Commercial Cardholder Agreement

Privacy.com Commercial Charge Cardholder Agreement

PLEASE READ THIS PRIVACY.COM CHARGE CARDHOLDER AGREEMENT (“AGREEMENT”) CAREFULLY, AS IT CONTAINS AN ARBITRATION AGREEMENT AND OTHER IMPORTANT INFORMATION REGARDING YOUR LEGAL RIGHTS, REMEDIES, AND OBLIGATIONS.

1. Your Privacy.com Account

Your Privacy.com account (“Account”) consists of Mastercard® charge cards (each, a “Card” and collectively, “Cards”) issued by Byline Bank (“Bank,” “we,” “us,” or “our”). Your Cards are charge cards, which access a line of credit provided by Bank. Your Cards are not debit cards or prepaid cards. The Card program is managed by the Bank’s agent and service provider, Lithic, Inc. (formerly known as Pay with Privacy, Inc.) (“Program Manager”), doing business as Privacy.com.

Your Account and Cards are for commercial and business purposes and are not designed for any consumer use. The person signing up for our services will be deemed the administrator to manage your Account. You are responsible for all transactions made by any person you authorize to use your Cards. “You” and “your” refer to the business that establishes an Account under this Agreement. To help the government fight the funding of terrorism and money laundering activities, US Federal law requires that we and other financial institutions obtain, verify, and record information identifying companies and their beneficial owners. You agree to provide the required information when opening your Account and further agree to keep such information current. This information may be shared with us for these purposes.

Please review Byline Bank’s Privacy Notice provided in connection with your Account. Privacy.com’s Privacy Policy is available at https://www.privacy.com/privacy-policy. Each applies according to its stated scope.

The following definitions apply throughout this Agreement.

“Credit Limit” means the maximum amount of credit that we may extend to you when you use your Card(s) at any given time, as described in Section 3(1).

“Available Credit” means the amount of credit available for you to make charges with your Cards at any given time, subject to the payment requirements, spending limits, and other conditions described in Section 3.

“External Account” means the business bank account you link to your Account through the App to make payments under this Agreement. It must be an account you own and are authorized to use, issued by a U.S. financial institution and denominated in U.S. dollars, as described in Sections 2(a) and 5.

“Billing Cycle” means each 14-calendar-day period for which a Statement is made available, as described in Section 2(e).

“Payment Due Date” or “Due Date” means the date 14 calendar days after the end of a Billing Cycle by which you must pay the remaining Account Balance for that Billing Cycle, as described in Sections 2(e) and 4(2).

“Periodic Statement” or “Statement” means the statement for a Billing Cycle made available in your Privacy.com Account at the end of that Billing Cycle, as described in Section 2(g). “Statements” means more than one Statement.

“Statement Cycle Date” means the last day of the Billing Cycle covered by a Statement. It is the date from which the applicable Due Date is calculated, rather than a separate billing or payment cycle.

Daily Payments remain subject to Sections 3(2), 4(1), and 5(1); the Due Date does not replace the Daily Payment requirements for further use of your Cards.

2. How it Works

a. To use your Cards, you must link your business bank account (“External Account”) to

your Account through the Privacy.com mobile application or Website (“App”).

b. Each time a charge is made on a Card, you access your line of credit at the Bank.

c. Your line of credit from the Bank is the maximum amount of credit that may be extended to you when you use your Card(s) at any given time. This amount is your “Credit Limit.” See Section 3(1) for more information.

d. You will also have a separate spend limit, “Available Credit,” which is determined as described in Section 3.

e. In addition to the Daily Payments described in Section 4(1) and Section 5(1), your billing cycle will be 14 calendar days (each such period, a “Billing Cycle”). Your remaining balance for a Billing Cycle (that is, any amount not already paid through Daily Payments) will be due 14 calendar days after the end of that Billing Cycle (such date, the “Due Date”) (see Section 4(2) for more details).

f. Daily Payments (as described in Section 4(1)) are made automatically using AutoPay (as defined in Section 5(1)).

g. Periodic statements (“Statements”) are made available to you at the end of each Billing Cycle in your Privacy account.

h. You may use Privacy.com cards without a monthly subscription fee up to a certain number of Cards and within any other limits described in the Fee Schedule (as defined in Section 6(2)). Users who wish to access more Cards may upgrade to a paid subscription tier, with the fees and features for each tier set forth in the Fee Schedule.

i. Card Sharing. If card sharing is available for your Account, you may use the App to authorize an employee (an “Authorized User”) to use a Card for your business purposes. The Authorized User must accept the Authorized User Card Terms with Byline Bank before using the shared Card. You remain the Cardholder under those terms. Sharing a Card does not give the Authorized User a separate Account or an ownership interest in your Account or funds, and does not increase your Available Credit. Do not share your Access Credentials. You remain responsible for transactions and fees arising from the Authorized User’s use, even if the Authorized User exceeds the authority you gave them. The Authorized User may view the shared Card’s details. You retain control of the Card’s available settings and may change available limits or pause or close the Card through the App. To terminate an Authorized User’s ability to use the Card, close that Card. You must do so promptly if the Authorized User is no longer your employee or authorized to use it. Cancellation is effective after we have a reasonable time to process it and does not eliminate obligations already incurred. Notify support@privacy.com promptly if a shared Card is compromised.

