U.S. Consumer Privacy Notice | U.S. Employee Applicant Privacy Notice

SoFi Privacy Policy

Date Last Updated

November 2025

1. Scope

This Privacy Policy is meant to help you understand how we and our affiliates collect, use, protect, and share your personal information. This Privacy Policy applies to SoFi’s online and offline collection, use, sharing, and retention of your personal information.

If you are a SoFi consumer or customer and applied for or obtained a financial product or service with SoFi, read our U.S. Consumer Privacy Notice to learn how we collect, use, protect and share your personal information and the privacy options available to you.

This Privacy Policy applies to all SoFi companies that offer products and services, which includes SoFi Technologies, Inc., Social Finance, LLC, and its Affiliates, (collectively, “SoFi,” “we,” or “us”).

SoFi Services means our websites (SoFi.com and LanternCredit.com), our mobile app, our product and services, and any other SoFi sites or services that link to this Privacy Policy.

2. Changes to Our Privacy Policy

We may change or update this Privacy Policy periodically. When we do, we will let you know by appropriate means such as by posting the revised Privacy Policy on our website with a new “Last Updated” date. Any changes to this Privacy Policy will become effective when posted unless indicated otherwise.

3. Personal Information We Collect and How We Collect It

1. Information you or your authorized agent provide to us. Personal information you may provide to us includes:
2. a. Identity information – including name, date of birth, marital status, social security number, and other data on government-issued identification documents (e.g., passport and driver’s license).
   
   We collect this information, in part, to meet federal requirements and to combat money laundering activities. Federal law requires all financial institutions to obtain, verify, and record information that identifies each person who opens a financial account.
   
   When you open a financial account, we will ask for your name, address, date of birth, and other information that will allow us to identify you. We may also ask to see your driver’s license or other identifying documents.
   
   When you transfer money internationally, using our SoFi Pay service, we may ask you to provide identifying information about the recipient such as their Universal Money Address (UMA), name, email, date of birth (when required), and other information required to support requirements and to facilitate the transfer.
   
   Other types of personal information that may be tied to your identity or used to identify you may include:
3. • Profile Data – such as your username and password, your interests, age, preferences, feedback, and survey responses.
   • Contact information – including home address, telephone, email address, and emergency contact details.
   • Employment information – including job title/position and annual income.
   • Geolocation data – which may include, city, state, and country and location associated with your I.P. address.
   • Characteristics of protected classifications under California or federal law, such as age, citizenship, gender, place of birth, and marital status.
   • Preferences – such as your preferences for receiving our marketing communications and privacy choices.
   • User-generated content – such as questions, messages, reviews, blog posts, and other content or information that you generate, transmit, or otherwise make available, as well as associated metadata. Metadata includes information on how, when, where and by whom a piece of content was collected and how that content has been formatted or edited. Metadata also includes information that users can add or can have added to their content, such as keywords, geographical or location information, and other similar data.
   • Promotional information – including information you share when you enter a competition, promotion or complete a survey. Please note that if you participate in a sweepstakes, contest, or giveaway, we may ask you for your contact data to notify you if you win or not, to verify your identity and/or to send you prizes. We may need additional information as a part of the entry process, such as a prize selection choice. These sweepstakes and contests are voluntary. We recommend that you read the rules and other relevant information for each sweepstakes and contest that you enter.
   • Financial information – such as student loan, personal, credit card, and mortgage account number(s); banking details; tax information, expenses, stock, equity details, including financial account details of linked financial accounts via Relay.
