Data Access and Dispute Rights Notice

Important: your rights regarding your information. Kora Financial Inc. (“we,” “us,” “Kora” or “Company”) is a consumer reporting agency subject to the Fair Credit Reporting Act (FCRA), 15 U.S.C. § 1681 et seq. This notice explains your rights to access information we maintain about you and to dispute any inaccurate information.

1. Your right to access your information

1.1 What information we maintain

Kora collects, maintains, and uses personal information about you for the purpose of verifying your identity and assessing eligibility for products, services, or other determinations. This information may include:

• Personal identifying information (name, date of birth, address, Social Security Number, phone number, email)
• Verification data and results
• Public records information
• Information from third-party databases and sources
• Inquiries and records of disclosures made about you
• Your dispute history

1.2 How to request access

You have the right to know what information Kora has collected and maintains about you. To request access to your information, you may:

1.3 What to include in your request

To expedite your request, please provide:

• Your full name
• Your current mailing address
• Your date of birth
• Your Social Security Number (or last four digits)
• A copy of a government-issued photo ID
• Your signature

1.4 Response timeline

Upon receipt of a valid request, Kora will provide you with:

• A copy of all information we maintain about you
• The sources of that information
• The dates and recipients of any disclosures made about you within the past 12 months (or 24 months if the disclosure was for employment purposes)

Timeline: Kora will respond within 30 calendar days of receiving your complete request. If we need additional information to verify your identity, we will contact you, and the 30-day period will begin upon receipt of complete information.

1.5 Fees

Kora will provide you with one free disclosure every 12 months upon request.

2. Your right to dispute inaccurate information

2.1 What you can dispute

If you believe any information in your file is inaccurate, incomplete, or misleading, you have the right to dispute it. Common disputes include:

• Incorrect personal information (name, address, date of birth)
• Information about which you believe you have no connection
• Incomplete or partial information
• Information that violates your privacy rights
• Duplicated or outdated information

2.2 How to file a dispute

2.3 What to include in your dispute

To ensure prompt processing, please provide:

• Your full name, address, and phone number
• Your date of birth and Social Security Number (or last four digits)
• A detailed description of the information you dispute
• The reason you believe the information is inaccurate (with specific facts if available)
• Supporting documentation (copies only, not originals)
• A copy of a government-issued photo ID
• Your signature and date

2.4 Dispute investigation process

Step 1 — Acknowledgment. Within 5 business days of receiving your dispute, Kora will:

• Send you written acknowledgment of your dispute
• Assign a case number
• Provide you with instructions for tracking your dispute

Step 2 — Investigation. Within 30 calendar days of receiving your dispute, Kora will:

• Conduct a reasonable investigation into the disputed information
• Contact third-party sources to verify the accuracy of the information
• Review all relevant documentation you provided
• Make a determination regarding the accuracy of the disputed information

Step 3 — Results and correction. Within 5 business days after completing our investigation, we will:

• Provide you with a written notice of our findings
• If we find the information is inaccurate or cannot be verified, we will correct or delete it
• If we find the information is accurate, we will explain our findings
• Notify you of your right to add a statement of disagreement (see Section 3 below)
• Inform you of any corrections made to your file

2.5 Reinvestigation process

If you are not satisfied with the results of our investigation, you may request a reinvestigation by:

• Submitting a written request within 30 days of receiving our investigation results
• Providing additional documentation or evidence not previously considered
• Following the same submission procedures outlined in Section 2.2

Reinvestigation timeline: We will complete any reinvestigation within 30 calendar days of receiving your request and provide you with updated results.

3. Your right to a statement of disagreement

3.1 If you disagree with our findings

If you dispute our investigation results and believe the information is still inaccurate, you have the right to place a Statement of Disagreement in your file.

3.2 How to submit your statement

You may submit a Statement of Disagreement by:

• Writing to our Dispute Department (see mailing address in Section 2.2)
• Emailing support@koramoney.com

Statement requirements:

• Must be submitted within 30 days of receiving our investigation results
• Should clearly state your disagreement with our findings
• Should be concise (we recommend 200 words or fewer)
• Must include your signature and date

3.3 Content and disclosure

Your Statement of Disagreement will be:

• Added to your permanent file
• Included in any future disclosures we make about you
• Sent to any party who received a disclosure of the disputed information within the past 12 months

4. Consumer reporting agency contact information

5. Escalation and complaints

5.1 If you are not satisfied

If you are not satisfied with Kora’s response to your access request or dispute, you may:

File a complaint with the Consumer Financial Protection Bureau (CFPB):

File a complaint with the Federal Trade Commission (FTC):

File a complaint with your state Attorney General:

5.2 Your right to sue

You may have the right to sue Kora for violations of the FCRA. You may be entitled to recover actual damages, statutory damages (up to $1,000 per violation), and attorney’s fees and court costs.

6. Fraud alert and credit freeze rights

6.1 Place a fraud alert

If you suspect identity theft or fraud, you can request that Kora place a fraud alert on your file. A fraud alert warns potential creditors to take additional steps to verify your identity before issuing credit in your name.

To request a fraud alert: Contact our Consumer Services Department using the contact information in Section 4.

6.2 Security freeze

You have the right to request a security freeze, which restricts access to your information. Once a freeze is in place, Kora will not disclose information about you to third parties without your consent.

To request a security freeze: Contact our Consumer Services Department using the contact information in Section 4.

Fee: Security freezes are provided at no cost.

7. Important information about your rights

7.1 No retaliation

Kora will not retaliate, threaten, or discriminate against you for:

• Requesting access to your information
• Filing a dispute
• Placing a Statement of Disagreement in your file
• Filing a complaint with regulatory agencies
• Asserting your rights under the FCRA

7.2 Dispute does not guarantee correction

While Kora will conduct a thorough investigation of any dispute, we may determine that disputed information is accurate. In such cases, the information will remain in your file, but you retain the right to add a Statement of Disagreement.

7.3 Third-party information

Please note that some information in your file may be obtained from third-party sources, government records, or public databases. While Kora verifies information when possible, we are not responsible for the accuracy of information provided by third parties.

8. Accessibility

This notice is available in alternative formats upon request. To request a copy in large print, Braille, or electronic format, please contact us.

9. General notice of FCRA rights

You have rights under the Fair Credit Reporting Act:

• You have the right to know what information is in your file
• You have the right to dispute inaccurate information
• You have the right to have inaccurate information corrected or deleted
• You have the right to receive a copy of any adverse action notice
• You have the right to know who has accessed your information
• You have the right to place fraud alerts and security freezes on your file
• You have the right to opt out of prescreened offers
• You have the right to sue for violations of the FCRA

For more information about your FCRA rights, visit the Federal Trade Commission website at www.ftc.gov/credit or call 1-877-438-4338.

10. Definitions

“Accurate Information” — Information that is substantially correct and not misleading, based on reasonable investigation by Kora.

“Adverse Action” — A decision to deny, increase the cost of, or restrict credit, employment, housing, insurance, or any other benefit based in whole or in part on information in your file.

“Dispute” — A written challenge to the accuracy, completeness, or relevance of information in your file.

“Inaccurate Information” — Information in your file that is incorrect, incomplete, or misleading based on available evidence.

“Reinvestigation” — A second investigation conducted following an initial dispute investigation, typically when you provide additional information or dispute findings.

“Statement of Disagreement” — A statement you place in your file that indicates you disagree with Kora’s findings regarding a disputed item.

11. Contact for questions

If you have questions about this notice or your rights, please contact Kora:

This notice is provided in accordance with the Fair Credit Reporting Act, 15 U.S.C. § 1681 et seq.