PEX Legal
Privacy Policy
Effective Date: 05/22/2026 (view archived versions).
This Privacy Policy explains how we (Prepaid Expense Card Solutions, Inc. d/b/a PEX, collectively described as "PEX", "we", "us", or "our") may collect and use the data you provide to us when you visit websites hosted or operated by PEX (the “Site”) or apply for and/or use PEX products and services. Our Sites and Services are intended for use only by United States residents, while located in the United States. If you are located in a country other than the United States, you may not have access to our Sites or request and obtain Services from us through those Sites.
Please read this Privacy Policy closely. By visiting the Site and/or providing your Personal Information to PEX and/or using our products and services and/or the PEX Card that was provided to you, you agree that PEX may collect, use, and disclose your Personal Information as described in this Privacy Policy.
If you are a California resident, please click here to read about your rights under the California Consumer Privacy Act.
We collect Personal Information and Aggregate Information. We use the term "Personal Information" to refer to information that can be used to identify an individual, and the term "Aggregate Information" to refer to information that does not allow for such identification (e.g., aggregated demographic information, areas visited on the Site, duration of page views, what browser was used to access the Site, and similar information). The collection, use and storage of Personal Information is described in this policy. The collection of Aggregate Information is also described in this policy. Because Aggregate Information does not personally identify who it pertains to, such information may be used and/or shared by PEX for any purpose.
We may remove identifiers from Personal Information to make it anonymous. After Personal Information has been anonymized, we will treat and use such information as Aggregate Information.
Our Site may contain advertisements and links to other websites. PEX is not responsible for the content, privacy policies, and/or practices of any advertisers or linked websites. Before providing Personal Information to third parties, such parties' privacy policies should be reviewed as they will govern how information disclosed directly to such third-party may be used.
Our products and services and the Site are intended for use by adults only. They are not directed to children under 13 years of age, and PEX will not knowingly collect or use information from children, and we request that such individuals, or any third party acting on their behalf, not use or access the Site or provide any Personal Information through the Site. If we learn we have collected or received Personal Information from a child under 13 without verification of parental consent, we will delete the information.
Table of Contents
Why We Collect Personal Information
How We Collect Personal Information
Types of Personal Information We Collect
Where We Store Personal Information
Customer's Choice About Receiving Promotional Materials
Retention of Personal Information
Rights Under the California Consumer Privacy Act (For California Residents Only)
Why We Collect Personal Information
To help the government fight the funding of terrorism and money laundering activities, the USA PATRIOT Act, a federal law that requires all financial institutions operating in the United States to obtain, verify, and record information that identifies each business that opens an account with them. This includes Personal Information regarding business owners, representatives, administrators, and/or cardholders. PEX collects and verifies Personal Information on behalf of its partner financial institutions to comply with this and other applicable local, state, and federal laws and regulations.
The Personal Information we collect also enables us to:
- Grant access to our products and services;
- Verify identity and detect fraud;
- Maintain our products and services;
- Process fund transfers and transactions;
- Provide services requested through use of the Site;
- Personalize our service;
- Provide customer support;
- Resolve disputes or errors;
- Collect fees;
- Troubleshoot problems or bugs;
- Prevent prohibited or illegal activities, and comply with applicable legal and regulatory requirements;
- Maintain operational support for PEX general business, accounting, recordkeeping, and legal functions;
- Measure and improve our services, content, and advertising.
How We Collect Personal Information
We collect Personal Information about you when you request information about, apply for, or use our products or services, register for online or mobile account access, contact us for customer service, communicate with us through social media, or otherwise interact with us. We may also collect Personal Information about you from other sources, such as public databases, credit reporting agencies, social media platforms, affiliated companies, and other third parties.
We also collect Non-Personal Information about your online and mobile activity automatically using the following tracking technologies:
- HTTP cookies (“Cookies”) are pieces of information that are stored directly on the device you are using. Cookies provide us with anonymous online and mobile activity information such as the time of your site visits and the pages you viewed. Cookies are commonly used with internet browsers, and do not harm your computer or device.
- Mobile advertising ID’s (MAIDS) are similar to Cookies but are used in connection with a mobile device. MAIDs are user-specific, resettable identifiers provided by your mobile device’ operating system. When we use MAIDs, you remain anonymous. You can reset your MAIDS by following the steps in your operating system’s settings.
