USA PATRIOT Act Disclosure

Important Information About Opening an Account

To help the government fight the funding of terrorism and money laundering activities, federal law requires all financial institutions to obtain, verify, and record information that identifies each person who opens an account. ShapeCard cards are issued by our bank partner, and ShapeCard collects and verifies this information on the bank's behalf. This notice applies to every ShapeCard account, whether it holds a debit card or a credit card, and explains what we collect, how we use it, and your rights in connection with the customer identification program.

Information We Require

When you open a ShapeCard account, or approve on an account for someone else, we are required to collect the following information:

• Full legal name
• Current residential address
• Date of birth
• Social Security Number (SSN) or Individual Taxpayer Identification Number (ITIN)
• In some cases, a copy of a valid government issued photo identification document or other documents that verify your identity

Verification Process

ShapeCard will verify the information you provide using one or more of the following methods. We may compare it with records held by identity verification services and consumer reporting agencies, solely to confirm who you are. We may also check government databases, including those maintained by the U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC), to screen for prohibited individuals or entities, and we may reference publicly available records and other reliable third party sources. Identity verification does not review your creditworthiness. If you apply for a credit card, the separate Credit Report Authorization explains that review.

Record Keeping

ShapeCard is required by law to maintain records of the information collected during the customer identification process. We will retain copies of identification documents and verification records for the duration prescribed by applicable federal regulations. These records may be used to fulfill legal obligations, respond to regulatory inquiries, or support law enforcement requests as permitted or required by law.

Privacy Protection

The information we collect under our customer identification program is used solely for the purpose of verifying your identity and complying with the USA PATRIOT Act and related federal requirements. ShapeCard does not sell, rent, or otherwise share this information with unaffiliated third parties for marketing or commercial purposes. Your data is handled in accordance with ShapeCard's Privacy Policy and all applicable federal and state privacy laws.

Application Denial

ShapeCard and our bank partner may decline an application for any ShapeCard account in certain circumstances, including but not limited to:

• Inability to verify the applicant's identity through available sources
• Identification of unacceptable risk based on regulatory or compliance screening
• Submission of false, inaccurate, or misleading information
• Applicant appearing on OFAC sanctions lists or other government watch lists

Contact Information

If you have questions about our customer identification program or this disclosure, please contact ShapeCard support at support@shapecard.ai. Our team is available to help with any question about the verification process or your application status.