Privacy Policy

Third-Party Disclosure

We do not disclose or sell personal information about you or our former members to non-affiliated third parties, except as permitted or required by law or regulation or as specified above. We may disclose all of the information we collect to companies with whom we have a financial services agreement to offer financial products and services to you.

Reasons we can share your personal information

Reasons we can share your personal information	Does American First Credit Union share?	Can you limit this sharing?
For our everyday business purposes - such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus	Yes	No
For our marketing purposes - to offer our products and services to you	Yes	Yes
For joint marketing with other financial companies	Yes	Yes
For our affiliates' everyday business purposes - information about your transactions and experiences	No	We don’t share
For our affiliates' everyday business purposes - information about your creditworthiness	No	We don’t share
For our affiliates to market to you	No	We don’t share
For non-affiliates to market to you	Yes	Yes

What we do

Definitions

 

ONLINE PRIVACY POLICY

Effective Date: October 9, 2026 

This Online Privacy Policy (“Online Privacy Policy”) describes American First Credit Union’s online privacy practices and applies to websites, mobile applications that run on smartphones, tablets, and other devices (“app(s)”), and additional services that we offer which link to this Online Privacy Policy. 

By using this website or our apps, you agree to the terms and conditions of this Online Privacy Policy and consent to our online data collection activities as described in this Online Privacy Policy. 

The terms “personal information” or “personally identifiable information” used in this Online Privacy Policy refers to information such as your name, mailing address, email address, telephone number, Social Security number, or other information that identifies you. This information may be collected when you voluntarily provide it to us on our website or in our app. 

 

INFORMATION WE COLLECT ONLINE – AND HOW WE COLLECT IT 

You may visit our website to find out about products and services and check rates, without giving us any personal information. We may use software tools and/or "cookies" to track and gather information about your browsing activities in order to analyze usage, target areas for improvement, and create marketing programs to benefit our members or potential members that visit our site. 

Tracking includes the date and time of visits, pages viewed, time spent on our site, browser types, IP address, and the site visited just before and just after our site. We may also track browsing activities of members who have accounts with us and who use our online banking services. 

As part of our security procedures for members using our online banking to conduct account inquiries and transactions, we require personally identifiable information such as a login identification (login ID) and password. We may use a cookie to authenticate your request. 

1) Use of Cookies and Similar Tracking Technologies 

The use of cookies and similar tracking technologies (including pixels or clear GIFs, tags, and we beacons) is a common internet practice. Cookies are small text files containing small amounts of information which are downloaded to your computer, smartphone, tablet or other mobile device when you visit a website. Cookies are useful in a number of ways, including allowing a site or mobile app you use to recognize your device, save your settings on a site or mobile app, facilitate navigation, display information more effectively and to personalize the user’s experience. Cookies are also used to gather statistical information about how sites and mobile apps are used in order to continually improve design and functionality and assist with resolving questions regarding the sites and mobile apps. 

a. Categories of Cookies 

Below is a list of the types of cookies that may be used in our sites and mobile apps. We classify cookies into the following categories: 

• Necessary. These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information. 

• Statistics. These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance. 

• Preference. These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly. 

• Marketing. These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising. 

b. How to Control and Delete Cookies 

On Our Website 

You can manage your cookie preferences on our website through our Cookie Consent Tool. The tool allows you to enable or disable certain categories of cookies. Cookies that are strictly necessary for the operation and security of our website cannot be disabled through the tool. 

You may also manage or delete cookies through your browser settings. Your preferences may apply only to the browser and device you are currently using, so you may need to update your choices when using another browser or device. 

Some browsers support Global Privacy Control (“GPC”), which allows users to communicate a preference to opt out of the sale or sharing of personal information. Where required by applicable law, we honor qualifying GPC signals. 

Third-Party Websites 

Our website may contain links to websites or services operated by third parties, including sites used for applications, surveys, videos, or other services. When you leave our website, those third parties may use cookies or other tracking technologies according to their own privacy practices. Our Cookie Consent Tool does not control cookies placed on third-party websites, and we encourage you to review the privacy policies and cookie settings of those websites. 

Behavioral Advertising on Third-Party Websites 

We may use online activity information collected through our website or apps to provide advertisements for our products and services on third-party websites. We may work with advertising and analytics providers, such as Google, to support these activities. These third parties may use cookies or similar technologies and are subject to their own privacy policies. 

You may manage certain advertising and cookie preferences through the privacy choices available on our website. Additional information about your privacy rights and choices is available in the California Privacy Rights section of this Privacy Policy. 

Even after opting out of certain targeted advertising, you may still receive general advertisements from us that are not based on your online activity. 

2) Geolocation 

When allowed by you, our app and website collects your location data to provide you with location-based services, such as identifying branches and ATMs near you, and location-based messages and offers. We also collect location data to help with fraud detection. 