3. Your Credit Limit and Available Credit. 

Our general practice is to decline charges that will cause you to exceed your Credit Limit or Available Credit. If we do honor these charges, in our sole discretion, you are responsible for paying us back in full immediately, and these limits will not increase.

1. Credit Limit. We will assign a Credit Limit to your Account. Your Credit Limit is the maximum amount of credit that we may extend to you when you use your Card(s) at any given time. We are not obligated to extend the total amount of your Credit Limit to you at any time, and we may increase or decrease your Credit Limit or Available Credit at any time in our sole discretion with or without advance notice to you. The maximum amount of credit that you will be permitted to access on your Cards at any time will be the lesser of your Credit Limit or your Available Credit. We are not required to extend credit up to your maximum Credit Limit if it would cause you to exceed your Available Credit.

2. Available Credit. Your Available Credit is the amount of credit that is available for you to make charges with your Cards at any given time. You will only have access to Available Credit if you have made the scheduled Daily Payments for prior charges and you have made all required payments with regard to prior Statements. We may decline further charges or suspend use of your Cards if a Daily Payment fails or is returned, even if the Due Date has not occurred. Your Available Credit is also subject to the daily and monthly spending limits shown in the App. Repayment does not replenish those spending limits. The total outstanding and unpaid balance from your Cards is your Account balance (“Account Balance”). We may determine your Available Credit for the purpose of deciding whether to approve a charge at any time, including between the time you authorize the charge and when we decide whether to allow the charge.

3. Viewing your Available Credit. You may use the App at any time to view your Available Credit and any posted payments, which may be described in the App under “Daily Spend Limits”, “Monthly Spend Limits” or other labels. While we do our best to provide the most up-to-date information about your Account, there may be some delay in reflecting new charges, and we cannot guarantee the accuracy of the information in the App. You are responsible for keeping track of your Account Balance, Available Credit, and any payments made to your Account.

4. Payments

1. Daily Payments. We initiate an automatic payment from your External Account for each unpaid charge on your Cards (“Daily Payment”). Daily Payments received are applied to reduce your Account Balance. For the Daily Payment requirements for further use of your Cards, see Section 3(2). If you make regular Daily Payments, your Account Balance shown on your Statement may be $0.

2. End of Billing Cycle Payments. You promise to pay us the entire remaining Account Balance for each Billing Cycle by the Due Date determined under Section 2(e). Daily Payments for charges on a Statement reduce the amount remaining payable under that Statement.

5. Payment Methods. 

In order to use your Card, you must first link an External Account to your Account using the App. Your External Account must be an account issued by a U.S. financial institution. You represent and warrant that you own and are authorized to use the External Account to satisfy your payment obligations under this Agreement. Your External Account must be denominated in U.S. dollars.

1. Preauthorized Automatic Payments (“AutoPay”). You authorize us to make recurring, automatic debits from your External Account for the amount of each Daily Payment and end of Billing Cycle payment. Under AutoPay, you authorize us to debit your External Account each day for the amount of the Daily Payment. When you use AutoPay to make Daily Payments, you authorize us to debit your External Account without advance notice of the amount of the Daily Payment, as long as the amount of the Daily Payment is between $0 and $10,000. If your account daily limit is higher than these limits, you agree to allow us to debit your External Account up to that amount. By electing AutoPay, you also authorize us to debit your External Account on each applicable Due Date for the amount remaining due under the applicable Statement after crediting payments already received.

Daily Payments may be initiated and processed individually or in batches, with timing depending on the funding method and applicable processing requirements. If a payment date for your AutoPay is not a Business Day (as defined below), your AutoPay payment will be initiated on the next Business Day. You also authorize us to debit or credit your External Account as needed to correct any errors, process returned and reversed payments, and address similar issues, to the extent permitted by law. You may revoke your AutoPay authorization by notifying us at least 3 Business Days prior to your next scheduled payment date by emailing support@privacy.com. We may be unable to cancel payments scheduled to occur within 3 Business Days after you request to revoke your AutoPay authorization. For this Account, the debit amounts and revocation notice period in this Section 5(1) control over any inconsistent terms in the ACH authorization at privacy.com/ach. “Business Day,” for purposes of this Agreement, means any day excluding (i) Saturdays, (ii) Sundays, and (iii) any day that is a legal holiday under the laws of the State of Illinois or is a day on which banking institutions located in the State of Illinois are required or authorized by law or other governmental action to close.

2. Other Methods. We may permit additional payment methods from time to time. If we permit you to initiate a one-time ACH payment in the App, you authorize us to debit your External Account for that payment. Do not send us cash for any payments. We do not accept cash payments. We may reject any payment not made in accordance with this section.

3. Plaid. When you add a bank account as your External Account, you will be asked to provide access credentials (such as a username and password) that allow you to gain online access to your account at that third-party financial institution (your “Authorized Bank Account”).

We work with third party services, including but not limited to Plaid Technologies, Inc. (“Plaid”), who will securely store pursuant to industry standards any Authorized Bank Account access credentials that you provide and will access your Authorized Bank Accounts for the purposes of providing and improving the services under this Agreement (“Services”). You may only provide account access credentials for and authorize us to access valid accounts that you hold in your own name. You may not provide access credentials for an account that is held by a third person.

If you choose to provide your Authorized Bank Account credentials to us, you authorize us to use this information to provide you with the Services. This authorization will remain in effect until you notify us that you wish to revoke it, which may affect your ability to receive the services. Plaid’s services and use of your information, including on or through the Services, are governed by its Terms of Use and its Privacy Policy located at https://plaid.com/legal.