   • Information Technology (IT) information – information required to provide access to SoFi’s banking systems such as IP addresses, log files, and login information.
   • Your contacts and their information – With your permission, we access information about your contacts when you import or synchronize your contacts with our services and applications. We use this information to help you send money and referrals. You can unlink or disconnect your contacts at any time. When you unlink or disconnect your contacts, SoFi no longer has access to your contacts. Further, SoFi does not store or retain information related to your contacts.
   • Audio, electronic, visual, or similar information, including recordings of calls and online user sessions. We collect and use this information to measure and improve our member relationship protocols, to train and educate employees, and for compliance purposes.
     We collect photos you share with us as part of the SoFi Community.
   • SoFi’s investor profile – When you make your investor profile public, we collect photos, contact information, email addresses, videos, and other content you post to your investor profile. Please note that all information posted on SoFi’s investor community site is available to everyone using that service. The information you share is available to everyone accessing that service, and they may read, collect, or use it for any purpose, including sending you unsolicited messages. You can turn off social sharing at any time.
   • Travel – information related to your use of SoFi travel, including searches and bookings.
   • Other information – not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at time of collection.
4. b. Sensitive Personal Information We Collect
• Unique Identifiers – Your social security, driver’s license, state identification card, or passport number.
• Financial accounts – We collect account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account.
• Precise geolocation data – With your consent, we collect precise geolocation data (any data that is derived from a device and that is used or intended to be used to locate a consumer within a geographic area that is equal to or less than the area of a circle with a radius of 1,850 feet) to help you locate ATMs.
• Biometric data – As part of the verification process, we collect biometric information from government IDs and images to verify your identity.
• Health data – When you request information about certain insurance policies, we collect certain self-reported health related information.
5. Third-party sources. We collect information about you from third parties. We may also combine personal information we receive from you with personal information we obtain from other sources. We receive information from the following categories of sources.
6. • Data providers, such as information services and data licensors that provide demographic information, mailing addresses, and other information, (e.g., data aggregators, data compilers, data compilers/originators).
   • Event co-sponsors.
   • Travel, such as travel and booking details when you use a SoFi account.
   • Public sources, such as government agencies, public records, social media platforms, and other publicly available sources (e.g., public record sources and collection agencies).
   Consumer Reporting Agencies
   • As a company engaged in lending, SoFi both receives and transmits data to consumer reporting agencies. We obtain information from these agencies to assess your creditworthiness and to prevent fraud and identity theft. This is done as part of our regular underwriting, fraud prevention and loan servicing processes.
   • Information about open and closed credit accounts, including the date opened, the date closed (if applicable), the latest reported monthly balance and monthly payment.
   • Information about credit inquiries.
   • Information about past due payments and collection actions occurring on open and closed credit accounts.
   • Information regarding public records of bankruptcy, judgements, tax liens, and other payment statuses.
   • Referral sources, such as when a friend or family member refers you to SoFi for your financial product and service needs.
   Other
   • If you connect an external financial account to use SoFi’s Relay management and insight tools, Sofi will obtain information from that account such as account balance and transaction information, or loan details. SoFi facilitates our customers to use Plaid to retrieve information from external accounts, and we keep and use that information.
   • If you connect to SoFi through your employer’s benefits program, Sofi may receive information from your employer about your eligibility for benefits programs.
7. c. Agencies to whom complaints have been submitted regarding our services/products

