Effective Date: August 6, 2026
Veritec Financial Systems, Inc. — Privacy Notice & Privacy Policy
Part 1: GLBA Privacy Notice
Note: The notice below is Veritec’s Regulation P “FACTS” model-form privacy notice. It is preserved here without structural changes to retain the safe-harbor protection that comes from using the model form as published. It covers only nonpublic personal information (“NPI”) as defined under the Gramm-Leach-Bliley Act. Additional categories of information that Veritec collects — including website and app technical data, and information relating to your Card and Wallet — are not NPI subject to this notice’s model-form requirements and are instead addressed in the Privacy Policy at Part 2 below.
| FACTS | WHAT DOES VERITEC FINANCIAL SYSTEMS INC. DO WITH YOUR PERSONAL INFORMATION? |
|---|---|
| Why? | Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do. |
| What? | The types of personal information we collect and share depend on the product or service you have with us. This information can include: Social Security number and income; account balances and credit history; credit scores and transaction history. When you are no longer our customer, we continue to share your information as described in this notice. |
| How? | All financial companies need to share customers’ personal information to run their everyday business. In the table below, we list the reasons financial companies can share their customers’ personal information; the reasons Veritec Financial Systems, Inc. chooses to share; and whether you can limit this sharing. |
| Reasons we can share your personal information | Does Veritec Financial Systems, Inc. share? |
Can you limit this sharing? |
|---|---|---|
| For our everyday business purposes— such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus |
Yes | No |
| For our marketing purposes— to offer our products and services to you |
Yes | No |
| For joint marketing with other financial companies | Yes | No |
| For our affiliates’ everyday business purposes— information about your transactions and experiences |
No | We don’t share |
| For our affiliates’ everyday business purposes— information about your creditworthiness |
No | We don’t share |
| For non-affiliates to market to you | No | We don’t share |
Questions? Call 1-866-419-0129 or go to www.blinxPay.com.
Who we are
Who is providing this notice? Veritec Financial Systems, Inc.
What we do
How does Veritec Financial Systems, Inc. protect my personal information? To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.
How does Veritec Financial Systems, Inc. collect my personal information? We collect your personal information, for example, when you open an account or apply for a loan, pay your bills or deposit or withdraw money, or use your debit account. We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.
Why can’t I limit all sharing? Federal law gives you the right to limit only sharing for affiliates’ everyday business purposes—information about your creditworthiness; affiliates from using your information to market to you; and sharing for non-affiliates to market to you. State laws and individual companies may give you additional rights to limit sharing.
Definitions
Affiliates — Companies related by common ownership or control. They can be financial and nonfinancial companies. Veritec Financial Systems, Inc. does not share with our affiliates.
Non-affiliates — Companies not related by common ownership or control. They can be financial and nonfinancial companies. Veritec Financial Systems, Inc. does not share with non-affiliates so they can market to you.
Joint marketing — A formal agreement between nonaffiliated financial companies that together market financial products or services to you. Veritec Financial Systems, Inc. may partner with certain non-affiliated financial companies to offer financial products and services to you.
Other important information
Special Notice for Residents of Certain States.
Residents of California and Vermont: In accordance with state law, we will not share your personal information with non-affiliates except as permitted by law, including, for example, for our own marketing purposes, for everyday business purposes, such as servicing your account, or with your consent.
Residents of Nevada: You are being provided this notice pursuant to Nevada law.
Part 2: blinxPay Privacy Policy
1. Introduction
This Privacy Policy supplements the GLBA Privacy Notice at Part 1 and describes how Veritec Financial Systems, Inc. (“Veritec,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information in connection with the blinxPay Account, the Card, and the Wallet, including through our website (www.blinxPay.com) and mobile application.
Veritec is the program manager for your Account. Your Card is issued by the Issuing Bank (currently Rain / Nimbus LLC dba Third National) pursuant to a separate Cardholder Agreement, and one or more Wallets are made available to you in connection with your Account. Wallets that hold Digital Assets, including stablecoins and other blockchain-based assets, are non-custodial and use key-management technology from the Wallet Provider (currently Turnkey). Wallets that hold U.S. Dollars are custodial. Veritec processes personal information both as the party responsible for the Account and, in connection with Card and Wallet services, as a service provider to the Issuing Bank and Wallet Provider. By using the Account, Card, or Wallet, you acknowledge that your personal information will be processed in accordance with this Policy.
2. Information We Collect
In addition to the categories described in the GLBA Privacy Notice at Part 1, we collect:
- Identity and verification information — name, date of birth, residential address, Social Security number, government-issued identification documents and images, and other information used to satisfy our Customer Identification Program.
- Device and technical information — IP address, device identifiers, mobile operating system and app version, browser type, and app usage and diagnostic data.
- Transaction information — Account, Card, and Wallet transaction history, merchant information, and amounts.
- Wallet and Digital Asset information — your Non-Custodial Wallet address(es) and Digital Asset transaction activity. Please note that transactions involving Digital Assets are generally recorded on public blockchains and may be visible to third parties independent of anything Veritec does; Veritec does not control, and cannot remove information from, a public blockchain.
