Draft pending legal review

Privacy notice

Last updated October 9, 2026

Scope

This notice explains how Oyaka Inc. collects and uses personal information through this website and when we provide Oyaka products to customers of our partners (banks, credit unions, fintechs and employers). If you use a Oyaka product, your partner's privacy notice also applies, and for financial products you'll receive our privacy notice required by the Gramm-Leach-Bliley Act with your account documents.

What we collect

  • From website visitors and prospective partners: name, work email, company, role and what you tell us in forms; basic technical data such as IP address and browser type. We don't use advertising trackers on this site.
  • From customers of our partners: identity details (name, address, date of birth, government ID number where a product requires it), contact details, bills you ask us to pay, bank account or payroll information used for repayment, income or earnings information, vehicle and title details for AutoFloat, rent payment history for Rent Reporting, and information you ask us to monitor or remove for Identity Protect and Privacy Protect.
  • From others: identity verification and fraud prevention services, bank-data services you connect, vehicle valuation and title services, sanctions lists, and the partner whose program you use.

How we use it

To decide eligibility, open and service accounts, pay bills, collect payments, report rent payments to credit bureaus when you ask us to, provide monitoring and data-removal services, prevent fraud, meet legal and regulatory obligations, respond to requests, and improve our services. We use information from prospective partners to respond and to send relevant business updates, which you can opt out of at any time.

Sharing

We share personal information with the partner whose program you use; billers and merchants we pay on your behalf; payment processors and banks; credit bureaus (only for products that report, such as Rent Reporting); service providers bound by contract to protect it; and authorities when the law requires. We do not sell personal information or share it for cross-context behavioral advertising.

Security and retention

We encrypt sensitive data in transit and at rest, limit access to people who need it, and require two-factor sign-in for staff. We keep information as long as needed to provide the service and to meet legal record-keeping requirements (financial records generally for at least five years), then delete or de-identify it.

Your choices and rights

You can ask to access, correct or delete your information, and withdraw consent to electronic communications, by writing to privacy@oyaka.com or through your program's support. Some information must be kept to comply with the law or while an account has a balance. California residents have rights under the CCPA/CPRA to know, delete, correct and limit use of sensitive personal information, and to not be discriminated against for exercising them; information covered by the Gramm-Leach-Bliley Act is handled under that law. We respond within the time the law requires and verify requests to protect you.

Children

Our products aren't directed to anyone under 18, and we don't knowingly collect their information.

Contact and changes

Oyaka Inc., Los Angeles, California · privacy@oyaka.com. We'll post updates here and note the date; material changes will be communicated as the law requires.