Financial regulators, consumer protection agencies, and other businesses may share information, typically with your consent and knowledge, regarding complaints you submitted related to SoFi and its products or services.

8. d. Our SoFi family of companies. In compliance with applicable laws, SoFi collects personal information from other SoFi Affiliates. In certain cases, you have the right to opt out of this sharing. Visit Your Personal Information Choices to learn more.
9. e. Automatic data collection. We, our service providers, and marketing providers may automatically collect, use, and retain information about you, your computer or mobile device, and your interaction over time, our communications, and other online services, such as:
10. f. Device data, such as your computer’s or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings, mobile device carrier, radio/network information (e.g., Wi-Fi, LTE, 3G), and general location information such as city, state or geographic area.
11. • Online activity data, such as pages or screens you viewed, how long you spent on a page or screen, the previous website visited before navigating to our website(s), navigation paths between pages or screens, information about your activity on a page or screen, access times and duration of access, and whether you have opened our emails or clicked links within them.
    • Location data, such as city, state, country, and location associated with your I.P. address.

4. Cookies and similar technologies

12. We use the following technologies to facilitate the automatic data collection described above:
13. • Cookies, which are small text files that websites store on user devices and that allow web servers to record users’ web browsing activities and remember their submissions, preferences, and login status as they navigate a site. Cookies used on our sites include both “session cookies” that are deleted when a session ends, “persistent cookies” that remain longer, “first party” cookies that we place and “third party” cookies that we place on our websites and app for social media, advertising, analytics companies, and other service providers.
    • Logical storage technologies, like HTML5, that provide cookie-equivalent functionality but can store larger amounts of data on your device outside of your browser in connection with specific applications.
    • Pixels or web beacons, also known as pixel tags or clear GIFs, enable collection, storage, and sometimes sharing of your information and/or your actions taken, such as whether you accessed or opened a webpage or email or that you viewed or clicked certain content. Certain pixels include computer-code snippets that enable the collection and sharing of information back to web servers of third parties.
    • Session Replay Technologies. SoFi will capture your use of the Site and may record your use. We use third-party services that employ software code to record users’ interactions with the Website in a manner that allows us to watch DVR-like replays of those user sessions. The replays include users’ clicks, mobile app touches, mouse movements, scrolls and keystrokes/key touches during those sessions. These replays help us diagnose usability problems and identify areas for improvement. We may use the Cookies and similar technologies for the following purposes:
    • Technical operation. To allow the technical operation of our Services, such as by remembering your selections and preferences as you navigate our websites and app.
    • Functionality. To enhance the performance and functionality of our Services.
    • Advertising. To help our third-party marketing providers collect information about how you use our Services over time to show you ads on other online services they believe will interest you and measure how the ads perform.
    • Analytics. To help us understand user activity on the Website, including which pages are most and least visited and how visitors move around the Website, as well as user interactions with our emails.
    • For example, we use Google Analytics for this purpose. You can learn more about Google Analytics and how to prevent the use of Google Analytics relating to your use of our sites here: https://tools.google.com/dlpage/gaoptout?hl=en.
    • Cookie Opt-outs. You can disable cookies via most browsers. This may affect site functionality. To opt out of cookies on our site, click the “Your Privacy Options” link in the footer of our website, click “cookie choices” and select your preference.

5. Retention of Personal Information

We retain information we collect about you, and use the following factors to determine the retention period of personal information:

• to maintain an ongoing relationship with you as a customer, member, or business contact (for example, when you are a recipient of any of our financial services/products).
• to perform under applicable terms and services to which you agreed.
• as necessary in connection with the lawful purposes set out in this Privacy Policy.
• to comply with applicable laws
• to establish, exercise or defend our legal rights.

6. How We Use Your Personal Information

We use your personal information for the following purposes, or as otherwise described at the time of collection:

Provide Financial Services and Products. We use your personal information to provide you with financial services and products and

• review your application and determine eligibility for financial products and services.
• process transactions and payments, fulfill orders, and verify your customer information.
• make and receive payments.
• provide, operate, and maintain your SoFi financial accounts and services.
• for our Protect line of insurance, we use your sensitive personal information, including health data, to generate insurance quotes and offers, and to administer insurance policies and services.
• communicate with you about our products and services, your financial accounts, investments, including by sending announcements, updates, security alerts, and support and administrative messages.
• provide support for the Website, our financial services, and products, and respond to your requests, questions, and feedback.

Website and application delivery. We may use your personal information to:

• provide, operate, and improve the Website, application, our services, and our business.
• establish and maintain your user profile on the website or application.
• enable online security features, such as by remembering devices from which you have previously logged in.
• understand your needs and interests and personalize your experience with the Website and our communications.
• provide support for the Website, our financial services, and products, and respond to your requests, questions, and feedback.

Research and development and business promotion. We may use your personal information for research and development purposes, including to analyze and improve the Website and our business, and for business promotion purposes.

Marketing and advertising. We, our service providers, advertising and marketing platforms, and our third-party companies with which we maintain advertising agreements may collect and use your personal information for marketing and advertising purposes:

• Direct marketing. We may send you direct marketing communications. You may opt-out of our marketing communications as described in the Opt-out of marketing section below.
• Interest-based advertising. Our third-party advertising providers may use cookies, pixels, and similar technologies to collect information about your interaction (including the data described in the automatic data collection section above) with the Website, our communications, and other online services over time, and use that information to serve online ads that they think will interest you. This is called interest-based advertising.

We may also directly share information about you with these companies to facilitate interest-based advertising to those or similar users on other online platforms. To opt out of sharing information for this purpose, please visit “Your Personal Information Choices” on this page for instructions.

SoFi provides customers with access to multiple products and services offered by other companies through our Services. When you select to connect with another such company, SoFi may receive and keep information about your use of the other company’s products and services.

Meet compliance and legal obligations. We may use your personal information to:

• comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities.
• protect our, your or others’ rights, privacy, safety, or property (including by making and defending legal claims).
• audit our internal processes for compliance with legal and contractual requirements or our internal policies.
• enforce the terms and conditions that govern our Services.

Fraud Detection and prevention. We may use your personal information to prevent, identify, investigate, and deter fraudulent, harmful, unauthorized, unethical, or illegal activity, including cyberattacks, and identity theft.

With your consent. In certain cases, we ask for your consent to collect, use, and share your personal information, such as when obtaining a credit report.

7. Our Disclosure of Your Personal Information for Business Purposes

We share your personal information with the following parties and as otherwise described in this Privacy Policy, or at the time of collection.

