CAROUSEL PRIVACY POLICY

Jul 22, 2025

on Carousel Inc. (“Carousel”, “we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your information when you use our services — including our website, platform, forms, and any communication tools such as SMS or email.

By using Carousel, including submitting an application or interacting with our platform, you consent to the practices described in this policy.

1. Information We Collect

a. Personal Information

  • Name, address, email, phone number, date of birth, and identification documents

b. Application & Financial Information

  • Data submitted through workflows (e.g., KYC, bank information, employment or income data, credit reports)

c. Technical & Usage Data

  • IP address, browser type, session behavior, device info

d. Communications

  • SMS messages, emails, and other correspondence with Carousel

2. How We Use Your Information

We use your information to:

  • Operate and provide our services

  • Process and verify your application

  • Communicate with you about your application or status updates

  • Send you transactional SMS messages (e.g., one-time passcodes, verification updates)

  • Improve security and performance of our platform

  • Fulfill legal or regulatory requirements

3. SMS Communications (Consent and Compliance)

a. How You Consent

Users opt in to receive SMS messages via our secure application portal, such as:

https://staging.apply.oncarousel.com/v2/application?domain=https://plaid.com

  • Step 1 – Phone Entry: Users enter their phone number.

  • Step 2 – Call-to-Action: A “Get Verification Code” button appears.

  • Step 3 – Notice: Beneath the button, we display the following text:

“By providing your number, you agree to receive transactional texts from Carousel (e.g., status updates, codes). Msg & data rates may apply. Reply STOP to opt out.”

  • Step 4 – Access to Terms: We link to our Terms & Conditions and this Privacy Policy in the page footer.

b. Message Purpose

All SMS messages are strictly transactional. They include:

  • One-time passcodes for login or verification

  • Status updates on your application

  • Reminders or follow-ups you trigger during the process

We do not send marketing messages or use purchased phone numbers.

c. Message Frequency & Opt-Out

  • Frequency is determined by your activity

  • Message and data rates may apply

  • To opt out, reply STOP at any time

  • To get help, reply HELP or contact privacy@oncarousel.com

d. Messaging Provider

We use Twilio to send all SMS messages. Twilio ensures delivery in compliance with U.S. A2P messaging regulations.

4. Sharing Your Information

Carousel does not sell or rent your personal information.

We only share data with:

  • Service providers that enable our platform (e.g., identity verification, financial data, SMS providers)

  • Business partners that you apply to through our service (e.g. leasing providers)

  • Government authorities, if legally required to do so

All third parties are contractually obligated to safeguard your data.

5. Data Security

We maintain industry-standard security including:

  • End-to-end encryption

  • Role-based access control

  • Secure cloud storage

  • Regular audits and compliance reviews

Your data is protected from unauthorized access, use, or disclosure.

6. Data Retention

We retain personal information only as long as necessary to:

  • Deliver services

  • Fulfill regulatory or legal requirements

  • Resolve disputes and enforce agreements

When your data is no longer needed, we delete it securely.

7. Your Rights

You have the right to:

  • Access a copy of your personal data

  • Correct inaccurate or incomplete data

  • Delete your data, when legally permitted

  • Withdraw SMS messaging consent at any time

To exercise your rights, email us at privacy@oncarousel.com.

8. Children’s Privacy

Carousel does not knowingly collect or process data from children under the age of 18. If we learn we’ve collected personal data from a child, we will delete it immediately.

9. Policy Updates

We may update this Privacy Policy periodically. Updates will be posted to this page and reflected by a revised effective date. For major changes, we may notify you directly via email or in-app message.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

on Carousel Inc.

5101 rue buchan, Montreal, Canada

Email: privacy@oncarousel.com


All financial services involve risk. on Carousel Inc. (“Carousel”) is a technology platform that enables data collection, identity verification, underwriting support, and automation through integrations with third-party service providers. Carousel is not a financial institution, lender, broker, or credit reporting agency. All decisions regarding credit, lending, and applicant approval are solely the responsibility of the client organization using the platform.

Verification services (such as IBV, KYC, KYB, credit checks, e-signatures, and more) are facilitated through third-party providers including, but not limited to, Flinks, Equifax, Onfido, VoPay, Paybilt, and others. Use of these services is subject to the terms, pricing, and licensing of each provider. Carousel may act as a billing intermediary or technical facilitator for these integrations.

Carousel does not guarantee approval outcomes, financial decisions, or the accuracy of third-party data. Clients are responsible for their own compliance with local, provincial, federal, and industry-specific regulations, including but not limited to Law 25, SOC 2, and AML/ATF frameworks. Carousel is in the process of completing its SOC 2 Type I certification.

on Carousel Inc. is a Canadian corporation, headquartered at 5101 rue Buchan, Montréal, QC, Canada. All trademarks and service marks are property of their respective owners. © 2025 Carousel Inc. All rights reserved.

All financial services involve risk. on Carousel Inc. (“Carousel”) is a technology platform that enables data collection, identity verification, underwriting support, and automation through integrations with third-party service providers. Carousel is not a financial institution, lender, broker, or credit reporting agency. All decisions regarding credit, lending, and applicant approval are solely the responsibility of the client organization using the platform.

Verification services (such as IBV, KYC, KYB, credit checks, e-signatures, and more) are facilitated through third-party providers including, but not limited to, Flinks, Equifax, Onfido, VoPay, Paybilt, and others. Use of these services is subject to the terms, pricing, and licensing of each provider. Carousel may act as a billing intermediary or technical facilitator for these integrations.

Carousel does not guarantee approval outcomes, financial decisions, or the accuracy of third-party data. Clients are responsible for their own compliance with local, provincial, federal, and industry-specific regulations, including but not limited to Law 25, SOC 2, and AML/ATF frameworks. Carousel is in the process of completing its SOC 2 Type I certification.

on Carousel Inc. is a Canadian corporation, headquartered at 5101 rue Buchan, Montréal, QC, Canada. All trademarks and service marks are property of their respective owners. © 2025 Carousel Inc. All rights reserved.

Carousel

Carousel

Carousel