Biometric Information Notice and Consent

Please read this document carefully and save or print a copy for your records.

WHAT THIS NOTICE COVERS

To confirm your identity and protect against fraud and identity theft, our identity-verification service provider (Stripe Identity) may capture a photo or short “selfie”/liveness video of your face and analyze your facial geometry to confirm that you match your government-issued identification. This facial-geometry data is a “biometric identifier,” and information derived from it is “biometric information.” This notice explains how we and our service provider handle it.

WHY WE COLLECT IT

We and our service provider collect and use your biometric identifiers and biometric information solely to verify your identity and to prevent fraud and identity theft. We do not use them for any other purpose, and we do not use them for advertising.

NO SALE; LIMITED DISCLOSURE

We do not sell, lease, trade, or otherwise profit from your biometric identifiers or biometric information. We disclose them only to our identity-verification service provider acting on our behalf to perform the verification, or as required by law or valid legal process, or with your consent.

CONSENT

By proceeding with biometric identity verification, you consent to the collection, use, storage, and (where described above) disclosure of your biometric identifiers and biometric information by Eos Loan and its service provider for the purposes stated in this notice. If you do not wish to provide biometric verification, contact us at dpo@eosloan.com about whether an alternative verification method is available.

RETENTION AND DESTRUCTION

We and our service provider retain your biometric data only as long as needed to fulfill the verification purpose, and then permanently destroy it within the time required by law. In any case, we will destroy it no later than: (a) when the purpose for collection has been satisfied; (b) for Illinois residents, three (3) years after your last interaction with us; or (c) for Texas residents, within a reasonable time and no later than one (1) year after the purpose for collection expires — whichever occurs first.

YOUR RIGHTS AND CONTACT

This notice is provided under the Texas Capture or Use of Biometric Identifier Act (Tex. Bus. & Com. Code § 503.001), the Illinois Biometric Information Privacy Act (740 ILCS 14), the Washington biometric-privacy law (RCW 19.375), and similar laws where applicable. For questions, or to withdraw consent for future verifications, contact our Data Protection Officer at dpo@eosloan.com (or compliance@eosloan.com).

HOW YOU ACCEPT

You accept this Biometric Information Notice and Consent electronically by checking the box in your Eos Loan application or account. Eos records your acceptance — including the date and time and the version you accepted — which, under the federal E-SIGN Act, serves as your signature and has the same legal effect as a handwritten one. You may request a paper copy.