Opting out of location tracking. If you do not want us to collect location services, you may decline the collection of your location when prompted or adjust the location services settings on your device. Please note, however, that if you withdraw your consent to our collection of location information, you may no longer be able to use some features of the app. 

3) IP Addresses 

If you log on to online banking, you pass through a "firewall" used for security purposes and the Internet Protocol (IP) address associated with the computer you are using may be identified. The IP address does not identify you personally. In certain instances, it may also obtain other information about your computer to better identify you as an online user. This information may be retained in case it is needed for security or protection of member information. 

4) Contact Information and Images 

With your permission, our app may be granted access to your phonebook or contact information in your mobile device to provide various features like Zelle Payments. We will only disclose this information as necessary to enable such features and to comply with federal, state, or local laws, or other legal requirements. 

Our app may request access to your camera for you to be able to use our remote deposit capture service. The front and back pictures of the checks you sent will only be used for our remote deposit capture service. Such images will only be accessible by us and our service providers that help enable our remote deposit capture service. We will only disclose the check photos to third parties if necessary to process your remote deposit and to comply with federal, state, or local laws, or other legal requirements. 

Additionally, if you are applying for membership or a loan on our website or mobile application, we may ask you to upload a copy of your government issued identification card for us to comply with our regulatory requirements. We will only use this information to open your account and disclose this information to third parties as necessary to process your membership application and to comply with federal, state, or local laws, or other legal requirements. 

5) Financial Information 

Our online banking service on our website and mobile application collects financial and payment information to process transactions such as bill payments.  We will never publicly disclose any of your financial information, payment information or government issued identification card or card number. Such information may be disclosed only to our service providers for the purpose of processing transactions you request from us or maintaining your accounts with us, and such service provides are restricted from forward transfers of such information to other parties except in furtherance of processing your requested transactions or compliance with federal, state, or local laws, or other legal requirements. 

 

Other Information 

Linking to Other Websites: Our websites, online services, online or mobile banking may contain links to third party websites. Although these links were established to provide you with access to useful information, we do not control and are not responsible for any of these websites or their contents. We do not know or control what information third-party websites may collect regarding your personal information. We provide these links to you only as a convenience, and we do not endorse or make any representations about using such third-party websites or any information, software or other products or materials found there, or any results that may be obtained from using them. We encourage you to review the privacy statements of websites you choose to link to from our websites so that you can understand how those websites collect, use, and share your information. We are not responsible for the security or privacy practices of the linked websites. 

Protecting Children’s Privacy: We respect the privacy of children and comply with the practices established under the Children’s Online Privacy Protection Act (“COPPA”). Our website and mobile application does not target children. We do not knowingly collect or retain personally identifiable information from consumers under the age of thirteen. We may, however, collect information about consumers under the age of thirteen on our website or mobile application directly from their parents or legal guardians in connection with the financial products and service that we offer to our members, such as, without limitation, adding children as beneficiaries to bank accounts. For more information about COPPA please visit the Federal Trade Commission website: www.ftc.gov. 

Data Retention: We may retain your personal information and online activity data even if you decide to terminate your membership with us, close your accounts with us, and/or delete our app or cease use of our websites based on the following: 

• Laws and Regulations. We are a regulated financial institution that is subject to laws and regulations governing our retention of information pertaining to our members, applicants for credit union membership, loans and other financial products and services. We are also an employer and, thus, we are subject to labor laws governing how long we must retain information about applicants for employment and current and former employees. Therefore, applicable laws and regulations will govern how long we retain information pertaining to you. 

• Fraud Prevention and Security. We will retain information that we need for fraud prevention and security purposes. 

• Contracts. We will retain information for as long as necessary to comply with our contractual obligations to you, our service providers, and other third parties, as permitted by law. 

• Legal Claims and Defenses. We may retain information for such a period as necessary or advisable to preserve legal claims and defenses. 

Updates to this Policy: From time to time, we may change this Policy. The effective date of this Policy, as indicated above, reflects the last time this Policy was revised. Any changes to this Policy will become effective when we post the revised Policy on our website. Your use of our websites, online services, or online or mobile banking following these changes means that you accept the revised Policy.

 

California Consumer Privacy Act (CCPA)

As applicable in other states

• California residents have the consumer right to require a business to disclose the who, what and why of its information-sharing practices, to limit or require the deletion of personal information in some instances, and to be free from discrimination for exercising those rights; and
• Businesses are required to disclose and provide information about its information collection and sharing practices in response to a verified consumer request available on its website
• Other states may have similar applicable laws

Consumers have the

• Right to request disclosure of the categories and specific pieces of personal information the business collects or sells
• Right to request deletion of any personal information collected (subject to exceptions)
• Right to opt-out if the information is sold to third parties
• Right to nondiscrimination if the consumer exercises their rights

REQUEST Form