1. Information We Collect
2. How Alice Uses Personal Information
3. Who Alice Discloses Your Personal Information To
4. How To Access or Change Your Information
5. How Alice Protects and Secures Your Information
6. How Children are Protected
7. How We Dispose of Personal Information
8. When Our Policy Changes
9. State Privacy Notices

1. Information We Collect

Pretax Hero, Inc. (referred to in this Privacy Policy as “Alice,” “us,” or “we”) receives and stores the information that you provide directly to us, such as information that you provide to us during the enrollment process, to participate in the Qualified Transit and Parking Spending Plans that Alice administers for your employer (the “Program”).

We also receive your payroll information, including without limitation, your employer’s name, your hours worked, compensation, payroll deduction and reimbursement information, work location, benefit eligibility, filing status, and employee benefit information from your employer and your employer’s payroll processor (“Payroll Information”).

Additionally, we may store your card, account, transaction, reimbursement, substantiation, vendor, and other financial information that you provide to us or that is generated through your enrollment and/or use of the Program to assist in processing claims, transactions, reimbursements, corrections, or other Program activity.

When you enroll in the Program or purchase or use a Program product or service, we may collect and use information such as your name, Social Security number, address, phone number, date of birth, employee ID, email address, home address, communication preferences, and other identifiers (such information to be referred to in this Privacy Policy as “Personally Identifiable Information” or “PII”).

As used in this Privacy Policy all Payroll Information, all PII and the financial, card related and other information described above, including transaction history, reimbursement information, substantiation materials, account activity, customer support requests, communications, and health-related or dependent-related information to the extent applicable, shall be referred to as “Personal Information”.

Certain current or future Benefits may involve health-related information or protected health information (“PHI”) under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) or similar laws. To the extent HIPAA or similar laws apply to a Benefit that Your Employer enables, Alice will handle such information in accordance with Applicable Law and any then-applicable plan documents, business associate terms, product addenda, privacy notices, substantiation requirements, and/or participant authorizations. Unless and until such a Benefit is enabled for Your Employer, this Privacy Policy governs Alice’s handling of Personal Information generally.

2. How Alice Uses Personal Information

Alice uses your Personal Information to administer the Program and to provide Benefits, reimbursements, accounts, cards, and related services to you. For example, we use Payroll Information, including your Employee ID and pay information, to determine eligibility, recommend or communicate elections, and provide your employer and your employer’s payroll processor with information regarding deductions, reimbursements, additions, corrections, and other amounts associated with the Benefits available to you through the Program, such as commuter, dependent care, medical, wellness, or work-related expense programs. We may also need Payroll Information to help process payments, corrections, and other Program activity.

We use other types of Personal Information to identify expenses and other financial transactions that potentially qualify under the Program, to substantiate transactions or reimbursement requests, to recommend or process changes to elected amounts, to process card or account activity, to provide customer support and Program communications, to help protect against fraud or misuse, to conduct research and to comply with applicable law.

3. Who Alice Discloses Your Personal Information To

Alice does not sell or share your Personal Information for targeted advertising, or for monetary or other valuable consideration. Alice may disclose your Personal Information to your employer, your employer’s payroll provider, banking, payments, card, wallet, and account providers used in connection with the Program, vendors or providers associated with Program expenses or transactions, and service providers that assist Alice in administering, operating, supporting, securing, auditing, developing, or improving the Program, but only as reasonably necessary for those purposes. Nothing in this Section limits Alice’s right to: (a) use your Personal Information internally, or share it with Alice’s affiliates and subsidiaries, for any lawful business purpose; (b) use de-identified, aggregated, or anonymized data for any lawful purpose; or (c) use your Personal Information for analytics, research, product development, fraud prevention, security, and other internal operations.

Alice may disclose Personal Information to law enforcement or other government entities pursuant to a subpoena, legal process or applicable state or federal laws or regulations. We may also disclose Personal Information to other third parties pursuant to a subpoena or legal process. We may also disclose Personal Information to auditors, advisors, insurers, or transaction counterparties in connection with financing, insurance, corporate transactions, or similar business needs, subject to appropriate confidentiality obligations and applicable law.

4. How to Access or Change Your Information

You can review and update your account related information in your account settings on your employee dashboard at any time by logging in to your account. If you are unable to update your information through the dashboard, you may also contact Alice at privacy@thisisalice.com or support@thisisalice.com for assistance.

5. How Alice Protects and Secures Your Information

Alice is committed to protecting your information. We maintain administrative, physical, and technical safeguards to help secure your information and comply with industry and regulatory standards. To help ensure the privacy of your information, please regularly update your passwords, review your account information, and do not share your information with anyone.

6. How Children are Protected

Program services are not directed to anyone under 13. Additionally, we do not knowingly collect personal information online, or in any form, from a child under 13 years of age. As a result, we maintain the same level of administrative, physical, and technical safeguards for all personal information collected in association with the Program.