- Web beacons and pixel tags (“Beacons and Tags”) are technologies that allow tracking of your online activity and websites you visited. Beacons and Tags may gather anonymous information such as your computer’s operating system, your computer’s IP address, and time and duration of your website visits.
You may disable these tracking technologies or opt-out of targeted advertising generally in the settings menu of your internet browser or mobile device. You can modify or disable tracking technologies by following the steps in your device’s operating system.
Types of Personal Information We Collect
We may collect the following types of information when you use our products, services, or mobile application, or visit our websites:
- “Personal Information” is information that we may collect that identifies you as an individual, customer, or consumer and include your name, phone number, and email address. We may also collect personal information to conduct identity verification, when required by applicable law or regulation, such as date of birth, social security number or tax identification number, driver’s license number, mailing address, government-issued photo identification, personal photograph of yourself, and your account number(s).
- “Non-Personal Information” is information that we may collect that does not identify you as an individual, customer, or consumer. Examples of non-personal information are the version of your internet browser, your computer or mobile device’s operating system, information from tracking technologies, websites you visit, your computer or device IP address, and location information or other data.
- “Payment Data” is information related to the payment instrument used to make transactions, such as payments, and includes bank account information (e.g., account and routing number).
- Website Visitor Information. We may gather and store “Aggregate Information” about Site visitors. The collection of this Aggregate Information enables us to:
-
- Measure the number of visitors to various portions of the Site;
- Diagnose problems with the Site;
- Administer the Site;
- Track visitor activity;
- Learn more about what visitors and our customers expect;
- Understand the effectiveness of our marketing activities; and
- Improve the Site.
PEX servers record Aggregate Information automatically sent by visitor and user browsers. One way this is accomplished is through the use of "Cookies.” "Cookies" are small pieces of information regarding visits to and use of websites that are stored by the browser on a computer's hard drive. Additionally, Cookies allow us to identify and link users to PEX Accounts. PEX uses both session Cookies and persistent Cookies. A persistent Cookie remains after you close your browser and may be used by your browser on subsequent visits to the Sites. These persistent Cookies can be removed, but each web browser is a little different. Please review your browser’s “Help” file to learn the correct way to modify your Cookies setup. Without acceptance of our Cookie by the user, we would be unable to store session data or other information for subsequent log-ins or future use. We do have the ability to honor “Do Not Track” requests. We also automatically record certain data using technology, including without limitation “clear gifs” or “web beacons,” Cookies (discussed above), IP addresses, unique “device IDs” (similar to IP addresses), and similar, including without limitation data such as web browser type, the website that referred you to us (if any), the web pages you viewed on the Site, the dates and times that you visited the Site.
Where We Store Personal Information
PEX is located and based in the United States of America. The provision of the PEX products and services, and processing and use of the data you provide to us, is done in the United States. Upon providing us with Personal Information, and/or by accessing and using the Site or the PEX products and services, you consent to the processing, transfer, and storage of such information on, in, and to our servers located within the United States.
How We Use Collected Information
We use information we collect about you to:
- process your requests for our products or services and provide those products or services to you;
- provide relevant information to you about our products and services, including, but not limited to, important changes to our policies and terms and conditions;
- make improvements to and personalize our products and services;
- communicate with you about your account(s) and transactions, including inviting you to participate in surveys, contests, and other promotions;
- track the effectiveness of our advertisements;
- detect, respond to, and protect against illegal activity, activity which may violate our business policies, or activity which may compromise our business operations or security;
- maintain and service your account; respond to your requests;
- detect, respond to, and protect against fraud, security breaches, identity theft, and other risks of harm;
- comply with applicable legal and regulatory obligations;
- honor your personal settings (e.g., font size, location), enhance your online and mobile experience; or
- improve our products and services; and provide targeted marketing to you.
Sharing Your Information
If you are our customer or former customer, we will share your information in order to process transactions or otherwise make the products and services operational, including sharing with the issuing bank, the payment card networks, and our vendors or service providers.
Beyond this, we will not share your information unless required to do so by law, such as to comply with federal, state, or local laws or to comply with a properly issued subpoena or summons by Federal, state, or local authorities.
We will not sell or lease the information we collect about you to third parties for any purpose, including for those third parties to engage in the direct marketing of their own products or services to you.