Service providers. Third parties that provide services to SoFi, or to you on our behalf, or help us operate our business (such as data cloud providers), information technology, customer support, email delivery, marketing, consumer research and website analytics.

Insurance providers. If you provide information to SoFi Protect using designated SoFi Protect pages, we will share your information, including sensitive personal information such as health data, with those providers to generate insurance quotes and offers, and to administer insurance policies and services.

Consumer reporting agencies.

Social Media Platforms. If you interact with us or our SoFi Services on or through social media platforms, the platform may be able to collect information about you and your interaction with us. If you interact with social media objects on our sites, both the social media platform and your connections on the platform may be able to view that activity. To control the sharing of information, please review the privacy policy of the relevant social media platform.

Third parties designated by you. We may share your personal information with third parties where you have instructed us or provided your consent to do so. We will share personal information these other companies need to provide the services that you requested.

Business and marketing partners. Third parties with whom we co-sponsor events or promotions, with whom we jointly offer products or services, or whose products or services may be of interest to you.

Other lenders. SoFi may share your information with other lenders or loan brokers to offer products and services to you.
-SoFi operates a website branded as “Lantern” or Lanterncredit” that facilitates you connecting with other lenders or loan brokers. When you submit information, we share your information with other lenders and services providers to help you obtain financial services.
-If you are not eligible for a loan from SoFi or you decline an offer, SoFi may share your information with another lender to determine if that lender can fulfill your request.

Professional advisors. Professional advisors, such as lawyers, auditors, bankers, and insurers, where necessary in the course of the professional services that they render to us.

Legal authorities. Law enforcement, government authorities, regulatory agencies, and third parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above, and in compliance with applicable law.

Business transferees. Acquirers and other relevant participants in business transactions (or negotiations of or due diligence for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition of all or any portion of the business or assets of, or equity interests in, SoFi or our affiliates (including, in connection with a bankruptcy or similar proceedings).

Other users and the public Your user-generated content may be visible to other users of our Services and the public. For example, other users or the public may have access to your information if you provide comments, reviews, blog posts, messages or share other content. This information can be viewed, collected, and used by others, including being cached, copied, screen captured or stored elsewhere by others (e.g., search engines), and we are not responsible for any such use of this information.

8. Artificial Intelligence (AI)

We incorporate AI functionalities into our products and services, such as the chatbot used for customer support. We use AI to enhance your banking experience, improve the efficiency and quality of our services, and protect your account from fraud. We require our service providers to keep your personal information secure and do not allow them to use or share it for any purpose other than providing the contracted services on our behalf. Furthermore, we contractually prohibit our AI service providers from using your data to train or improve their own AI models.

9. The Categories of Third Parties with Whom We Disclose Your Personal Information for Business Purposes

Category of Personal Information	Types of Third Parties to Which the Personal Information Was Disclosed for a Business Purpose	Business Purpose for Disclosing Personal Information
Identity information	• Service providers • Advertising Partners • Third parties designated by you • Business and marketing partners • Professional advisors • Legal Authorities • Business transferees • Social media platforms • Other users and the public	• Provide financial services and products • Delivery of our Services • Research and development and business promotion • Marketing and advertising • Compliance and legal obligations • Fraud detection and prevention
Profile information
Contact information
Employment information
Internet or other electronic network activity information (device data, online activity data)
Preferences	• Service providers • Advertising and marketing companies • Social media platforms • Third parties designated by you • Business and marketing partners
Geolocation Data, such as the physical location of your device. (NOT Precise geolocation)	• Service providers • Advertising partners • Third parties designated by you • Business and marketing partners • Professional advisors • Legal Authorities • Social media platforms	• Delivery of our Services • Research and development and business promotion • Compliance and legal obligations • Fraud detection and prevention • Consent
Audio, electronic, visual, or similar information, including recordings of calls and online user sessions.	• Service providers • Advertising partners • Third parties designated by you • Business and marketing partners • Professional advisors • Legal authorities • Business transferees • Social media platforms
SoFi investor profile	• Service providers • Advertising Partners • Third parties designated by you • Business and marketing partners • Professional advisors • Authorities and others • Business transferees • Other users and the public	• Research and development and business promotion • Delivery of our services
Inferences, drawn from any of the information identified above to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	• Service providers • Advertising Partners • Third parties designated by you • Business and marketing partners • Business transferees • Social media platforms	• Provide financial services and products • Website and application delivery • Research and development and business promotion • Marketing and advertising • Compliance and legal obligations • Fraud detection and prevention
Transactional data	• Service providers (including data enrichment providers)	• Facilitate processing your transactions • Enhance user experience
Categories of Sensitive Personal Information
Unique Identifiers – Your social security, driver’s license, state identification card, or passport number.	• Service providers • Advertising Partners • Third parties designated by you • Business and marketing partners • Professional advisors • Legal Authorities • Business transferees • Social media platforms	• Provide financial services and products • Delivery of our Services • Research and development and business promotion • Marketing and advertising • Compliance and legal obligations • Fraud detection and prevention
Financial accounts
Health-related information – such as medical history, diagnoses, and treatment information.	• Insurance providers	• To generate insurance quotes and offers, and to administer insurance policies and services
The contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication.	• Service providers	• To provide customer support and service • To analyze and improve our products and services
Precise geolocation data – (any data that is derived from a device and that is used or intended to be used to locate a consumer within a geographic area that is equal to or less than the area of a circle with a radius of 1,850 feet,	• Service providers	• To provide services you requested or to which you gave consent
Biometric data – As part of the verification process, we collect biometric information from government IDs and images to verify your identity.	• Service providers • Third parties designated by you • Professional advisors • Authorities and others	• Compliance and legal obligations • Fraud detection and prevention • To provide Services you requested or to which you gave consent
Health data – When you request information about certain insurance policies, we collect certain self-reported health information.	• Service providers • Insurance providers	• To provide information and Services you request or to which you gave consent

