Privacy Policy

We collect information about you to help us serve your financial needs, to provide you with quality products and services, and to fulfill legal and regulatory requirements. We consider all information about you in our possession to be personal information, even if you cease to be a customer. We collect this information on applications and other forms you complete, through conversations you may have with our loan professionals, with other representatives, and in some cases, over our website and mobile applications. We may also collect information from a wide range of other sources in order to process and/or underwrite your loan application, and to provide other products and services. These sources may include among others, employers, attorneys, banks, title insurers, insurance companies, credit reporting agencies, utility companies, and public records. This information may include your name, address, phone number, email address, social security number, account numbers, real property, and energy usage.

We do not sell or rent customer information. We share customer information with certain employees, and with companies providing services on our behalf in order to offer you products and service your needs. Our policy is to require all employees and companies providing services on our behalf, to keep customer information confidential. Our privacy policy applies to potential customers, as well as current and former customers.

We may also collect, store or accumulate certain non-personally identifiable information concerning your use of this website and mobile applications, such as information regarding which of our pages are most popular. Information gathered may be used in aggregate form for internal business purposes, such as generating statistics and developing marketing plans. We may share or transfer such aggregate, non-personally identifiable information with or to our affiliates.

When you fill-out a form on our website or mobile applications, we capture your IP-address. This enables us to track and prevent fraudulent attacks against our website and mobile applications as a security precaution and may be used to prevent fraudulent applications. We do not use your IP-address to contact you.

Our website and mobile applications are intended for adults. We do not knowingly collect personal information from children under the age of 13. However, if the parent or guardian of a child under 13 believes that the child has provided us with personally identifiable information, the parent or guardian of that child should contact us immediately at privacy@goodleap.com if they want this information deleted from our files, so that it is not in retrievable form. If we otherwise obtain knowledge that we have personally identifiable information about a child under 13 in retrievable form in our files, we will delete the information from our existing files so that it is not retrievable.

We have adopted policies and procedures designed to protect your personal information from unauthorized use or disclosure.

We have implemented physical, electronic, and procedural safeguards to maintain confidentiality and integrity of the personal information in our possession, and to guard against unauthorized access. These include among other things, procedures for controlling access to customer files, building security programs, and information technology security measures such as the use of passwords, firewall, plus virus and use detection software. We continue to access new technology as it becomes available, and to upgrade our physical and electronic security systems as appropriate.

If you encounter any potential security issues in the GoodLeap platform and wish to responsibly disclose them, please click here "Report a Security Bug"

Our policy is to permit employees to access your personal information only if they have a business purpose for using such information, such as administering, providing or developing our products or services. Our policy governs the conduct of all of our employees and third-party vendors, to safeguard personal information about consumers, and customers we serve or have served in the past.

We share personal information about you, as required or permitted by law, with affiliates and third-parties such as, service providers who assist us in the day-to-day operations of our company in the administration, processing, servicing, and sale of your loan and other products offered by us. These affiliates and third-parties include among others, title companies, appraisers, insurance companies, underwriting services, processing services, printing companies, software providers, marketing services, payment processors, and purchasers of loans. Our policy is to require affiliates and third-party service providers to enter into confidentiality agreements with us, prohibiting them from using any personal information they obtain for any other purpose, other than those for which they were retained or as required by law. We may also disclose information about you, when necessary or required, in legal and arbitration proceedings, and to government agencies.

We make sure that these parties won't use your personal data for their own purposes and we only permit them to use it in accordance with their confidentiality agreements with us and the law. Examples of these other parties include the following types of organizations:

Trusted businesses or persons: who process your information for us for the purposes set forth in this Policy based on our instructions and as set out in our Privacy Policy. For example, we may use service providers to help us with customer support or payment processing.

Design, engineering, and installation companies: we need to share information related to the size of your real property where you would like home improvements or a solar system installed, and your electrical configuration with our partners that will perform the work to install and maintain these services.

Marketing agencies, search engines and social media networks: to advertise GoodLeap and to gather feedback on GoodLeap such as through customer surveys. To opt out of marketing communications you can email us at privacy@goodleap.com or reply “STOP” to a text phone message you receive.