- Communications — records of your correspondence with our support team.
3. How We Collect Information
We collect information directly from you (for example, when you activate your Account or contact customer support), automatically through your use of our website and mobile application (for example, through cookies and similar technologies, described in Section 11), and from third parties, including identity verification providers, credit bureaus, the Issuing Bank, and the Wallet Provider.
4. How We Use Information
We use the personal information described above to:
- Open, verify, and service your Account, Card, and Wallet;
- Comply with our Customer Identification Program and other Bank Secrecy Act/anti-money laundering obligations, including sanctions screening;
- Detect, investigate, and prevent fraud and other unauthorized or illegal activity;
- Provide customer support and respond to your requests;
- Operate, maintain, and improve the blinxPay website and mobile application; and
- Comply with applicable law, regulation, and legal process.
5. Who Receives Your Personal Data
We do not sell your personal information and do not share it with third parties for their own independent marketing purposes. We share personal information only as necessary to operate the Account, Card, and Wallet, with the following categories of recipients:
- Issuing Bank (currently Rain / Nimbus LLC dba Third National) — to issue and service the Card and fulfill Card program requirements;
- Wallet Provider (currently Turnkey) — to provide non-custodial wallet key-management technology;
- Identity verification, compliance, and sanctions-screening providers (currently ComplyAdvantage) — to verify your identity, screen for sanctions and adverse media, and assess eligibility;
- Payment networks and processors (such as Visa) — to enable transaction processing and Card functionality;
- Bank-linking / funds-transfer service providers (currently Nimbus LLC dba Third National) — to facilitate loads to and from your linked bank account;
- Technology and infrastructure service providers — including cloud hosting and data storage providers, to support the operation of our services;
- Professional advisors — including auditors, legal advisors, and consultants, where necessary to support our business and legal obligations; and
- Regulators, courts, and law enforcement — where required to comply with applicable law, regulation, or legal process.
All third parties with whom we share personal information are required to process it only for the specified purposes and to maintain appropriate confidentiality and data protection safeguards.
6. Legally Required Disclosures
We may disclose personal information where required by subpoena, law, or other legal process; to assist law enforcement or governmental authorities; to investigate or enforce our Agreement; or to protect the legal rights, property, or safety of Veritec, our customers, or third parties.
7. Data Storage and International Transfer
Personal information is stored and processed in the United States. If this changes, or if we engage service providers that process data outside the United States, we will update this Policy accordingly.
8. Data Retention
We retain personal information in accordance with the retention schedule described in our Information Security Policy: generally, customer information is disposed of no later than two (2) years after it is last used in connection with your Account, except where longer retention is necessary for our business operations or required by law — for example, the five (5) year retention periods that apply to identification, transaction, and screening records under the Bank Secrecy Act and its implementing regulations.
9. Data Security
We maintain administrative, technical, and physical safeguards designed to protect personal information, consistent with our Information Security Policy, including encryption, access controls, and multi-factor authentication for internal systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Your Choices and Rights
You may request to access, correct, or delete certain personal information we hold about you by contacting us using the information in Section 15. We will take reasonable steps to verify your identity before responding to your request. Deleting certain information may limit our ability to provide the Account, Card, or Wallet to you, or may not be possible where we are required to retain information under Section 8.
11. Cookies and Tracking Technologies
We use cookies and similar technologies on our website and mobile application to authenticate users, remember preferences, and analyze usage. You may disable cookies through your browser settings, though some features may not function properly if you do so. We do not currently recognize or respond to browser “Do Not Track” signals.
12. Children’s Privacy
The Account, Card, and Wallet are intended for use only by adults and are not directed to minors. We do not knowingly collect personal information from anyone under the age of 13. If we learn that we have inadvertently collected such information, we will take reasonable measures to promptly remove it from our records.
13. Wallet and Digital Assets
You may hold more than one Wallet, and we handle information about them differently depending on whether the Wallet holds U.S. Dollars or Digital Assets.
For a custodial Wallet, which holds U.S. Dollars, information about your holdings is account information, handled as described elsewhere in this Policy and, where applicable, under the GLBA Privacy Notice at Part 1.
Your Non-Custodial Wallet uses non-custodial technology provided by the Wallet Provider. Veritec does not hold or have access to the private keys associated with your Non-Custodial Wallet. Because Digital Asset transactions are generally recorded on public blockchains, information about your Non-Custodial Wallet address and transaction activity may be publicly visible, independent of any disclosure by Veritec.
14. Changes to This Policy
We may update this Policy from time to time. We will post the updated Policy on www.blinxPay.com with a revised effective date. Your continued use of the Account, Card, or Wallet after the effective date of any updated Policy constitutes your acceptance of the updated Policy.
15. Contact Us
If you have questions about this Policy or wish to make a request regarding your personal information, please contact us at privacy@blinxPay.com, call 1-866-419-0129, or write to Account Holder Services, 2445 Winnetka Ave. N., Golden Valley, MN 55427.