underwriters, reference bureaus, fraud detection agencies, advisers, lawyers, accountants, and other third parties involved in the applicable process(es).

With Your Consent

We may disclose personal and other sensitive information after receiving your consent for such disclosure. Consent may be provided via written, electronic, or verbal means, subject to our ability to reasonably validate your identity and determine the authenticity of the request.

SMS Consent

We may collect your phone number if you choose to provide it through our website or other means. SMS consent is not shared with third parties or affiliates for marketing purposes. Your SMS consent is used solely for communications directly from 360 Vault Exchange, LLC, unless you opt in to allowing SMS through us or a third party (the “Brand”).

4. HOW CAN YOU LIMIT THE SHARING OF YOUR DATA?

We respect your privacy and your right to limit the sharing of your information. You can contact us at any time to limit our sharing by using the contact information at the bottom of this Privacy Policy. Please note, however, that federal law gives you the right to limit only:

• Sharing for affiliates’ everyday business purposes;

• Affiliates from using your information to market to you; and

• Sharing for non-affiliates to market to you.

State laws may give you additional rights to limit sharing.

You can also opt out of receiving marketing emails by following the opt-out instructions in any marketing email or text message you receive.

If you do not wish to allow our website to use cookies or similar tracking tools, you may configure your browser to block them. Please understand that blocking cookies may reduce the functions and Services our website makes available to you.

For more information on how to reject or delete cookies, you should consult your browser’s or device’s help documentation or visit www.aboutcookies.org. At this time, we do not (a) respond to automated signals regarding tracking mechanisms, including “do not track” instructions from your browser; or (b) allow third parties to install software to track users’ identities on our website.

To limit the use and disclosure of your personal information, please submit a request using the contact details in Section 7 below.

5. WHAT STEPS DO WE TAKE TO PROTECT YOUR INFORMATION?

Secure Internet Connectivity

We protect personal/private information through the use of encryption technology. We use industry standard security protocol (Secure Sockets Layer or “SSL”) to help ensure that the connection between your browser and our server remains protected. Unfortunately, no data transmitted over the Internet or stored in a data storage system can be guaranteed 100% secure. If you believe your connection with us is no longer secure for any reason, please notify us immediately.

Information Security

Personal information and user-specific settings and preferences are stored using commercially standard database and website security software. User passwords and other sensitive user information are saved in a secure manner to help prevent unauthorized access or disclosure and accidental loss, alteration, or destruction.

Evaluation of Information Protection Practices

Periodically, our operations and business practices are reviewed for compliance with corporate policies and procedures governing the security, confidentiality, and quality of our information.

Employee Access, Training and Expectations

Our employees are required to protect confidential third-party information as a condition of employment, and our business practices limit the use and disclosure of such information, including personal information, to authorized persons, processes, and transactions.

6. ADDITIONAL CONCERNS

Updating and Correcting Your Information

Keeping your information accurate and up to date is important since inaccurate or incomplete information could impact our ability to deliver Services to you. Please let us know about any changes that may be required to your personal information by updating your account profile (if available) or by contacting us.

Continued Use of Information

Even if you are no longer our customer or client, we may continue to share your information as described in this Privacy Policy.

External Links and Third-Party Privacy Policies

We may post links to third-party websites that are governed by their own terms and are not subject to this Privacy Policy. We do not exercise control over these third-party sites and are not responsible for the privacy practices of any third party. We encourage you to read the privacy policies and terms of use of any third-party websites you visit.

International Users

The Services are operated in the United States and intended for users located in the United States. If you access this website from outside the United States, your information may be transferred to the United States and you agree to such transfer. You acknowledge that the United States may not provide the same level of protections as the laws of your country.

Children

The Services are not intended for anyone under the age of 18. We do not knowingly collect, use, or disclose information of children under the age of 18 without the consent of a parent or legal guardian. We will delete personal information collected that we determine to be from a user younger than the age of 18.

Rights of California Residents

Residents of the state of California have the right to request certain information from us with respect to the types of personal information we share with third parties for their direct marketing purposes, as well as the identities of the third parties we have shared such information with during the immediately preceding calendar year. To exercise your choices, please contact us using the information in Section 7 below and reference “Shine the Light.”

7. CONTACT US

For additional information, or if you have questions regarding this Privacy Policy or our privacy practices, please contact us:

360 Vault Exchange, LLC

201 8th Street General Mailroom

Hoquiam, WA 98550

Phone: 1(564)218-3485

Website: www.vaultexchange360.com

Email: benjamin@vaultexchange360.com

8. CHANGES TO THIS PRIVACY POLICY

This Privacy Policy may be revised at any time to reflect changes in the law or in our business operations. Any changes will be effective immediately upon posting of the revised Privacy Policy. If we make material changes that we want to apply retroactively, we will notify you and obtain your consent to the extent required by applicable law.