6. Fees

1. International Fees. International transactions may be charged a fee equal to the greater of (i) 3% of the value of the transaction or (ii) $0.50 based on the plan you select. If an international transaction is refunded, any international fees applied to the transaction will not be refunded or otherwise reversed.
2. Subscription Fees. If you have chosen to pay for a subscription tier service, we charge subscription fees applicable to that tier. The subscription tiers, their fees, and the features and limits included with each tier are set forth in a fee schedule made available to you at sign-up and upon any upgrade or downgrade of your tier (the "Fee Schedule"). You must affirmatively select and accept the applicable tier and its fees before they apply to your Account. We may change the Fee Schedule from time to time in accordance with Section 13(7) of this Agreement.

Fee Schedule

This Fee Schedule is incorporated into and forms part of the Agreement. Capitalized terms used but not defined in this Fee Schedule have the meanings given to them in the Agreement. This Fee Schedule is effective as of October 21, 2026 and supersedes any prior fee schedule provided to you. We may change this Fee Schedule from time to time in accordance with Section 13(7) of the Agreement.

‍

Subscription Tiers

Subscription 

Monthly Fee

Cards Included Per Month

Personal

$0 

Up to 12Cards

Plus

$5.00

Up to 24 Cards

Pro

$10.00

Up to 36Cards

Premium

$25.00

Up to 60 Cards

‍

Subscription fees, if applicable, may also be paid on an annual basis instead of monthly. There is no discount for making an annual payment over monthly. For additional key features per subscription, please visit www.Privacy.com/pricing.  

‍

You must affirmatively select and accept the applicable tier and its fees before they apply to your Account. You may upgrade or downgrade your tier at any time through the App, subject to any limitations described in the App. Changes to your tier take effect as described in the App, and the fees for your new tier will apply beginning with the next subscription billing period following the change, unless otherwise stated at the time of the change. Subscription billing periods are separate from the 14-calendar-day Billing Cycles for Card charges.

Transaction and Other Fees

Fee

Amount

International Transaction Fee

The greater of (i) 3% of the value of the transaction or (ii) $0.50. Not refunded or reversed if the underlying transaction is refunded. 

Not applicable to customers within the Pro and Premium Subscription Tiers.

Legal Action Expenses

Fees and expenses incurred in responding to a Legal Action, as described in Section 13(9) of the Agreement.

7.  Liability for Unauthorized Transactions 

You agree to take all necessary steps to protect your Card. You may immediately block or suspend any activity on your Card through the App or Website if you believe your Card has been lost or stolen, or should you wish to do so to keep your Card safe. When you use your Mastercard, you’re protected against unauthorized transactions. Under this Agreement, zero liability applies to your purchases made in the store, over the telephone, online or via a mobile device. As a cardholder, you will not be held responsible for unauthorized transactions if: you have used reasonable care in protecting your card from loss or theft; and you promptly reported loss, theft or unauthorized use to us. If you believe that there has been unauthorized use of your account and you meet the conditions above, rest easy knowing you have the protection described in this Section. Transactions made by a person you authorize to use a Card are not unauthorized solely because that person exceeds the authority you gave them. 

Also, if you become aware of, or your statement shows, transactions that you did not make, notify us at once following the procedures stated in the paragraph labeled “Your Right to Dispute Errors.” If you do not notify us within the sixty (60) day notice period described under “Your Right to Dispute Errors”, you may not get back any value you lost after the sixty (60) days if we can prove that we could have stopped someone from taking the value if you had notified us in time and you are grossly negligent or fraudulent in the handling of your Card. In some cases, we may close your Card Account to keep losses down. 

YOUR RIGHT TO DISPUTE ERRORS 

In case of errors or questions about your electronic transactions, contact us immediately through the Website or the App if you think your statement or receipt is wrong or if you need more information about a transaction listed on the statement or receipt. We must allow you to report an error until sixty (60) days after the earlier of the date you first electronically access your Account when the error could be viewed in your electronic history, or the date we first made available to you a Statement showing the error. 

You will need to tell us: 

1. Your name and Card Account number 

2. Why you believe there is an error, and the dollar amount involved 

3. Approximately when the error took place

If you provide this information orally, we may require that you send your complaint or question in writing within ten (10) business days. The information you submit will be reviewed in a commercially reasonable manner.

You must notify us of any potential errors through the App, by email to hello@privacy.com, or by mail to Lithic, Inc. (d/b/a Privacy.com), 228 Park Ave S, PMB 57488, New York, NY 10003-1502.

To stop a scheduled payment on an amount you think is wrong, you must contact us at least 3 Business Days before the scheduled payment date.

What Will Happen After We Receive Your Notice
When we receive your notice, we will review the information provided in the notice in a commercially reasonable manner.

You understand that the Account is commercial in nature and the Electronic Fund Transfer Act and Regulation E do not apply to transfers from your business External Account. The consumer billing-error procedures under Regulation Z do not apply to this commercial Account. Any disputes regarding the Account or Cards will be governed by the terms of this Agreement and applicable law. Subject to applicable law, you should pay the disputed charge while the Program Manager determines the validity of the dispute. If the dispute is deemed valid, the Program Manager will credit the disputed charge amount back to the Account. By accepting this Agreement, you assign and transfer to the Program Manager any rights and claims, excluding tort claims, that you may have against any merchant for any disputed charge fully or partially credited to the Account.