10. Sale/Sharing of Personal Information

SoFi shares the following categories of personal information for interest-based advertising and analytics with social media platforms and marketing/advertising companies: Identity information, profile information, contact information, Internet or other electronic network activity information, automatic data collection described above, and limited SoFi financial data, demographic information (is a student/is not a student), and combinations of this data to infer interest/relevance.

If you would like to opt out of the sharing/selling of your personal information for interest-based advertising, please visit “How to Exercise Your Right to Opt Out of the Selling/Sharing of Personal Information” on this page for instructions. If you would like to opt out of the disclosure of certain information to nonaffiliated third parties, please read instructions below in “Affiliate and Non-Affiliate Data Sharing Preferences.”
SoFi will not share your phone number with non-SoFi companies for their own texting and auto-dialing purposes unless you provide consent.

11. Security

SoFi takes the privacy and security of its members’ personal information seriously. We maintain administrative, technical, and physical safeguards designed to protect your information’s security, confidentiality, and integrity.

12. Relay

As part of SoFi Services, we give you the opportunity to use online tools to organize financial information and obtain insights related to financial information, which SoFi offers under the product name brand of “Relay”(we refer to these as personal financial management insights and tools). If you use Relay, we collect and compile information about you and your accounts held at SoFi and at external financial institutions, such as a bank account or a loan serviced by another institution. If you choose to connect an external account in Relay, (referred to as a “Connected Account,”) you authorize SoFi to obtain information from the external account and use it as described below.

SoFi will obtain your account information. If you elect to connect an external account to SoFi, SoFi will obtain information from those Connected Accounts. The specific information SoFi obtains may vary by institution and account type. SoFi will obtain from the account any transactional and balance information from the linked accounts. For example, if you connect a bank account to Relay, SoFi can collect information from the account, including balance and transaction information, such as payments made and their amounts, debits, and deposits. If you connect a loan account from an external institution, SoFi can collect loan balance, interest rate on the loan, and your payment history.

Use of Plaid Services. To connect an account, SoFi requires you to use a service offered by Plaid Inc. (“Plaid”). Review Plaid’s Privacy Policy https://plaid.com/legal/#end-user-privacy-policy to learn more.

Use of information from Connected Accounts. If you connect an account through any SoFi service provider and with your consent, SoFi may use the information from the connected account to identify products and services that may be of interest to you, sharing information with affiliated companies to offer products and services to you, and identify if you would be likely to be eligible for certain products and services. If you do not want us to share this information for marketing purposes with SoFi affiliated companies, you may log in to sofi.com and click on our name in the top right corner > ‘My Profile’> ‘Account Settings’ to update your Optional Information Sharing preferences. If you need additional assistance, call 1-855-456-SOFI and an agent can help update your preferences.
Additionally, SoFi may share certain account information obtained via Plaid with trusted third-party service providers for the purpose of enriching or analyzing the data to enhance the insights and services offered to you through Relay. This third party is contractually bound to use the data only for this limited purpose and to maintain its confidentiality and security.
If you would like to delete a connection from SoFi Relay, you may do so from your account or by calling 1-855-456-SOFI (7634).

