Privacy Policy

Last updated: June 8, 2026

Prospera Credit Union ("Prospera Credit Union," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, and online banking services (collectively, the "Services").

Please read this policy carefully. By using our Services, you acknowledge that you have read and understood this Privacy Policy. This policy supplements — and does not replace — our account agreements and disclosures provided at account opening.

Information We Collect

We collect information in several ways depending on how you interact with Prospera Credit Union.

Information you provide directly

• Personal identification information (legal name, date of birth, Social Security number, government-issued ID)
• Contact information (mailing address, email address, phone number)
• Financial account information (account numbers, balances, transaction history, payee details)
• Authentication credentials (account passwords, security questions, one-time verification codes)
• Employment and income information (for loan and credit applications)
• Communications with our support team (phone recordings, chat transcripts, secure messages, email correspondence)
• Survey responses and feedback you voluntarily provide

Information collected automatically

• Device information (browser type, operating system, device identifiers, IP address)
• Usage data (pages visited, features used, session duration, click patterns)
• Location data (general geographic location derived from IP address; precise location only with your consent on mobile)
• Transaction data (amounts, dates, merchants, categories, transfer recipients)
• Security logs (sign-on attempts, password changes, device registrations)

Information from third parties

• Credit bureaus (for credit checks and identity verification)
• Identity verification services (to confirm your identity during enrollment)
• Merchant and payment network data (transaction details from Visa/Mastercard networks)
• Public records (for fraud prevention and regulatory compliance)

How We Use Your Information

We use the information we collect for the following purposes:

• Provide, maintain, and improve our banking services and Online Banking platform
• Process transactions, transfers, bill payments, and account requests
• Verify your identity and authenticate your access to accounts
• Monitor and prevent fraudulent activity, money laundering, and other financial crimes
• Generate spending analytics and financial insights for your personal use
• Send account alerts, statements, and service notifications
• Respond to your comments, questions, and support requests
• Comply with legal obligations, regulatory requirements, and court orders
• Conduct internal research and analysis to improve our products and services
• Send marketing communications about products and services (with your consent, where required)

Information Sharing

We do not sell your personal information. We do not share your data with data brokers, advertisers, or social media platforms for their marketing purposes.

We may share your information with the following categories of recipients:

• Service providers: Companies that assist in operating our platform (cloud hosting, payment processing, customer support tools, identity verification). These providers are contractually bound to protect your data and use it only for the services they provide to us.
• Financial partners: Payment networks (Visa, Mastercard), correspondent banks, and ACH operators necessary to process your transactions.
• Regulatory authorities: Federal and state banking regulators, the FDIC, FinCEN, and other agencies when required by law.
• Law enforcement: In response to valid subpoenas, court orders, or other legal process.
• Corporate transactions: In connection with a merger, acquisition, or sale of assets, with notice to affected customers.
• With your consent: When you authorize sharing, such as linking accounts to third-party financial apps via our secure API.

Cookies and Tracking Technologies

We use cookies and similar technologies on our website and Online Banking platform to:

• Maintain your sign-on session securely
• Remember your preferences (language, display settings)
• Analyze site usage to improve performance and user experience
• Detect and prevent fraudulent sign-on attempts

We do not use third-party advertising cookies or allow ad networks to track you on our banking platform. You can manage cookie preferences through your browser settings, though disabling essential cookies may affect your ability to use Online Banking.

Data Security

We implement industry-standard security measures to protect your information, including:

• 256-bit TLS encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Multi-factor authentication for Online Banking access
• Regular penetration testing and security audits by independent firms
• Role-based access controls limiting employee access to customer data
• 24/7 fraud monitoring and anomaly detection systems
• Employee security training and background checks

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We encourage you to use strong passwords, enable alerts, and report suspicious activity promptly. See our Security Center for tips.

Data Retention

We retain your personal information for as long as your account is open and as needed to provide services. After account closure, we retain certain records as required by banking regulations — typically 5–7 years for transaction records and 3 years for marketing consent records. Anonymized usage data may be retained indefinitely for analytical purposes.

Your Rights and Choices

Depending on your state of residence, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate personal information
• Deletion: Request deletion of personal information, subject to legal retention requirements
• Opt-out of marketing: Unsubscribe from promotional emails or opt out of marketing calls
• Opt-out of analytics: Disable spending analytics from Settings → Privacy in Online Banking
• Restrict sharing: Limit sharing with non-affiliated third parties for marketing purposes

To exercise these rights, contact us at privacy@prosperabbk.com or call +1 236 500 9933. We will respond within 45 days. We will not discriminate against you for exercising your privacy rights.

Children's Privacy

Our Services are not directed to individuals under 18. We do not knowingly collect personal information from children. Student Checking accounts for ages 17–24 require a parent or guardian as a joint account holder.

California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. As stated above, Prospera Credit Union does not sell personal information. To submit a CCPA request, email privacy@prosperabbk.com or call +1 236 500 9933.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website, sending an email to the address on file, or displaying a notice when you sign on to Online Banking. The "Last updated" date at the top indicates when the policy was most recently revised.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

• Email: privacy@prosperabbk.com
• Phone: +1 236 500 9933
• Mail: Prospera Credit Union Privacy Office, 100 Financial District, New York, NY 10005