No warranties. Neither we nor the Program Manager are responsible for any claim you may have regarding the purchase of goods or services made with your Cards beyond what is described in this section. If there is a problem with a purchase made with a Card or a dispute with a merchant, it must be handled directly with the merchant.

8. Account Default

1. Events of Default. A missed or returned Daily Payment does not, by itself, constitute a default before the applicable Due Date, but may restrict further use of your Cards under Section 3(2). Subject to the preceding sentence, your Account will be in default if:

- You do not make a payment by the applicable Due Date;

- Any required payment you make is rejected, not paid, or cannot be processed;

- You exceed your Credit Limit;

- You give anyone access to your Account using your Access Credentials (as defined in Section 13(1));

- You file or become the subject of a bankruptcy or insolvency proceeding;

- You are unable or unwilling to repay your obligations, including upon death or legally declared incapacity;

- We determine that you made a false, incomplete, or misleading statement to us, or you otherwise tried to defraud us;

- You revoke your consent to receive records, disclosures, and other communications electronically;

- You do not comply with any term of this Agreement or any other agreement with us;

- You use your Card(s) for any unlawful or unpermitted purchase;

- You relocate outside the United States;

- A material adverse change occurs in your business operations or financial condition; or

- You are dissolved, or there is any other termination of your existence as a going business.

2. Consequences of Default. If you are in default, we may take certain actions with respect to your Account. For example, we may take the following actions, without notifying you, unless the law says that we must give you notice:

- Close or suspend one or more of your Cards or your entire Account;

- Reduce your Credit Limit or Available Credit;

- Demand that you immediately pay the Account Balance;

- File a lawsuit against you or pursue another action that is not prohibited by law. If we file a lawsuit, you agree to pay our court costs, expenses, and attorney fees, unless the law does not allow us to collect these amounts.

9. Communications, Statements, Notices of Errors, and Other Notices
   
   1. Delivery of Notices. You agree that we and our service providers may communicate with you by mail, telephone, email, fax, prerecorded message, automated voice, text message, or other means allowed by law regarding your Account. Any legal disclosures, notices and communications, and other Account-related correspondence that we mail to you will be sent via U.S. Mail to the last mailing address shown in our records for your Account. Notice will be deemed to have been delivered on the day we mailed it to you or made it available electronically. We are not responsible for items lost in, or not delivered by, mail or email (including notices sent to the wrong address due to your address not being current, as required under Section 9(5) of this Agreement). Some notices may only be available electronically or in paper form. Notice to any owner of your Account is notice to all owners.

2. Notices You Send Us. Any written notice you give us is effective after we actually receive and act on it, and it must be given to us according to the specific delivery instructions provided to you, if any. We must receive it in time to have a reasonable opportunity to act on it. We are not required to act on any instruction or message from you provided by SMS/text, or telephone voice mail, message service, or answering machine. Whenever this Agreement or applicable law requires or allows you to give us written notice, we will not consider SMS/text to be written notice.

3. Electronic Communication. Your Account is an electronic account. Byline Bank and the Program Manager may send communications electronically, such as by email or text message, rather than through U.S. mail or other means, unless the law says otherwise. If you give us your email address, you agree that we may send servicing messages (such as fraud alerts and hold alerts) related to your Account to that address. You are required to agree to communicate with us by electronic means in order to open an Account. If you revoke your consent to electronic communications, we may declare you to be in default of this Agreement, close your Account, or take other actions described in this Agreement and the Electronic Communication Disclosure.

4. Telephone Communication. We may record and/or monitor any of our telephone conversations with you. If we do record, we do not have to keep the recordings, unless applicable law says that we must. When you give us your mobile number, we have your permission to contact you at that number about your Account. Your consent allows us and our service providers to use text messaging, artificial or prerecorded voice messages, and automatic dialing technology for informational and service calls, but not for telemarketing or sales calls. This communication may include contact from companies working on our behalf to service your Account. Message and data rates may apply. You may change these texting and messaging preferences by emailing hello@privacy.com.

5. Change in Contact Information. We require you to provide an email address, mobile telephone number, and physical street address if your mailing address is a P.O. box. You are responsible for promptly notifying us of any change to any such contact information or a change to your name. In some instances, we may request additional information for verification purposes. Any notice we mail or email to you will be binding when sent to the last (postal or electronic) address in our records. We may change your address if we receive an address change notice from the U.S. Postal Service or if a company in the business of providing correct addresses informs us that the address in our records no longer matches your address. Even if you elected to receive electronic communications from us, there may still be some legal information that we need to send you via U.S. mail.

6. Communications Equipment and Services. You are responsible for obtaining and maintaining all telecommunications, mobile, broadband, computer, hardware, software, equipment, and services needed to access and use your Account online; view, save, and/or print your Account documents online; receive any messages or documents you have consented to receive electronically; and for paying all related charges.

10. Closing and Restricting Your Account
    
    1. You May Close Your Account. You may request to close your Account at any time for any reason. However, we are not required to close your Account at your request if you have pending transactions or an outstanding Account Balance. In those cases, we will restrict your Account against all future withdrawals and other transactions, other than under legal process, until pending transactions are paid or returned, there is no outstanding Account Balance, and any legal restriction on your Account has been released.
    
    2. We May Close Your Account. We may also close your Account at any time, for any reason or no reason, with or without prior notice to you. We will have no liability for any action we take under this section.
    
