Your Information Rights and Choices

Your rights

At Iota, we believe that you have rights to information that pertains to you, your household and/or your business. If another person has input or processed information in the Iota Platform about you or on behalf of you, your family or your business (and we are processing such information as data controller), you may ask to receive a copy of your information, even if you do not have an account with us.

Depending on where you live, you may have certain state rights with respect to your personal information that we collect and process.


To help protect privacy and the security of your information, you may be asked to provide additional information to verify your identity and/or ownership rights prior to us exercising your data rights. If we are unable to verify your identity or ownership rights to the data, we may not be able to provide you with data rights until you are able to provide us with proper documents.

Information retention

Unless you specifically ask us to delete your personal information, we retain your personal information as long as it is necessary to comply with our data retention requirements and provide you with services and the benefits of the Iota Platform and successfully run our business. However, even if you request a deletion, we may be required to maintain your information for as long as necessary to:

  1. Comply with our legal or regulatory compliance needs (e.g. maintaining records of transactions you have made with us).
  2. Exercise, establish or defend legal claims.
  3. Protect against fraudulent or abusive activity on our service.

This means we may keep different information for different periods. If your account is canceled because you’ve not used it in a long time, we may delete this information straight away.

There may be occasions where we are unable to fully delete, anonymize, or de-identify your information due to technical, legal, regulatory compliance or other operational reasons. Where this is the case, we will take reasonable measures to securely isolate your personal information from any further processing until such time as we are able to delete, anonymize, or de-identify it.

Security of your personal information

We use physical, technical and organizational safeguards designed to protect your information. However, despite these controls, we cannot completely ensure or warrant the security of your information.

Changes to our Privacy Statements

From time to time we may change or update our Privacy Statement. We reserve the right to make changes or updates at any time. If we make material changes to the way we process your personal information, we will notify you by posting a notice in our platform or on a community post; by sending you a notification; or by other means consistent with applicable law.

You can see when this Privacy Statement was last updated by checking the “last updated” date displayed at the top of this Privacy Statement. Please review this Privacy Statement periodically to stay informed about how Iota protects your privacy.

Collection and use of children’s personal information

Our services are not intended for or directed to children. We do not knowingly collect personal information from children. If you believe we may have information from a child, please contact us.

By using, accessing, or interacting with the Iota Platform, you are consenting to receive notices about your financial privacy electronically.

For more information please click here.

If you are a Vermont resident, you may have the following rights:

Iota will not share your non-public personal information with unaffiliated third parties unless you authorize us to make those disclosures without your consent, other than as permitted by law. Further, Iota consumer offerings will not share credit reports with our affiliates without your consent.

If you are a California resident, you may have the following rights:

You may have the right to access:

  1. the categories of personal information we have collected about you,
  2. the sources from which that information was collected,
  3. the business or commercial purpose for collecting your personal information,
  4. the categories of third parties with whom we share your personal information,
  5. the specific pieces of personal information we have collected about you,
  6. the categories of personal information we sold about you,
  7. the categories of third parties to whom we sold personal information about you, and
  8. the categories of personal information we disclosed for a business purpose.

Deletion. You may have the right, under certain circumstances, to request that we delete the personal information you have provided to us.

Non-discrimination. You have the right to be free from discrimination related to your exercise of any of your California privacy rights.

Verification. In order to protect your personal information from unauthorized access or deletion, we may require you to verify your credentials before you can submit a rights request. If you do not have an account with us, or if we suspect that your account has suffered fraudulent or malicious activity, we may ask you to provide additional personal information for verification. For Credit Karma members, we may require that you confirm certain pieces of personal information that we have on file and/or log into your Credit Karma account. If we are subsequently unable to confirm your identity, we may refuse your rights request.

Authorized agents. You may use an authorized agent to submit a rights request. If you do so, the authorized agent must present signed written authorization to act on your behalf, and you will also be required to independently verify your own identity directly with us and confirm with us that you provided the authorized agent permission to submit the rights request. This verification process is not necessary if your authorized agent provides documentation reflecting that the authorized agent has power of attorney to act on your behalf under Cal. Prob. Code §§ 4121 to 4130.

Transparency matters.

Please note that we may claim legal exemptions for certain types of personal information from all or certain parts of the CCPA pursuant to various CCPA exemptions.

Right to Know. You have the right to know the categories of personal information, categories of sources, and/or categories of third parties related to the processing of your personal information.

What you can do to manage your privacy. You have choices when it comes to managing the privacy of your personal information.

Update your privacy settings. You may update your privacy settings by visiting your account settings.

Manage marketing communications from us. To update your marketing communication preferences, you can go to the marketing preference tools in your account settings. You may also click unsubscribe at the bottom of the marketing emails.
Download a copy of your personal information. You may request a copy of your personal information by visiting your account or calling us at (515) 225-7078.

Correct your personal information. You can edit and correct your personal information at any time by changing it directly in our products and services.

Delete your personal information. You may request for us to delete your personal information by visiting your account settings or calling us at (515) 225-7078.

Your Right to Limit Information Sharing: You have the right to limit our sharing of your information to both affiliates and third-parties for marketing purposes. You can limit our information sharing by visiting your account or calling us at (515) 225-7078.

Scroll to Top