Privacy Policy
TurboPass Privacy Policy
 
TurboPass is an automated, web-based service that allows creditors to verify and monitor a potential consumer’s/ buyer’s asset accounts during the credit application and approval process. TurboPass eliminates a consumer’s need to engage in the time-consuming process of locating, copying and transmitting important financial documents to their creditor, often through insecure channels. Our service eliminates issues --like missing pages and lost or misplaced documents-- that slow down the review and approval process. Because we obtain the asset information directly from the buyer’s financial institution or brokerage, our service also eliminates transcription errors and intentional alterations that are sometimes made to make sure a buyer's credit request is approved. This means that creditors are sure that they are basing their decisions on accurate information. Our service saves time for everyone involved in the transaction and reduces creditor losses, which makes credit less expensive and more available to more customers.
We understand the importance of protecting individuals' sensitive financial information. We designed this Privacy Statement to help you understand how the TurboPass service will collect, use and disclose consumers' financial data.
Special note on children's privacy: TurboPass is not designed or intended to attract or be accessible to minors (children under age 18). We will not knowingly collect personal information from minors.
This policy covers the following topics:
• Information we collect about consumers and how we use it;
• Who we share consumers' information with; and
• How we protect consumers' personal information.
INFORMATION COLLECTION AND USE
We collect personal and non-personal information from consumers who give us express permission to do so. We are acting as an intermediary on behalf of the consumer’s creditor when we do so. We must collect this information in order to provide the TurboPass service and to improve our services.
Information We Collect from Consumers
Information to Verify Asset Accounts: The TurboPass service allows creditors to verify a consumer’s assets through direct access to a consumer’s financial account data. Consumers must expressly agree to allow TurboPass to serve as the creditor's intermediary, and to provide his/her identifying credentials for the accounts that need to be verified. The consumer's credentials may include username, password and answers to challenge questions. While the accounts are being verified and creditors are able to update that information (the refresh period; usually 30 days) the credentials are stored in a secure hardware-encrypted repository that is inaccessible to humans managed by TurboPass’ designated data access vendor.
Log information: Our servers automatically collect log information from site visitors. This information may include the Web page request, Internet Protocol (IP) address, browser type, browser language, the date and time of the request, and one or more cookies that may uniquely identify the visitor's browser. We collect log information so that we can properly administer our system and gather aggregate information about how our site is being used, including the pages visitors are viewing.
Cookies: We use session cookie technology to keep track of visitors as they navigate from one page to the next on the site. 
Browser software can be set to reject all cookies or to accept cookies only from our site. Most browsers offer instructions on how to reset the browser to reject cookies in the “Help” section of the toolbar. Rejecting cookies will prevent further use of the TurboPass service.
Information We Collect from Others
We collect information about consumers from the creditors who orders the account verification and from the financial institution(s) that provide the account verification data.
The information provided by the creditor includes the consumer's name, e-mail address, telephone number, the last four digits of his/her Social Security Number (for identity authentication), the name of the consumer's employer(s), the amount of the consumer's net paycheck, the amount of required reserve funds, the account number, and the names of financial institutions and accounts that are to be verified through the online service.
The information we receive from the consumer's financial institution(s) includes the summary and transactional information from the accounts the consumer allows us to verify.
When we receive information from third parties, we treat the acquired information as if we had collected it ourselves. We will share this information in individually identifiable form only in accordance with this statement and our policies. We may share aggregated, non-personal information as described in this statement. This may include information we obtained from third parties in a form that does not permit the consumer to be identified.
TurboPass ensures the consumer information is accurate, complete and current by pulling information directly from the consumer's financial institution via online banking credentials. Data is refreshed by the creditor as needed to fulfill underwriting obligations for up to 30 days.
HOW WE USE THE INFORMATION WE COLLECT
TurboPass uses the information we collect to provide verification and analysis of a consumer’s asset accounts to the requesting creditor, to administer our web site, and to improve our service.
TurboPass does not sell, share, license or transmit consumer information with or to third parties without the express authorization of the consumer.
WHO SEES THE INFORMATION WE COLLECT?
We will not disclose this information except as described in this policy.
Verification Service delivery: We will disclose the information we receive from the consumer's financial institutions to the requesting creditor, as well as to any other parties that the consumer authorizes us to provide such information, to deliver the Verification of Deposit and Asset service.