    3. Rules for Closing Your Account. We may restrict your Account in preparation for closing. We may prohibit further transactions on your Card(s). Items presented for payment may be dishonored. We may send you written notice that we have closed your Account. This Agreement will survive the closing of your Account, and you are still responsible for obligations incurred prior to or in connection with the closing of your Account. After your Account is closed, we have no obligation to accept new transaction requests.
    
    4. Restricting Your Account; Blocking and Delaying Transactions. There are many reasons that we may decline or prevent transactions to or from your Account, but we generally do it to protect you or us, or to comply with legal requirements. We may decline or prevent any or all transactions to or from your Account in our sole discretion, as permitted by applicable law, including in one or more of the following circumstances:

- You reside outside or relocate outside of the U.S. or any U.S. territory where we offer the Account;

- Your Account is involved in any legal or administrative proceeding;

- We receive conflicting information or instructions regarding your Account ownership, control, or activity;

- We suspect that you may be the victim of a fraud, scam, or financial exploitation, even though you have authorized the transaction(s);

- We suspect that any transaction may involve illegal activity, including violations of anti-money laundering laws and regulations, or may be fraudulent;

- We are complying in our sole judgment with any federal, state, or local law, rule, or regulation, including federal asset control and sanction rules and anti-money laundering rules, or with our policies adopted to assure that we comply with those laws, rules, or regulations; or

- We reasonably believe that doing so is necessary to avoid a loss or reduce the risk of loss to us.

11. Representations and Warranties
    
    You represent and warrant that as of acceptance of this Agreement and each day you use your Account that:
    
    1. Your business is duly organized, validly existing, and in good standing under the laws of your jurisdiction of incorporation or organization;
    
    2. You have the organizational power and authority to conduct your business and to execute, deliver and perform this Agreement;
    
    3. This Agreement has been accepted by a control person from your business that is authorized to act on the business’s behalf, and constitutes the legal, valid, and binding obligation of you;
    
    4. Your accepting this Agreement and making charges does not and will not (i) conflict with your organizational documents, (ii) conflict with, or result in a breach of any provisions of, or constitute a default (or an event which, with notice or lapse of time or both, would constitute a default) under any material agreement of you; or (iii) constitute a violation of any material order, judgment or decree to which you are bound;
    
    5. You are not currently and will not become subject to a U.S. Office of Foreign Assets Control list, or any law, regulation, or other list of any government agency that prohibits or limits us from providing Cards to you or from otherwise conducting business with you;
    
    6. You are in compliance with all applicable, federal, state and local laws and regulations, and the rules and regulations of the payment networks;
    
    7. You are solvent, and not contemplating bankruptcy or insolvency proceedings;
    
    8. You have not previously been banned from using any Lithic, Inc. or Privacy.com services, and have not previously violated our Terms of Service.

12. Change in Circumstances
    
    Your Credit Limit is based, in part, on the information provided to us in your application for an Account. You agree that we and the Program Manager have the right to, from time to time, require additional information and/or supplemental information to the information previously provided in the application. You understand and acknowledge that the Credit Limit may be affected by the supplemental information. You further agree to immediately inform us, via Program Manager, of any material change in circumstances regarding you, including your financial condition, business operations, ownership and management.

‍

13. Other Account Terms
    
    1. Information Security. It is your responsibility to protect the devices on which you access your Account, your Card(s), the username, password, biometrics or other data you use to log into the App (“Access Credentials”). Do not share your Access Credentials with anyone. If you give another person permission to use your Access Credentials, you may be held fully liable for any transactions they make with your Account, even if that person exceeded the authority that you gave them. Please notify us immediately if you believe that your Account has been accessed without your permission.
    
    2. Assignment of Agreement and Successors. You may not assign or transfer any interest in your Account unless we agree in writing, which we may withhold in our sole discretion. Any permitted assignment of your Account is subject to our setoff rights. This Agreement will be binding on your personal representative, executors, administrators, and successors and on our successors and assigns.
    
    3. Power of Attorney. A power of attorney is a document you sign that authorizes someone else, called the agent, to act on your behalf. If you sign a power of attorney, the agent can sign on your behalf and do anything you could do regarding your Account. Do not sign a power of attorney unless you trust the agent to act in your best interest. If you choose to add an agent, you must provide a power of attorney in a form that we agree to accept. We may rely on a copy of an original power of attorney. We are not required to investigate the facts relating to any power of attorney provided to us on your behalf, including whether your signature on the power of attorney is authentic or whether the agent continues to have authority. We may follow or refuse to follow the agent’s instructions at any time, including if we suspect fraud or abuse on your Account, unless applicable law requires otherwise. We may also refuse an agent’s request to become a joint owner or a beneficiary of an Account, but we have no liability to anyone if we do so. We have no liability when we follow or refuse to follow any instructions from an agent, for example, if your agent misuses the authority that you have given them. It is your sole responsibility to notify us in writing if you wish to revoke a power of attorney.
    
    4. Death or Incompetence. You agree to notify us promptly if any person with a right to use your Account dies or is adjudicated incompetent. We may continue to honor your transactions and instructions until: (a) we know of your death or adjudication of incompetence, and (b) we have had a reasonable opportunity to act on that knowledge. You agree that we may pay or certify transactions made on or before the date of death or adjudication of incompetence for up to 10 days after your death or adjudication of incompetence unless ordered to stop payment by someone claiming an interest in the Account.
    