Keeping Your Information Secure
We are committed to keeping your information secure. To protect your information from unauthorized access and use, we use security measures designed to comply with federal and state law and meet recognized industry standards. This includes the use of encryption technology, contractual limitations on the use of your information with our service providers and subcontractors, and identity verification procedures.
Children’s Online Privacy
Our products and services are not directed to children. We do not knowingly solicit or collect Personal Information from children under the age 13, without parental consent. If you are a parent or guardian of a child under the age of 13 and become aware that he or she disclosed Personal Information to us, please contact us at the address below. For more information about the Children's Online Privacy Protection Act, visit the Federal Trade Commission’s website at https://www.ftc.gov/.
Mobile App Privacy
Our mobile application may request access to information stored on your device such as location, contact lists, external storage, camera/photo information, contacts, or other features you are enrolled in to simplify your user experience, improve our services, and provide additional security to protect your account. The mobile application may also access other information as outlined in this notice.
It is important to understand that:
- Before granting access to this information, you will be prompted to give the application that permission.
- If you do not wish to grant that permission, you may decline.
- If you later change your mind, you may update those permissions in your device settings.
International Users
Our services are designed primarily for U.S. users, but may be accessed abroad. By using the services outside the U.S. you consent to your data being processed and stored in the United States.
Customer's Choice About Receiving Promotional Materials
In the event you enter Personal Information into a field whose function it is to request additional information or offers (and is clearly labeled as such), you authorize the delivery of such materials from PEX and/or authorized third parties. You may opt out using the contact methods listed below under the heading "Contact Us.” Due to processing time on the part of PEX and such third parties, please note that it can take several weeks for an opt-out request to be effective.
Retention of Personal Information
PEX will retain your Personal Information for as long as your account is active or as needed to provide you services and up to a period of no longer than five (5) years, unless the period is required to be different under applicable law. To the extent permitted by applicable law, we may also further retain and use your Personal Information only as necessary to comply with our legal obligations, resolve disputes, maintain appropriate business records, and enforce our agreements. Because Aggregate Information does not personally identify who it pertains to, such information may be retained by PEX indefinitely.
Indemnification
You are responsible for maintaining the confidentiality of their username(s), password(s), account(s), and all activities occurring under your account(s). You hereby agree to indemnify, defend, and hold us, our agents, representatives and other authorized users, and each of the foregoing entities' respective officers, directors, owners, employees, agents, representatives and assigns (collectively the "Indemnified Parties") harmless from and against any and all losses, damages, liabilities, and costs (including without limitation reasonable attorneys’ fees and costs) incurred in connection with any claim arising out of any breach by the user of this Privacy Policy.
You agree to use your best efforts to cooperate with us in the defense of any claim. We reserve the right, at our own expense, to employ separate counsel and assume the exclusive defense and control of any matter otherwise subject to indemnification by you.
Contact Us
For requests or questions related to Aggregate Information and Personal Information, you may contact us using the methods detailed below.
By Mail
PEX Customer Service
Madison Ave STE 15440
New York, NY 10016
Cardholder:
1-866-685-0898
[email protected]
Administrator:
1-866-685-1898
[email protected]
Rights Under the California Consumer Privacy Act (For California Residents Only)
This section provides additional details about the personal information we collect about California consumers and the rights afforded to them under the California Consumer Privacy Act/Consumer Privacy Rights Act (“CCPA,” “CPRA”). Personal information does not include publicly available information from government records; anonymized or aggregated consumer information; and information governed by the federal Gramm-Leach-Bliley Act (GLBA), the federal Fair Credit Reporting Act, the California Financial Information Privacy Act, or the Driver’s Privacy Protection Act. We do not knowingly collect data on any consumer that is 13 years of age or younger.
We may collect “sensitive personal information,” however we do not sell or share such information.
In the last 12 months, we may have collected the following categories of personal information: identifiers (such as name and contact information), demographic information (such as age and gender), commercial information (such as products purchased), internet or other electronic network activity information (such as browsing behavior), geolocation data, audio, electronic, visual or similar information (such as customer support calls), and inferences we make (such as preferred activities). This information may have been provided directly by you or indirectly by you when interacting with our website.
We may use or disclose the personal information we collect for one or more of the following purposes:
- To fulfill or meet the reason you provided the information. For example, if you share your name and contact information to request a price quote or ask a question about our products or services, we will use that personal information to respond to your inquiry. If you provide your personal information to purchase a product or service, we will use that information to process your payment and facilitate delivery. We may also save your information to facilitate new orders or process transactions.