People and businesses you have expressly authorized us to share data with: such as family members you authorize to access your GoodLeap information, energy providers, and utility companies so we can fulfill your requirements.

We may share information collected from your utility meter with our affiliates, service providers, or other third parties for the purpose of providing you electric utility service or other services you may request.

Credit reporting agencies: We may inform credit reference agencies on the status of your account as provided in your agreement with us. You can find more information on how these agencies process your personal data and your data protection rights by looking at their privacy policies.

There are two commonly used technologies used on this site, clear gifs and cookies. We use these to monitor the performance and effectiveness of the site. “Cookies” are small pieces of information stored by our browser on your computer's hard drive. We do not use cookies to obtain any personally identifying information. Most web browsers automatically accept cookies, but you can usually change your browser settings to prevent this. Please be assured that accepting a cookie does not give us access to your computer or personal information under any circumstances. If you disable cookies, you may be unable to use some features of our site. If you experience any problems with our website or mobile applications, please click here "Report a Bug", and report the issue encountered.

Clear gifs are tiny graphics with a unique identifier, similar in function to cookies, and are used to track the online movements of Web users. Clear gifs are not tied to users' personally identifiable information.

We may revise this Privacy Policy from time to time. If we decide to change our Privacy Policy, we will post the revised policy here. As we may make changes at any time without notifying you, we suggest that you periodically consult this Privacy Policy.

Your continued participation on this website or mobile application indicates your acceptance of this Privacy Policy, and of the collection, use, disclosure, management, and storage of your personal information as described above. We may from time-to-time, transfer or merge any personal information collected offline to our online databases or store offline information in an electronic format. We may also combine personal information we collect online with information available from other sources.

If you have any questions about this privacy policy, please contact us by mail at:

GoodLeap
Attn: Compliance Department
8781 Sierra College Blvd.
Roseville, CA 95661

Effective Date of this Policy:

This policy was last revised on September 4, 2024 and takes effect immediately, and is in effect until further revised.

This California Privacy Rights Notice supplements the information contained in GoodLeap's Privacy Policy (goodleap.com/privacy) and applies to California residents (“consumers” or “you”). If you are a California resident, then you have certain rights under the California Consumer Privacy Act (“CCPA”) regarding Personal Information.

Right to Know

You have the right to know and see what data we have collected about you over the past 12 months, including:

• The categories of Personal Information we have collected about you (see Categories of Information We Collect below)
• The categories of sources from which the Personal Information is collected (see Categories of Sources for Personal Information below)
• Our business or commercial purpose for collecting your Personal Information (see Purposes for Collection and Use of Personal Information below)
• The categories of third parties with whom we have shared your Personal Information (see Sharing of Information below) and
• The Personal Information we have collected specifically about you (see Exercising Your Rights below).

Right to Delete

You have the right to request that we delete the Personal Information we have collected from you (and direct our Service Providers to do the same). There are a number of exceptions, however, that include, but are not limited to, when the information is necessary for us to do any of the following:

• Complete your transaction;
• Provide services to you;
• Perform a contract between us and you;
• Protect your security and prosecute those responsible for breaching it;
• Fix our systems in the case of a bug;
• Comply with a legal obligation; or
• Make other internal and lawful uses of the information that are compatible with the context in which you provided it.

Right to Prohibit Sales of Your Information

California law requires that we provide transparency about personal information we “sell,” defined as GoodLeap sharing personal information with third parties in exchange for valuable consideration.

In the preceding twelve (12) months, GoodLeap has not sold your Personal information.

We will provide notice to you prior to any change to our “No Sales” policy. In addition, you may pro-actively prohibit any such future sales of your Personal Information by us, see “Exercising Your Rights” below.

Exercising Your Rights

To exercise your specific Right to Know, or your Right to Delete, please submit a verifiable consumer request to us by email to customersupport@goodleap.com or by calling us at 1-844-562-6725.

To exercise your Right to Prohibit the Sales of your Personal Information (including future sales) please (a) click the link Privacy and Marketing Preferences or (b) submit a verifiable consumer request to us by email to customersupport@goodleap.com or by calling us at 1-844-562-6725.