    5. No Waiver. If we fail to exercise any right, that does not mean that we waive that right or any other right, and we may still enforce all our rights in the future.
    
    6. Headings and Rules of Construction. The headings in this Agreement are for convenience or reference only and will not govern the interpretation of the provisions. Unless it would be inconsistent to do so, words and phrases used in this Agreement should be construed so the singular includes the plural and the plural includes the singular.
    
    7. Changes to this Agreement. We may change the terms and conditions of this Agreement, including fees and features of your Account, at any time. Except where advance notice is required by law, changes may be made in any manner in our discretion, including, but not limited to, notifying you of changed Agreement terms, or posting the changed Agreement terms on the App. You acknowledge that if we choose to post the changed Agreement on the App, your continued access and use of the Cards and your Account will constitute acceptance of the changed terms regardless of whether you have viewed the changed terms. If notice is required, it will be made available on the App or delivered electronically using the most recent contact information we have on file for you.
    
    8. Financial Institution. You agree that the Program Manager may, from time to time, in its sole discretion and with prior notice to you, change the financial institution that issues the Card.
    
    9. Legal Actions Affecting Your Account. If we are served with a subpoena, restraining order, writ of attachment, or execution, levy, garnishment, search warrant, or similar order relating to your Account (“Legal Action”), we will comply with that Legal Action. Or, in our discretion, we may restrict use of the Card(s) until a final court determination regarding the Legal Action. Any fees or expenses we incur in responding to any Legal Action (including attorneys' fees and our internal expenses) may be charged against your Account. A Fee Schedule may specify additional fees that we may charge for certain Legal Actions.
    
    10. Illegal Activities. You agree not to use your Account for any illegal activity. We may refuse any gambling transaction, whether lawful or not. If you use your Card for a prohibited transaction described in this Section 13(10), we may block the transaction, suspend or close your Account, or declare you in default under Section 8, and you will remain liable for all charges relating to that transaction and all other transactions on your Account.
    
    11. Inactive and Unclaimed Accounts. Each state has laws that govern when accounts are considered inactive or abandoned. If your Account is or has been inactive, we may, in our discretion, refuse to honor requests for withdrawals or other transactions on your Account until after we have verified that you have authorized the request.
    
    12. Rules Governing Your Account. Except as otherwise provided in the Arbitration Agreement, this Agreement and your Account are subject to applicable federal laws, the laws of the State of Illinois without regard to internal principles of conflicts of law, and other applicable rules. Changes in these laws may change the terms and conditions of your Account. We will notify you of any changes as required by law. Except as otherwise provided in the Arbitration Agreement, if any provision of this Agreement is found to be unenforceable according to its terms, all remaining provisions will continue in full force and effect. If this Agreement conflicts with any statements made by one of our employees or by a third-party service provider, this Agreement will govern.
    
    13. Fees. You agree to the terms of this Agreement and any Fee Schedule we may provide. You authorize us to deduct these charges, without notice to you, directly from the balance of your External Account. You will pay any additional reasonable charges for services you request that are not covered by this Agreement.
    
    14. Attorneys’ Fees Resulting from Collection or Dispute. You will be liable for our costs as well as for our reasonable attorneys' fees, to the extent permitted by law, whether incurred as a result of collection or in any other dispute involving your Account. This includes you, any authorized user(s), or third parties claiming an interest in your Account. This also includes any action that you or a third party takes regarding the Account that causes us, in good faith, to seek the advice of an attorney, whether or not we become involved in the dispute. All costs and attorneys' fees can be added to your Account Balance when they are incurred, without notice to you.
    
    15. Limitation of Liability. You agree that we, our service providers (including Lithic, Inc.), agents, officers, directors, and employees (and the same of our service providers, subsidiaries and affiliates themselves) (collectively, the “Indemnified Parties”) will not be liable for anything that we do when following your instructions. In addition, the Indemnified Parties will not be liable if any such Indemnified Party does not follow your instructions if we reasonably believe that your instructions are not permitted under applicable law or would expose us to potential loss or civil or criminal liability, or conflict with customary banking practices. To the extent you are entitled to relief under this Agreement, the total liability of the Indemnified Parties to you will not exceed $20, except as otherwise required by applicable law. THE INDEMNIFIED PARTIES WILL NOT BE LIABLE FOR INDIRECT, SPECIAL, OR CONSEQUENTIAL DAMAGES REGARDLESS OF THE FORM OF ACTION AND EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. IF WE FAIL TO STOP PAYMENT ON AN ITEM, OR PAY AN ITEM BEARING AN UNAUTHORIZED SIGNATURE, FORGED SIGNATURE, OR FORGED ENDORSEMENT OR ALTERATION, OUR LIABILITY, IF ANY, WILL BE LIMITED TO THE FACE AMOUNT OF THE ITEM. This section will survive termination of your Account and termination of this Agreement. For the avoidance of doubt, for purposes of this section “you” and “your” include any authorized users.
    
    16. Indemnification. You agree to indemnify and hold the Indemnified Parties harmless from and against losses arising in connection with the services provided under this Agreement, except for losses arising out of our own gross negligence or willful misconduct. You further agree to hold the Indemnified Parties harmless from losses arising out of actions taken or omitted in good faith by any Indemnified Party in reliance upon instructions from you. The Indemnified Parties are not responsible for any actions or omissions by any third party. If you give us instructions that we believe may expose us to potential liability or are in violation of applicable law, in our sole discretion, we may refuse to follow your instructions and we will not be liable to you if we refuse to follow your instructions. If we do choose to follow your instructions, we may ask you for certain protections such as a surety bond or an indemnity agreement in a form that is satisfactory to us. This section will survive termination of your Account and termination of this Agreement. For the avoidance of doubt, for purposes of this section “you” and “your” include any authorized users.
    
