Rev. 11/2023

• The notice carries a revision label, not an effective date Legal Rights & Agreement Rules

FACTS

WHAT DOES AMERICAN EXPRESS DO WITH YOUR PERSONAL INFORMATION?

| Why? | Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do. |

• Why the notice exists: federal law, sharing and limits Legal Rights & Agreement Rules

| What? | The types of personal information we collect and share depend on the product or service you have with us. This information can include: ● Social Security number and income ● transaction history and account history ● insurance claim history and credit history |

• Types of personal information collected and shared Data Access & Collection

| How? | All financial companies need to share customers' personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers' personal information; the reasons American Express chooses to share; and whether you can limit this sharing. |

• How the sharing list is organized Sharing & Disclosure

| Reasons we can share personal information | Does American Express share? | Can you limit this sharing? |

• How the sharing list is organized Sharing & Disclosure

| For our everyday business purposes – such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus | Yes | No |

• Sharing for everyday business purposes: yes, cannot limit Sharing & Disclosure

| For our marketing purposes – to offer our products and services to you | Yes | No (but please see the "To limit direct marketing" box below for information about additional privacy choices) |

• Sharing for American Express's own marketing: yes, no limit in this row Sharing & Disclosure

| For joint marketing with other financial companies | Yes | No |

• Sharing for joint marketing with other financial companies: yes, cannot limit Sharing & Disclosure

| For our affiliates' everyday business purposes – information about your transactions and experiences | Yes | No |

• Affiliates' everyday business purposes (transactions and experiences): yes, cannot limit Sharing & Disclosure

| For our affiliates' everyday business purposes – information about your creditworthiness | No | We don’t share |

• Affiliates' everyday business purposes (creditworthiness): no Sharing & Disclosure

| For our affiliates to market to you | No | We don’t share |

• Affiliates marketing to you: no Sharing & Disclosure

| For nonaffiliates to market to you | No (although we may share aggregated or de-identified data) | We don't share personal information |

• Nonaffiliates marketing to you: no personal information shared Sharing & Disclosure

| To limit direct marketing | We provide additional privacy choices to customers. Privacy elections you make for any one product or service may not automatically be applied to other products and services. To let us know if you do not want us to use your personal information to communicate with you about offers by email and/or direct mail: ● Click on the unsubscribe link found at the bottom of the email communication(s) and follow the instructions provided. ● Follow the instructions provided on the bottom of the direct mail communication. |

• Choices to limit direct marketing by email or mail Use & Processing

| Questions? | Call 1-800-528-4800 or go to www.americanexpress.com/contact. |

• How to ask questions Account & Service Control

| Who we are |

| Who is providing this Notice | American Express Travel Related Services Company, Inc. and other American Express Affiliates that provide financial products or services, including American Express National Bank and AMEX Assurance Company. |

• Who is providing this notice Legal Rights & Agreement Rules
• AMEX Assurance Company customers: possible right to access and correct Legal Rights & Agreement Rules

| What we do |

| How does American Express protect my personal information? | To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings. |

• How American Express says it protects personal information Security & Safeguards

| How does American Express collect my personal information? | We collect your personal information, for example, when you ● open an account or pay your bills ● give us your income information or give us your contact information ● use your credit card We also collect your personal information from others, such as credit bureaus, affiliates, or other companies. |

• How American Express collects personal information Data Access & Collection

| Why can't I limit all sharing of personal information? | Federal law gives you the right to limit only ● sharing for affiliates' everyday business purposes - information about your creditworthiness ● affiliates from using your information to market to you ● sharing for nonaffiliates to market to you State laws and individual companies may give you additional rights to limit sharing. See below for more on your rights under state law. |

• What federal law lets you limit, and other possible rights Legal Rights & Agreement Rules
• State law may be more protective than federal law Legal Rights & Agreement Rules

| What happens when I limit sharing for an account I hold jointly with someone else? | Your choices will apply to everyone on your account. |

• Joint accounts: your choices apply to everyone on the account Account & Service Control

| Definitions |

| Affiliates | Companies related by common ownership or control. They can be financial and nonfinancial companies. ● Our affiliates include companies with the American Express name, including financial companies such as American Express Travel Related Services Company, Inc. and nonfinancial companies. Affiliates may also include other companies related by common ownership or control, such as AMEX Assurance Company, a provider of American Express Card-related insurance services. |

• Definition: Affiliates Legal Rights & Agreement Rules
• Vermont billing address: no sharing of creditworthiness information with Affiliates Sharing & Disclosure

| Nonaffiliates | Companies not related by common ownership or control. They can be financial and nonfinancial companies. ● Nonaffiliates with which we share personal information include service providers, including, for example, direct marketers, that perform services or functions on our behalf. |

• Definition: Nonaffiliates Sharing & Disclosure

| Joint marketing | A formal agreement between nonaffiliated companies that together market financial products or services to you. ● Our joint marketing partners include financial companies. |

• Definition: Joint marketing Sharing & Disclosure

Other important information

We may transfer personal information to other countries, for example, for customer service or to process transactions.

• Personal information may be transferred to other countries Use & Processing

AMEX Assurance Company customers. You may have the right to access and correct recorded personal information. Personal information may be disclosed by us to detect fraud or misrepresentation, to verify insurance coverage, to an insurance regulatory authority, law enforcement or other governmental authority pursuant to law, or to a group policyholder for purposes of reporting claims experience or conducting an audit. Personal information related to insurance claim activity obtained from a report prepared by an insurance-support organization on our behalf may be retained by such organization and disclosed as required by law. State law may be more protective than federal law. California: If your American Express account has a California billing address, we will not share your personal information except to the extent permitted under California law.

• AMEX Assurance Company customers: possible right to access and correct Legal Rights & Agreement Rules
• AMEX Assurance Company customers: permitted disclosures of personal information Sharing & Disclosure
• Insurance claim information held by an insurance-support organization Retention & Deletion
• State law may be more protective than federal law Legal Rights & Agreement Rules
• California billing address: sharing limited to what California law permits Sharing & Disclosure

Vermont: If your American Express account has a Vermont billing address, we will automatically treat your account as if you have directed us not to share information about your creditworthiness with our Affiliates.

• Vermont billing address: no sharing of creditworthiness information with Affiliates Sharing & Disclosure

Page 2 of 2