13. SoFi Pay

The SoFi Pay global money movement service allows you to: (1) make payments from your SoFI Checking account to recipients in other countries such as Mexico and Brazil; (2) receive payments into your SoFi Checking account from senders in other countries such as Mexico and Brazil. SoFi Pay is offered to SoFi members and non-members in certain jurisdictions.

If you use the SoFi Pay service, we may collect, use,or share your personal information, initially collected from individuals or counterparty banks, to facilitate sending or receiving funds.

The legal basis for processing your personal information is that the processing is necessary for compliance with a legal obligation to which the controller (SoFi) is subject.

International Data Transfers
Personal information about you may be transferred, accessed, and stored globally including in countries or regions outside of the one in which you reside. In the event your personal information is transferred from one country to another that does not provide an adequate level of protection for our personal information, SoFi will take measures to ensure your personal information is adequately transferred and protected in compliance with applicable laws.

SoFi relies on standard contractual clauses as its primary mechanism for performing cross border data transfers and assuring data protection adequacy.

14. Credit Score Monitoring

If you opt into Sofi’s Credit Services Monitoring,
-SoFi will present your credit score and other credit report data to you.
-SoFi will obtain and keep your credit reporting information and use it for the purposes permitted in this Privacy Policy. SoFi’s uses of your information includes:

• to serve targeted advertisements to you and other communication based on your information.
• to present offers to you for other SoFi products and services using your credit information to identify if you are likely to be eligible or interested.
• to perform statistical analysis to improve SoFi products and services.

You may obtain your own credit report without using SoFi. You have the right to a free credit report from the website AnnualCreditReport.com or by calling (877)322-8228.

If you would like to opt-out of Credit Score Monitoring, you may do so from your account or by calling 1-855-456-SOFI (7634).

15. SoFi at Work

If you reach SoFi through your employer’s benefits page, Sofi will share information about your use of SoFi with your employer for the purpose of operating the benefits program. If you interacted with us via the SoFi at Work Dashboard or platform, this Privacy Policy covers your use of those tools and services.

16. Lantern and Protect

SoFi website includes webpages branded as Lantern or Lanterncredit that allow users to connect with other lenders and loan brokers or marketing services providers.

When you provide information to SoFi using Lantern pages, we share your information with other companies that provide loan related offers to you. These parties may interact with you and may retain and use your information whether you use their services or obtain their products.

SoFi Insurance Agency, LLC (“SoFi Protect”) offers a variety of insurance products through multiple providers. If you provide information to SoFi Protect using designated SoFi Protect pages, we will share your information with those providers to generate insurance quotes and offers.

17. Links to Other Services or Applications

This Privacy Policy applies only to SoFi’s Services. SoFi Services may contain links to other websites or apps or may forward users to other websites or apps that we may not own or operate and to which this Privacy Policy does not apply. We neither can control nor are responsible for the privacy practices or content of these websites or apps. We suggest reading the privacy notices of these websites or app providers or contacting them directly for information on their privacy practices. Nonetheless, we seek to protect the integrity of our Services and welcome any feedback about these linked websites and mobile applications.

18. Information of Children

Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from an individual under age 18. If you are under the age of 18, please do not submit any personal information through the Website, app, or service. If you have reason to believe that we may have accidentally received personal information from an individual under age 18, please contact us immediately at 1-855-456-SOFI (7634).

We do not knowingly collect, sell, or share the personal information of children under the age of 16.

19. Your Personal Information Choices

You may have additional choices if you are from California and Nevada. Please see below if you are a resident of those areas.

We want you to be aware of the choices you have in limiting the sharing of your personal information.

Direct Mail Opt-Out

To opt out of SoFi’s marketing and advertising campaigns conducted via direct/postal mail, please make your request at https://www.sofi.com/optout/.

Access or Update Your Information (Registered Users)

If you have registered for an account with us through the SoFi.com Website, you may review and update certain account information by logging into your account. To update your profile, visit “My Profile” after logging into your account. This section of the site is password protected to safeguard your information. As a registered user, you can update your password, physical address, phone numbers, education, and employment information at any time on the Website. If you need to change any other information in your profile, please contact our customer service hotline at 1-855-456-SOFI (7634).

Correcting Information Maintained by the National Credit Reporting Agencies

Credit reporting agencies maintain Information related to your creditworthiness. If you find that there is an error or want to dispute the information found in your credit report, please contact the national credit reporting agencies.