    17. Filing a Lawsuit or Arbitration. You must file any lawsuit or arbitration against the Indemnified Parties within 2 years after the cause of action arises, unless federal or state law or an applicable agreement provides for a shorter time. This limit is in addition to limits on notice as a condition to making a claim. If applicable state law does not permit contractual shortening of the time during which a lawsuit must be filed to a period as short as 2 years, you and we agree to the shortest permitted time under that state law. We abide by applicable federal and state record retention laws and may dispose of any records that we retained or preserved for the period set forth in these laws. Any action against us or another Indemnified Party must be brought within the period that the law requires us to preserve records, unless applicable law or this Agreement provides a shorter limitation period or applicable law requires a longer limitation period. This section is subject to Section 14 below, which may require you to submit your claims to arbitration. This section will survive termination of your Account and termination of this Agreement. YOU AGREE THAT YOU MAY BRING CLAIMS AGAINST THE BANK OR ANY OTHER INDEMNIFIED PARTY ONLY ON AN INDIVIDUAL BASIS AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS OR REPRESENTATIVE ACTION OR PROCEEDING.
    
    18. Location of Legal Proceedings. If you file any lawsuit or other legal proceeding against an Indemnified Party that is connected in any way to your Account or services, you agree to do so in an appropriate court in the State of Illinois. If we file any lawsuit or legal proceeding that is connected in any way to your Account or this Agreement, you consent to jurisdiction and venue in an appropriate court in the State of Illinois. If any party chooses to have disputes resolved by arbitration, the Arbitration Agreement below governs the process and location of the arbitration proceedings.
    
    19. Severability. Any provision of this Agreement that limits the Bank’s liability does not negate the Bank’s duty (if any) under applicable law to act in good faith and with ordinary care. If any provision of this Agreement is determined to limit the Bank’s liability in a way prohibited by applicable law, or to be otherwise unenforceable, the parties agree to replace such provision with a provision that is valid and enforceable and that comes closest to expressing the intention of the invalid or unenforceable, and this Agreement will be enforceable as so modified.

20. Right of Setoff. To the extent permitted by applicable law, you grant us the right of setoff, and we may, without demand or notice, set off any amount you owe us under this Agreement against any other account you hold with us, whether individually or jointly with a third party. This right of setoff does not apply to any account where prohibited by law. You agree to hold us harmless from any claim arising from our exercise of this right of setoff.

14. ARBITRATION AGREEMENT

PLEASE READ THIS SECTION CAREFULLY AS IT AFFECTS YOUR RIGHTS.

Agreement to Arbitrate
This section is referred to as the Arbitration Agreement. If you have a dispute with the Bank or any other Indemnified Party, and are not able to resolve the dispute informally, you and we agree that, upon demand by you, the Bank or any other Indemnified Party, the dispute will be resolved through the arbitration process set forth in this section.

Arbitration
If you have a dispute or claim that has arisen or may arise between you and the Bank or any other Indemnified Party, whether arising out of or relating to this Agreement (including any alleged breach), your Privacy.com Account and services provided under this Agreement, any advertising, any aspect of the relationship or transactions between us, and you are not able to resolve the dispute or claim informally, you agree that, upon demand by you, the Bank or any other Indemnified Party, the dispute or claim will be resolved exclusively through final and binding arbitration, rather than a court, in accordance with the terms of this Arbitration Agreement, except that you may assert individual claims in small claims court, if you qualify. Further, this Arbitration Agreement does not preclude you from bringing issues to the attention of federal, state, or local agencies, and such agencies can, if the law allows, seek relief against us on your behalf. You agree that, by entering into this Arbitration Agreement, you and the Indemnified Parties are each waiving the right to a trial by jury or to participate in a class action. Your rights will be determined by a neutral arbitrator, not a judge or jury. The Federal Arbitration Act governs the interpretation and enforcement of this Arbitration Agreement.

Parties Subject to this Arbitration Agreement
This Arbitration Agreement applies whenever there is a claim between you and us. If a third party, such as an Indemnified Party other than the Bank, is also involved in a claim between you and us, or if a dispute arises between you and an Indemnified Party other than the Bank relating to this Agreement or your Account, then the claim will be decided with respect to the third party in arbitration as well, in accordance with this Arbitration Agreement, and it must be named as a party in accordance with the rules of procedure governing the arbitration. No award or relief will be granted by the arbitrator except on behalf of, or against, a named party.

Exclusions
You and we retain the right to pursue in small claims court (or an equivalent state court) any dispute that is within that court jurisdiction, so long as the disputes remain in such court and advance only an individual claim for relief. If either you or we fail to submit to binding arbitration of an arbitrable dispute following lawful demand, the party so failing will bear all costs and expenses incurred by the other in compelling arbitration.