Disclosure for legal reasons: We may release personal information to third parties: (1) to comply with valid legal requirements such as a law, regulation, search warrant, subpoena or court order; or (2) in special cases, such as a physical threat to the consumer or others, a threat to homeland security, a threat to our system or network, or cases in which we believe it is reasonably necessary to investigate or prevent harm, fraud, abuse, or illegal conduct. If we are legally compelled to disclose your personal information to a third party, we will make reasonable efforts to notify the consumer unless doing so would violate the law or court order.
Agents and contractors: Contractors who assist in operating our business and providing products or services sometimes have access to consumers' personal information. These contractors include vendors and suppliers that provide us with technology, services, and/or content for the operation and maintenance of our site. Access to consumers' personal information by these contractors is limited to the information reasonably necessary for the contractor to perform its limited function. Contractors have an obligation under their contracts with us to keep consumer information confidential and to comply with our privacy and security policies.
Some of these relationships may be with companies that co-brand portions of their site and services, or that provide services to consumers on our behalf. Co-branded sites may have their own privacy policies posted on their sites. If you visit a co-branded site, please read the privacy policy that is posted on that site.
Direct Employees of TurboPass: Employees are NOT authorized to download information that is not directly related to their work. Prior to downloading any software tools, all employees are advised to notify an Operations staff member of this intention. If help is needed, the local system administrator will provide support. Employees are NOT authorized to download data from any production, stage, or QA system without prior written approval. Prior to downloading any data, all employees must follow the Data Privacy Download Procedures. This includes any and all data that is confidential, sensitive or legally protected, including log files. Employees are not allowed to enter Server Rooms unless accompanied by a member of the Operations team.
Employees must follow the TurboPass Privacy Policy and adhere to the TurboPass Privacy Principles or be subject to disciplinary action per the TurboPass Employee Handbook. 
Changes in our corporate structure: If all or part of our company is sold, merged or otherwise transferred to another entity, the personal information you have provided to us may be transferred as part of that transaction. We will take steps to ensure that any personal information that is transferred will not be used or shared in a manner inconsistent with the Privacy Policy under which it was collected.
HOW WE SAFEGUARD PERSONAL INFORMATION
We are committed to protecting the security of consumers' private information through procedures and technology designed for this purpose. This includes, but is not limited to:
• Limiting access to personal information to only those employees who have a reasonable need to access this information in order to provide our products and services. Employees who misuse information are subject to disciplinary action, including termination;
• Utilizing physical, technical and procedural safeguards to help protect consumers' personal information; and
• Using secure transport layer security (TLS) to help protect this information while it is in transit between our servers and others' computers and hardware encryption devices. We use AES-256 encryption while it is being stored on our servers.
WHAT CONSUMERS CAN DO TO HELP KEEP PERSONAL INFORMATION SECURE
Consumers also have a role in protecting the security of their private information, including:
Keeping the Personal TurboPass Code secure: Consumers should not share the Personal TurboPass Code with anyone other than creditors with permissible purpose.
Log out and close the browser: Closing the browser at the end of a session erases any information it may have temporarily stored on your computer.
Install antivirus software and spyware protection: Installing up-to-date antivirus software and running it often will help thwart viruses and other unwanted programs that can capture the contents of a consumer's system, including passwords.
CHANGES TO THIS POLICY
We may change our privacy policy in the future, but we will not change our practices until they have been posted at this website. If changes occur, we will also show the date of revision. By using our web sites, to which this privacy policy applies, you agree that we may notify you of changes in our privacy policy through this website.
Responsibility and accountability for developing, documenting, implementing, enforcing, monitoring and updating the Privacy Policy falls to the Chief Technology Officer whose contact information is available on the company intranet and web page.
Privacy Incident of Breach
In the event that TurboPass Corporation suspects that consumer information has been compromised, TurboPass Corporation will make every effort to contact and inform consumers per its incident management policy. This will include phone call, email or mail.
CONTACT
TurboPass is an automated asset verification service provided by TurboPass Coporation. If you have questions or comments about this privacy policy, please e-mail us at compliance@nostips.com or write to Chief Security Officer, TurboPass Corporation, 7509 Menchaca Rd Unit 103 Austin, TX 78745.
To request a copy of your consumer data supplied by TurboPass Corporation or an amendment to that information please email compliance@nostips.com, call (855) 667-8477 or contact your creditor directly. To request a copy of your consumer data supplied by TurboPass Corporation or an amendment to that information please email compliance@nostips.com, call (855) 667-8477 or contact your creditor directly.
Updated 3/26/2021