• Equifax – https://www.ai.equifax.com/
• Experian – https://www.experian.com/
• TransUnion – https://dispute.transunion.com/

Advertising choices You can limit use of your information for interest-based advertising by:

• Browser settings. Blocking third-party cookies in your browser settings.
• Privacy browsers/plug-ins. By using privacy browsers or ad-blocking browser plug-ins that let you block tracking technologies. Read our treatment of the Global Privacy Control.
• Platform settings. Google, Bing, Facebook, and TikTok offer opt-out features that let you opt-out of use of your information for interest-based advertising:
  Google: https://adssettings.google.com/
  Bing: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
  Facebook: https://www.facebook.com/about/ads
  TikTok: https://www.tiktok.com/legal/privacy-policy-us?lang=en
  

Unlinking or disconnecting connected accounts.

You can remove links to external institutions by using the External Account Linking Hub within the SoFi app.

Mobile settings.

Using your mobile device settings to limit use of the advertising ID associated with your mobile device for interest-based advertising purposes. You will need to apply these opt-out settings on each device from which you wish to opt-out.

Communication Preferences

SoFi registered users can manage their communication preferences via the “My Profile” section of the site after logging into their account.

Affiliate and Non-Affiliate Data Sharing Preferences

SoFi registered users can manage their “Optional Data Sharing Preferences” via the “My Profile” section of the site after logging into their account. This is a limited right and only applies in certain cases. Review our U.S. Consumer (GLBA) Privacy Notice to learn when the right applies.

Cookie Options

Visit the “Cookies and similar technologies” section to learn how to how opt of cookies.

Other Privacy Choices

Browse to the California Privacy Rights section to view other rights that may be available to you and the method to exercise them.

Declining to provide information

We need to collect personal information to provide certain services. If you do not provide the information we identify as required or mandatory, we may not be able to provide those services.

20. Complaints and Concerns

SoFi maintains a process to respond to your concerns regarding violations of this Privacy Policy. If you believe that we have not complied with this policy or have questions regarding your privacy with us, please call us at 1-855-456-SOFI (7634). If you are reporting non-compliance with this Privacy Policy, please describe the issue in as much detail as possible without disclosing any sensitive information about you or third parties.

21. Data Privacy and Protection Rights

Depending on the jurisdiction in which you reside, you may have certain rights about how your Personal Information is collected, stored, used, and shared.

Your California Privacy Rights
Under the California Consumer Privacy Act (CCPA), residents have certain rights as outlined in this section. However, the CCPA allows exceptions for and, therefore, does not apply to the following:

Under the California Consumer Privacy Act (CCPA), residents have certain rights as outlined in this section. However, the CCPA allows exceptions for and, therefore, does not apply to the following:

-Publicly available information made lawfully available from government records.
-Information that is deidentified, meaning that the information is rendered so that it cannot reasonably be used to infer information about or link to a specific person.
-Information subject to other laws, such as the following:
• Personal information covered by subject to certain sector-specific privacy laws, including the Fair Credit Reporting Act (“FCRA”), the Gramm-Leach Bliley Act (“GLBA”) or California Financial Information Privacy Act (“CalFIPA”), and the Driver’s Privacy Protection Act of 1994.

California residents have the right to
-know what personal information we have collected about you, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom the business discloses personal information, and the specific pieces of personal information the business has collected about you;

-request the deletion of certain personal information collected by us;
-correct inaccurate personal information;
-know/access or receive a disclosure of your personal information;
-know what personal information is sold or shared and to whom;
-opt-out of the sale or sharing of your personal information;
-in certain cases, limit the use and disclosure of sensitive personal information; and
– no retaliation for opting out or exercising any other rights, including an employee’s right not to be retaliated against for the exercise of their CCPA rights.

Your Brazil Privacy Rights
Under Brazil’s Lei Geral de Protecao de Dados (LGPD), the General Data Protection Law enacted in 2018, individuals have the right to access, rectify, cancel, and and oppose the processing or disclosure of personal data. These rights may be exercised by following the instructions outlined in the “How to Exercise Your Right to Know (Access), Delete, or Correct Your Personal Information” section below.

Your India Privacy Rights
Under India’s Digital Personal Data Protection Act 2023 (DPDP Act), residents of India (Data Principals) have certain rights regarding their personal data. These rights include the right to access, correct or complete inaccurate or misleading personal data, erasure subject to certain conditions, have your complaints addressed, and to nominate another person to exercise these rights in the event of your death or incapacity. These rights may be exercised by following the instructions outlined in the “How to Exercise Your Right to Know (Access), Delete, or Correct Your Personal Information” section below.