Only you, or someone legally authorized to act on your behalf, may exercise these rights related to your Personal Information. Such a request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with the specific Personal Information we have if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. We will verify your request(s) by having you provide your name, address and contact information. We will then request additional identification verification to confirm your identity and/or the identity and authority of your authorized representative.

We will not discriminate against you for exercising any of your CCPA rights described above. Unless permitted by the CCPA, we will not deny you goods or services; charge you different prices or rates for goods or services; provide you a different level or quality of goods or services; or suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Categories of Information We Collect

GoodLeap collects information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“Personal Information”).

Specifically, we directly and/or through our website, mobile applications, or other online systems (“Systems”) have collected the following categories of Personal Information from consumers within the last twelve (12) months:

• Personal unique identifiers (SSN, name, drivers license, passport number)
• Personal information, including contact details, financial information
• Protected classification characteristics under California or federal law, such as sex or marital status
• Purchase or other commercial information
• Biometric information; Geo-location information, Sensory information
• Internet or online information, information regarding interactions with our websites, mobile applications, or advertisements
• Employment or education-related information
• Inferences from drawn from personal information collected

To the extent permitted by applicable law and with your consent, we may collect energy usage data, system production data, and performance data related to your improvements and/or solar system. for the following purposes (in each case to the extent permitted by law): (a) to operate, maintain, provide, and enhance the solar system; (b) for our internal purposes, including, without limitation, research and development, improvement of our product and service offerings, and creation of new product and service offerings; (c) to customize content and communications we may provide to you; and (d) for other purposes so long as the data does not contain personally identifiable information (including where data has been deidentified).

We will not disclose any data other than in the following circumstances: (a) where the data does not contain personally identifiable information (including where data has been deidentified); (b) in order to provide our products or services (including working with third-party service providers who may assist us in collecting, hosting, maintaining, analyzing or otherwise processing data for use); (c) to our assignees, affiliates, actual or prospective lenders, financing parties, investors, insurers, and acquirers; (d) disclosure to contractors, service providers and other third parties we use to support our business and who are bound by contractual obligations to keep personal information confidential and use data only for the purposes for which we disclose such data to them; and (e) or any purpose for which you have provided your express consent.

Personal Information does not include:

• Publicly available information from government records.
• De-identified, anonymized or aggregated consumer information.
• Information excluded from the CCPA's scope (e.g., information covered by the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994).

Categories of Sources for Personal Information

GoodLeap obtains the Personal Information from the following categories of sources:

• Directly from you. For example, from your communications to us and through the forms you complete and information you provide to request our financial products.
• Indirectly from you. For example, when you navigate through the Systems and such information is collected automatically. Information collected automatically may include usage details, IP addresses and information collected through cookies and other tracking technologies.
• From third-party sources. For example, consumer reporting agencies to process and approve your loan application, to verify identity, and to offer you financial products and services of interest to you.

Purposes for Collection and Use of Personal Information

We may use or disclose the Personal Information we collect for one or more of the following business purposes:

• To fulfill or meet the reason you provided the information.
• To provide, support, personalize, and develop our Systems and related services.
• To create, maintain, customize, and secure your account information and to support everyday operations including risk, legal, and compliance requirements.
• To prevent transactional fraud.
• To respond to your customer support requests and/or consumer complaints.
• To personalize your experience using our Systems and related services to deliver content and offerings of interest to you.
• To help maintain the safety, security, and integrity of our Systems, services, databases, related technology assets, and our overall business.
• For testing, research, analysis, and product development, including to develop and improve our business, our Systems and related services.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• As described to you when collecting your personal information.
• To evaluate or conduct a transaction involving some or all of GoodLeap's business or assets in which such information is among the assets to be included.

Sharing Personal Information

We share your personal information with the following categories of third parties:

• Parties involved in the loan application, underwriting, and financing process.
• Parties who service your account.
• Parties that perform services on GoodLeap's behalf.
• Parties specifically authorized by you.
• GoodLeap's financing contractors, investors, related agents and advisors.
• As required by law.

Sharing excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.
If at any time you wish to opt-out of communication, please reply "STOP". Text "HELP" for help.