Last updated: August 1, 2026

Afirm Labs Inc. ("Afirm Labs," "we," "us," or "our") operates the website at afirmlabs.com (the "Site"). This policy explains what information we collect when you visit the Site, how we use it, and what choices you have.

We are a Delaware corporation with offices at 305 E Huntland Drive, Ste 500, Austin, Texas 78752.

1. Information We Collect

Information you give us. The Site has a contact form. When you use it, we collect the name, email address, and message you submit. We do not require you to create an account, and we do not ask for payment information.

If you email us directly, we receive whatever you include in that message.

Information collected automatically. When you visit the Site, we and our analytics and advertising providers automatically collect:

• IP address and approximate location derived from it (city or region level)

• Browser type, operating system, and device type

• Pages viewed, time spent, and links clicked

• The website or ad that referred you to us

• Cookie and device identifiers

We do not collect Social Security numbers, financial account information, precise geolocation, biometric data, or any other category of sensitive personal information.

2. Cookies and Similar Technologies

We use the following:

Google's practices are described at policies.google.com/privacy. Meta's are described at facebook.com/privacy/policy.

You can block or delete cookies through your browser settings. Doing so will not affect your ability to use the Site. You can also opt out of Google Analytics using Google's browser add-on at tools.google.com/dlpage/gaoptout.

3. How We Use Information

We use the information described above to:

• Respond to your inquiry and follow up about it

• Understand how visitors find and use the Site, so we can improve it

• Measure the performance of our advertising

• Maintain the security of the Site

• Comply with legal obligations

We do not use your information to make automated decisions that produce legal or similarly significant effects.

4. How We Share Information

We do not sell your personal information for money.

However, under California and certain other state laws, our use of advertising cookies may qualify as "selling" or "sharing" personal information for cross-context behavioral advertising. See Section 6 for how to opt out.

We share information with:

• Service providers who operate the Site on our behalf: our hosting provider, our form and email provider (framer.com), and our analytics provider. They may use your information only to perform services for us.

• Advertising partners, as described in Section 2.

• Legal authorities, if we believe disclosure is reasonably necessary to comply with law, respond to legal process, enforce our terms, or protect the rights, property, or safety of our users or the public.

• An acquirer, if we are involved in a merger, acquisition, financing, or sale of assets. We will notify you before your information becomes subject to a different privacy policy.

5. How Long We Keep Information

We keep contact form submissions and related correspondence for [24] months after our last communication with you, unless you ask us to delete them sooner or we need to retain them for legal reasons.

Analytics data is retained according to our provider's settings, currently [14] months.

6. Your Privacy Rights

Depending on where you live, you may have the right to:

• Know and access the personal information we hold about you

• Correct inaccurate personal information

• Delete your personal information

• Obtain a portable copy of information you provided to us

• Opt out of targeted advertising and of the "sale" or "sharing" of your personal information

• Not be discriminated against for exercising these rights

How to exercise them. Email us at privacy@afirmlabs.com with your request. We will verify your identity by asking you to respond from the email address associated with your request, or by asking for information that matches what we already hold. We will respond within 45 days, and may extend once by another 45 days if we tell you why.

Authorized agents. You may use an authorized agent to submit a request. We may ask the agent for proof of authorization and ask you to verify your identity directly.

Appeals. If we deny your request, you may appeal by replying to our decision with the word "Appeal" and your reasons. We will respond within 60 days. If we deny your appeal, you may contact the Texas Attorney General at texasattorneygeneral.gov or the attorney general in your state.

Opting out of advertising. To opt out of targeted advertising and the sharing of your information for that purpose, you can:

• Use the "Do Not Sell or Share My Personal Information" link in our website footer

• Enable Global Privacy Control (GPC) in a supporting browser or extension. We treat GPC signals as a valid opt-out request.

• Adjust your ad preferences directly with Meta at facebook.com/adpreferences

Marketing email. If we send you marketing email, every message will include an unsubscribe link. We may still send you administrative messages about an inquiry you submitted.

7. Children's Privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us information, email privacy@afirmlabs.com and we will delete it.

8. Security

We use reasonable administrative and technical safeguards to protect the information we collect, including encryption in transit (HTTPS) and access controls on the accounts that hold form submissions. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Third-Party Links

The Site may link to other websites. We are not responsible for their privacy practices, and this policy does not apply to them. We encourage you to read their policies before providing them information.

10. Visitors Outside the United States

We operate in the United States, and the information we collect is stored and processed here. If you access the Site from another country, you understand that your information will be transferred to the United States, where privacy laws may differ from those in your country.

11. Changes to This Policy

We may update this policy. If we make material changes, we will update the "Last updated" date and post a notice on the Site. Changes take effect when posted.

12. Contact Us

Questions about this policy or your information:

Afirm Labs Inc., 305 E Huntland Drive, Ste 500, Austin, TX 78752, privacy@afirmlabs.com