Prohibition of Class and Representative Actions and Non-Individualized Relief
YOU AGREE THAT YOU MAY BRING CLAIMS AGAINST THE BANK OR ANY OTHER INDEMNIFIED PARTY ONLY ON AN INDIVIDUAL PARTY BASIS AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS OR REPRESENTATIVE ACTION OR PROCEEDING. UNLESS BOTH YOU AND THE BANK AGREE OTHERWISE, THE ARBITRATOR MAY NOT CONSOLIDATE OR JOIN MORE THAN ONE PERSON OR PARTY CLAIMS AND MAY NOT OTHERWISE PRESIDE OVER ANY FORM OF A CONSOLIDATED, REPRESENTATIVE, OR CLASS PROCEEDING. ALSO, THE ARBITRATOR MAY AWARD RELIEF (INCLUDING MONETARY, INJUNCTIVE, AND DECLARATORY RELIEF) ONLY IN FAVOR OF THE INDIVIDUAL PARTY SEEKING RELIEF AND ONLY TO THE EXTENT NECESSARY TO PROVIDE RELIEF NECESSITATED BY THAT PARTY’S CLAIM(S), EXCEPT THAT YOU MAY PURSUE A CLAIM FOR AND THE ARBITRATOR MAY AWARD PUBLIC INJUNCTIVE RELIEF UNDER APPLICABLE LAW TO THE EXTENT REQUIRED FOR THE ENFORCEABILITY OF THIS PROVISION.

Pre-Arbitration Dispute Resolution
The Bank and Indemnified Parties are always interested in resolving disputes amicably and efficiently, and most customer concerns can be resolved quickly and to your satisfaction by emailing customer support at hello@privacy.com. If such efforts prove unsuccessful, a party who intends to seek arbitration must first send to the other, by certified mail, a written Notice of Dispute (“Notice”). The Notice to the Bank or Indemnified Party should be sent to the following address (“Notice Address”):

Lithic, Inc. (d/b/a Privacy.com)
Attention: Legal
228 Park Ave S
PMB 57488
New York, NY 10003-1502

The Notice must (a) describe the nature and basis of the claim or dispute and (b) set forth the specific relief sought. If you do not resolve the claim with the Bank or Indemnified Party within 60 calendar days after the Notice is received, you or the Bank or Indemnified Party, as applicable, may commence an arbitration proceeding. During the arbitration, the amount of any settlement offer made by any party will not be disclosed to the arbitrator until after the arbitrator determines the amount, if any, to which you or the Bank is entitled.

Arbitration Procedures
Arbitration will be conducted by a neutral arbitrator in accordance with the American Arbitration Association (“AAA”) rules and procedures, including the AAA Commercial Arbitration Rules (collectively, the “AAA Rules”), as modified by this Arbitration Agreement. For information on the AAA, please visit its website, http://www.adr.org. Information about the AAA Rules and fees for commercial disputes can be found at the AAA commercial arbitration page, http://www.adr.org/commercial. If there is any inconsistency between any term of the AAA Rules and any term of this Arbitration Agreement, the applicable terms of this Arbitration Agreement will control unless the arbitrator determines that the application of the inconsistent Arbitration Agreement terms would not result in a fundamentally fair arbitration. The arbitrator must also follow the provisions of this Agreement as a court would. All issues are for the arbitrator to decide, including issues relating to the scope, enforceability, and arbitrability of this Arbitration Agreement. Although arbitration proceedings are usually simpler and more streamlined than trials and other judicial proceedings, the arbitrator can award the same damages and relief on an individual-party basis that a court can award to an individual party under this Agreement and applicable law. Decisions by the arbitrator are enforceable in court and may be overturned by a court only for very limited reasons.

Unless the parties to the arbitration agree otherwise, any arbitration hearings will take place in a reasonably convenient location for both parties with due consideration of their ability to travel and other pertinent circumstances. If the parties are unable to agree on a location, the determination will be made by AAA. If your claim is for $10,000 or less, you may choose whether the arbitration will be conducted solely on the basis of documents submitted to the arbitrator, through a telephonic hearing, or by an in-person hearing as established by the AAA Rules. If your claim exceeds $10,000, the right to a hearing will be determined by the AAA Rules. Regardless of the manner in which the arbitration is conducted, the arbitrator will issue a reasoned written decision sufficient to explain the essential findings and conclusions on which the award is based.

Costs of Arbitration
Payment of all filing, administration, and arbitrator fees (collectively, the “Arbitration Fees”) will be governed by the AAA Rules, unless otherwise provided in this Arbitration Agreement. Each of you and us will separately and individually pay any respective Arbitration Fees. Any payment of attorneys' fees will be governed by the AAA Rules.

Confidentiality
All aspects of the arbitration proceeding, and any ruling, decision, or award by the arbitrator, will be strictly confidential for the benefit of all parties.

Severability
If a court or the arbitrator decides that any term or provision of this Arbitration Agreement (other than the Prohibition of Class and Representative Actions and Non-Individualized Relief section above) is invalid or unenforceable, the parties agree to replace such term or provision with a term or provision that is valid and enforceable and that comes closest to expressing the intention of the invalid or unenforceable term or provision, and this Arbitration Agreement will be enforceable as so modified. If a court or the arbitrator decides that any of the provisions of the Prohibition of Class and Representative Actions and Non-Individualized Relief section are invalid or unenforceable, then the entirety of this Arbitration Agreement will be null and void, unless such provisions are deemed to be invalid or unenforceable solely with respect to claims for public injunctive relief. The remainder of this Arbitration Agreement will continue to apply.

Future Changes to this Arbitration Agreement
The Bank may make future changes to this Arbitration Agreement (other than a change to the Notice Address) while you have an Account.

Last Updated: October 21, 2026

7895029.1

‍