7. How we dispose of Personal Information

Alice maintains Personal Information for as long as reasonably necessary to administer the Program, comply with tax, accounting, audit, legal, regulatory, fraud-prevention, dispute-resolution, and operational obligations, and enforce our agreements, or for such longer period as may be required or permitted by Applicable Law. At the end of the applicable retention period, such Personal Information is securely deleted, anonymized, or destroyed from our records and systems, subject to reasonable backup, archival, and legal-hold practices. Alice retains Personal Information for as long as reasonably necessary to administer the Program, provide and improve the Services, comply with tax, accounting, audit, legal, regulatory, fraud-prevention, security, dispute-resolution, and operational obligations, enforce agreements, maintain consent and transaction records, and satisfy legal holds, or for such longer period as may be required or permitted by Applicable Law. Where Applicable Law requires deletion upon verified request, Alice will honor such requests subject to exceptions permitted by Applicable Law. Shredding, deletion, and anonymization is performed in accordance with applicable federal and state laws and in accordance with generally accepted industry practices and Applicable Law

8. When Our Policy Changes

Alice may make changes to our Policy from time to time. When we make material changes to the Policy, we may notify you that a change has been made and encourage you to periodically review the Policy to see if any changes may affect you. Your continued use of the Program after changes have been made will constitute your acceptance of the changes. Where required by applicable law, we will provide additional notice or obtain your consent before material changes become effective. If you have any questions or concerns under new versions of the Policy, please contact us at privacy@thisisalice.com.

9. State Privacy Notices

Alice complies with all applicable state laws regarding its use, disclosure and protection of your information. The following additional provisions apply to residents of these states: Residents of other states may also have rights under applicable state privacy laws. To exercise any rights that may be available to you under applicable law, please contact privacy@thisisalice.com. We may need to verify your identity and, where we process data on behalf of your employer or another business customer, may direct you to that customer for certain requests.

NEVADA

In accordance with Nevada Revised Statutes (NRS) 603A.340, businesses are mandated to provide a specific address for Nevada residents to submit requests. These requests are aimed at preventing the sale of certain personal information collected or anticipated to be collected about the consumer by the business. A “sale” in this context refers to the exchange of personal information for monetary gain, allowing a third party to license or sell this information to others. Nevada consumers wishing to make such a request should submit a request to privacy@thisisalice.com. Note: Pretax Hero does not sell personal information for any purpose whatsoever.

This section is provided to Nevada residents to satisfy Nevada Revised Statutes Chapter 603A.

(a) Operator. Pretax Hero, Inc. (d/b/a Alice) is the operator of www.thisisalice.com and the Alice mobile and web applications (the “Service”). You can contact us at: Pretax Hero, Inc., 249 Smith Street #2015, Brooklyn, NY 11231; privacy@thisisalice.com.

(b) Categories of covered information collected. Alice collects the following categories of “covered information” (as defined in NRS 603A.320) from Nevada consumers who use the Service: first and last name; home or other physical address; email address; telephone number; a unique identifier that permits a specific consumer to be contacted physically or online; and other information about a Nevada consumer that Alice collects through the Service and maintains in combination with any of the above (including employer, work location, payroll deduction amounts, transit and parking transaction history, and benefits enrollment status).

(c) Categories of third parties. Alice may share covered information with the following categories of third parties as needed to operate the Service: the Nevada consumer’s employer and the employer’s authorized administrators; the employer’s payroll, time-and-attendance, and benefits-administration platforms; Alice’s card-issuing, payment-processing, and banking partners; cloud infrastructure, data-storage, communications, and analytics providers acting on Alice’s behalf; and professional advisors and government authorities when required by law.

(d) No sale of covered information. Alice does not sell covered information as “sale” is defined under NRS 603A.330. Alice has not sold covered information about Nevada consumers in the preceding twelve months and does not intend to do so.

(e) Verified opt-out request. A Nevada resident may submit a verified request directing Alice not to make any sale of covered information that Alice has collected or will collect about that resident. To submit a request, email privacy@thisisalice.com with the subject line “Nevada Opt-Out Request” and include the requester’s full name, the email address or phone number associated with the requester’s Alice account (if any), the requester’s Nevada residential address, and a statement, made under penalty of perjury, that the requester is a Nevada resident and that the information provided is true. Alice will respond to verified requests within 60 days of receipt and may extend that period by up to an additional 30 days where reasonably necessary, with notice of the extension.

(f) Review and changes. Nevada residents may review and request changes to covered information through their Alice account profile within the Service or by contacting privacy@thisisalice.com.

(g) Notice of material changes. Alice will notify Nevada consumers of material changes to this Privacy Policy by email, through the Service, or by other reasonable means consistent with Applicable Law. The “Effective Date” below indicates when this Privacy Policy was last revised.

(h) Third-party online tracking. Alice uses third-party analytics and infrastructure providers (including Mixpanel and Datadog) that may collect information about a consumer’s interactions with the Service. To Alice’s knowledge, these providers do not use covered information collected through the Service to track a consumer’s online activities over time and across other unaffiliated websites or online services for advertising purposes.

Contacting Us

If you have any questions or concerns regarding our privacy policies, please send us a detailed message to privacy@thisisalice.com, or: 249 Smith St #2015, Brooklyn, NY 11231.