Open Finance Privacy Notice (U.S.)

Account & Service Control · User right or choice

Depending on your country or state, you may have rights to access, correct, delete and opt out

Depending on your country or state, you may have the right to access, correct or delete Personal Information Finicity holds about you; to know more about the categories of Personal Information it collects, uses and discloses, its sources and the categories or a specific list of third parties it discloses to; to confirm whether it has processed your Personal Information; to opt out of, object to or restrict some uses (including targeted advertising, sale of personal information and profiling in furtherance of decisions that produce legal effects); and to withdraw any consent you gave.

Supporting quotations

Depending on your country or state, you may have the right to access, correct, or delete any Personal Information we hold about you; know more about the categories of Personal Information we collect, use, and disclose, as well as our sources of Personal Information and categories or a specific list of third parties with whom we disclose it; confirm whether we have processed your Personal Information; opt out of, object to, or restrict some uses of your Personal Information (including targeted advertising, sale of personal information, and profiling in furtherance of decisions that produce legal effects); and withdraw any consent provided.

Not stated here

• The notice does not say which countries or states give which of these rights.

Account & Service Control · User right or choice

Exercising privacy rights should not lead to denial or different prices, except where tied to data value

You also have the right not to receive discriminatory treatment for exercising your privacy rights, subject to certain limitations. Finicity says it will not deny, charge different prices for, or provide a different level of quality of goods or services because you exercise your rights, except where a different price or level of quality is reasonably related to the value of the data it receives from you.

Supporting quotations

You also have the right not to receive discriminatory treatment for the exercise of your privacy rights, subject to certain limitations. We will not deny, charge different prices for, or provide a different level of quality of goods or services if you choose to exercise your rights, except where the different price or level of quality of good or service is reasonably related to the value of the data that we receive from you.

Qualifications & exceptions

• The right is "subject to certain limitations" that the notice does not list.

Account & Service Control · Procedure

Submit privacy rights requests through the Data Privacy Consumer Rights Portal or by phone

To exercise rights under the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) or any other applicable privacy law granting such rights, you can submit a request through Finicity's Data Privacy Consumer Rights Portal or call the phone number given in the notice.

Supporting quotations

Submit Requests. To exercise your rights under the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) or any other applicable privacy law granting such rights, please submit your request via our Data Privacy Consumer Rights Portal or call (833) 246-9307.

Account & Service Control · Procedure

Access, deletion and correction requests require identity verification, including a signed affidavit

Requests for access, deletion or correction are subject to Finicity's ability to reasonably verify your identity in light of the information requested and applicable law. For requests through the portal, a two-step verification adds a layer of security. To help verify your identity and find relevant information, Finicity will request any usernames you previously shared with Finicity systems (if applicable), the corresponding bank names and the last 4 digits of corresponding account numbers. It will also request a signed affidavit (a suggested template is provided, signable physically or electronically) affirming your state of residence and that you are the consumer whose personal information is the subject of the request.

Supporting quotations

Verification. Requests for access, deletion, or correction of Personal Information are subject to our ability to reasonably verify your identity in light of the information requested pursuant to applicable law requirements, limitations, and regulations. We are committed to securing your personal information. When consumers exercise their rights through our Data Privacy Consumer Rights Portal, a two-step verification will enable their account to be guarded by an extra layer of security. To aid us in verifying your identity and identifying any relevant personal information on our systems, we will request any usernames that you previously shared with Finicity systems (if applicable), corresponding bank names, and last 4 digits of corresponding account numbers. We will also request a signed affidavit (we provide a suggested template which can be signed physically or electronically) affirming your state of residence, and that you are the consumer whose personal information is the subject of your request.

Qualifications & exceptions

• Subject to Finicity's ability to reasonably verify your identity in light of the information requested and applicable law.
• The request for previously shared usernames applies "if applicable".

Account & Service Control · User right or choice

If a rights request is denied, you can appeal by phone or through the portal

If your request is denied, you have the right to appeal the decision by calling Finicity or submitting a request through the Data Privacy Consumer Rights Portal as described in the "Submit Requests" subsection.

Supporting quotations

How to Appeal. If your request is denied, you have the right to appeal the decision by calling us at (833) 246-9307 or submitting a request through our Data Privacy Consumer Rights Portal as described above in the “Submit Requests” subsection.

Account & Service Control · Procedure

An authorized agent can make requests for you with the resident's signed written authorization

If you act as an authorized agent making a request to know, delete, correct or opt out on behalf of a consumer, you may submit it through the Data Privacy Consumer Rights Portal or by phone. Finicity says it will require you to attach a written authorization signed by the resident whose Personal Information is the subject of the request.

Supporting quotations

Authorizing an Agent. If you are acting as an authorized agent to make a request to know, delete, correct, or opt out on behalf of a consumer, you may submit a request via our Data Privacy Consumer Rights Portal or call (833) 246-9307. Please note that we will require you to attach a written authorization signed by the resident whose Personal Information will be subject to the request.

Qualifications & exceptions

• Covers requests to know, delete, correct or opt out.

Account & Service Control · Restriction or exception

You must be at least 18 and at least the age of majority where you live

You must be at least 18 years old to use the Services. Finicity does not knowingly direct the Services to people under 18 ("Minors"). If you use the Services, you represent that you are at least the age of majority under the laws of the jurisdiction where you live.

Supporting quotations

You must be at least 18 years old to use our Services. We do not knowingly direct our Services to individuals under 18 years old

If you use our Services, you represent that you are at least the age of majority under the laws of the jurisdiction of your place of residence.

Account & Service Control · Procedure

Privacy questions go to Finicity's Data Privacy Officer by email or to its mailing address

Questions about the notice, Finicity's information practices or other aspects of privacy in connection with the Services should be directed to its Data Privacy Officer, who can be reached at the email address in the notice. The Finicity mailing address given is Mastercard, attn: Open Finance Compliance, 1895 E Rodeo Walk Dr, Suite B200, Holladay, UT 84117.

Supporting quotations

Questions regarding this Privacy Notice, our information practices, or other aspects of privacy in connection with the use of our Services should be directed to our Data Privacy Officer, who can be reached by email at

Finicity Mailing Address: Mastercard attn: Open Finance Compliance 1895 E Rodeo Walk Dr Suite B200 Holladay, UT 84117