Your Mexico Privacy Rights
Under Mexico’s Federal Law for the Protection of Personal Data held by Privacy Parties (LFPDPPP of 2025), entered into force on March 21, 2025, individuals have the right to access, rectify, cancel, and and oppose the processing or disclosure of personal data. These rights may be exercised by following the instructions outlined in the “How to Exercise Your Right to Know (Access), Delete, or Correct Your Personal Information” section below.

Your Nevada Privacy Rights
Senate Bill No. 220 (May 29, 2019) amends Chapter 603A of the Nevada Revised Statutes to permit a Nevada consumer to direct an operator of an Internet Website or online service to refrain from making any sale of any covered information the operator has collected or will collect about that consumer. You may submit a request pursuant to this directive by calling us at 1-855-456-SOFI (7634).

Your Phillipines Privacy Rights
Under the Philippines’ Data Privacy Act of 2012 (DPA), residents of the Philippines (Data Subjects) have certain rights regarding their personal information. These rights include the right to be informed, to object, to access, to rectify, erase or block, to damages, and to data portability. These rights may be exercised by following the instructions outlined in the “How to Exercise Your Right to Know (Access), Delete, or Correct Your Personal Information” section below.

Your United Kingdom and the European Economic Area Data Protection Rights

In addition to the rights detailed in the “Data Privacy and Protection Rights” section, the following rights are available.

• Right to object to processing – You have the right to object to the processing of your personal data in situations where we rely on legitimate interests to lawfully process personal data. This includes the right to object to the processing of your personal data, by us or on our behalf, for direct marketing purposes.
• File a Complaint – You have the right to lodge complaints with a supervisory authority regarding the processing of your personal data by us or on our behalf.
• Automated profiling – You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you.
In cases where you have provided explicit consent or the automated decision is necessary to enter into a contract with us, we have implemented suitable measures to safeguard your rights, freedoms, and legitimate interests by allowing you to (a) obtain human intervention regarding the decision, (b) express your point of view, and (b) contest the decision.

How to Exercise Your Rights to Know (Access), Delete, or Correct Your Personal Information
We must verify your identity before processing most requests, which may require you to provide additional information. You may submit a request by using our self-service Privacy Request Form or by calling us at 1-855-456-SOFI (7634). We strive to honor requests within forty-five (45) days of receipt. In certain instances, we may not be able to honor your request, such as when an exception applies or when we cannot verify your identity. We will notify you if we are unable to process your request within that time or at all and provide you an explanation.

How to Exercise Your Right to Opt Out of the Selling/Sharing of Personal Information
Registered users SoFi.com registered users may opt out of the sale/sharing of their personal information for cross-contextual behavioral advertising by logging into their account and toggling the button under the “Personal Information Privacy Preferences” section to “No, Don’t Allow Sharing.”

Unregistered visitors or Logged out SoFi.com Users
Click here or browse to the “Privacy Choices” link at the bottom of all SoFi webpages to choose your preferences.

LanternCredit.com visitors
Click here or browse to the “Privacy Choices” link at the bottom of all SoFi webpages to choose your preference.

How to Exercise Your Right to Limit the Use of Sensitive Personal Information at SoFi.com
Click here or browse to the “Privacy Choices” link at the bottom of all SoFi webpages to choose your preference.

How to Exercise Your Right to Limit the Use of Sensitive Personal Information at Lanterncredit.com
Click here or browse to the “Privacy Choices” link at the bottom of all SoFi webpages. to choose your preference.

Submitting Requests on Another’s Behalf/Authorized Agents
You can designate an authorized agent to submit a request on your behalf by calling us at 1-855-456-SOFI (7634). If you designate an authorized agent to make a request on your behalf, we may require you to provide the authorized agent written permission to do so and to verify your own identity directly with us.

Global Privacy Control
SoFi recognizes the Global Privacy Control (GPC), which is a setting that allows you to communicate your privacy preferences to websites and online services that you visit. When we detect a GPC signal from a browser, we interpret this as a valid request to not sell or share the personal information for that browser or device in compliance with applicable laws. Please visit the Global Privacy Control website to learn more about the setting and how to enable it on your browser.

22. How to Contact Us

Phone – If you have any questions about SoFi’s privacy practices, please call us at 1-855-456-SOFI (7634).
Web – You may exercise your privacy rights by submitting a request using this form.