- To provide, support, personalize, and develop our Site, products, and services.
- To create, maintain, customize, and secure your account with us.
- To process your requests, purchases, transactions, and payments and prevent transactional fraud.
- To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses.
- To extent permitted by applicable law, we may share your information to personalize your website experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our website, via email or text message, and/or other marketing activities.
- To help maintain the safety, security, and integrity of our website, products and services, databases and other technology assets, and business.
- For testing, research, analysis, and product development, including to develop and improve our website, products, and services.
- To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
- As described to you when collecting your personal information or as otherwise set forth in the CCPA.
- To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about our Website users and consumers are among the assets transferred.
We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.
Subject to certain exemptions, the CCPA provides California consumers the following rights:
Right to Know and Data Portability
You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months (the “right to know”). Once we receive your request and confirm your identity (see “Exercising Your Rights to Know or Delete”), we will provide you with required information.
Right to Delete
You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions (the “right to delete”). Once we receive your request and confirm your identity (see “Exercising Your Rights to Know or Delete”), we will review your request to see if an exception allowing us to retain the information applies. We may deny your deletion request as allowed by law.
We will delete or de-identify personal information when required by law and will direct our service providers to take similar action.
Right to Correct
You have the right to request that we correct inaccurate Personal Information that we may maintain.
Exercising Your Rights to Know or Delete
To exercise your rights to know or delete described above, please submit a request by contacting us using the methods detailed below.
IMPORTANT PRIVACY INFORMATION FOR CALIFORNIA RESIDENTS
The California Online Privacy Protection Act requires us to disclose how we respond to Do Not Track signals set in your browser. We do not support Do No Track browser settings. If you enable Do Not Track settings in the browser you are using, we will not respond to them. The California Consumer Privacy Act (“CCPA”) grants you specific rights in regard to Personal Information we have collected about you. Under the CCPA, you have the right to request from us up to two times every 12 months, free of charge, a list of all the categories and/or specific pieces of Personal Information we have collected about you and that we delete such Personal Information. In the 12 months prior to the Effective Date of this Online Privacy Notice, we have collected the following categories of Personal Information about our customers:
|
Category |
Examples |
Collected |
|
Identifiers. |
A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers. |
YES |
|
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). |
A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories. |
YES |
|
Protected classification characteristics under California or federal law. |
Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). |
YES |
|
Commercial information. |
Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
YES |
|
Biometric information. |
Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. |
YES |
|
Internet or other similar network activity. |
Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement. |
YES |
|
Geolocation data. |
Physical location or movements. |
YES |
|
Sensory data. |
Audio, electronic, visual, thermal, olfactory, or similar information. |
NO |
|
Professional or employment-related information. |
Current or past job history or performance evaluations. |
YES |
|
Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)). |
Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. |
NO |
|
Inferences drawn from other personal information. |
Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. |
NO |
Changes to this Privacy Notice
We may make changes to this Privacy Notice at any time and without notice. Any changes to this notice will become effective when posted unless indicated otherwise. Please revisit this notice to ensure you understand how we collect and use your information.
Non-Discrimination
We will not discriminate against you for exercising any of your CCPA rights. If you choose to exercise your rights under the CCPA, we will not deny you goods or services, charge you different prices, impose different interest rates or fees, or provide you with a different level of quality of goods or services.
Cardholder:
1-866-685-0898
[email protected]
Administrator:
1-866-685-1898
[email protected]
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. You may be required to provide additional information necessary to confirm your identity or, if you are an authorized agent, to confirm your authorization to make such a request. Authorized agents may be required to submit a letter on company letterhead stating the named person’s authority to act as an authorized agent, or other reasonable documentation establishing such authority.
You do not need to create an account with us to submit a request to know or delete.
We will only use personal information provided in the request to verify the requestor’s identity or authority to make it.
Response Timing and Format
We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact us using the contact information included in the section above called “Exercising Your Rights to Know or Delete.”
We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing.
If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.
Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Non-Discrimination
We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:
- Deny you goods or services.
- Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
- Provide you a different level or quality of goods or services.
- Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
We do not sell the personal information we collect.
California consumers may make a rights request by contacting us at the information in our Privacy Policy.