Effective as of January 1, 2020Last updated February 27, 2025
INTRODUCTION
The Savings Group, Inc. and its subsidiaries, including those operating under the brands AUTOPAY, RateGenius, and Tresl (“we,” “our,” or “us”) respect the privacy of your information. This Privacy Policy is designed to assist you in understanding how we collect, use, share and safeguard your information. This Privacy Policy applies to individuals who access our websites (collectively, “Sites”) and the services provided through our Sites (collectively, “Services”). From time to time, we may change this Privacy Policy. If we do, we will post an amended version on this webpage. Please review this Privacy Policy periodically.
This Privacy Policy covers the following topics:
We collect personal data from you through your use of the Sites and Services. Personal data is information that is linked or reasonably linkable to an identified or identifiable individual. We collect the following types of personal data:
Personal Data You Provide
Depending on how you interact with our Sites and Services, we will collect the following personal data that you voluntarily provide to us for the following purposes:
Apply Now. When you apply to refinance your auto loan, you will provide us with Personally Identifiable Information such as your first and last name, telephone number, email address, and physical address. You also will provide us with information relating to your vehicle (such as its year, make, model, trim, and estimated number of miles), information relating to your current loan (such as the name of your current auto lender and current monthly auto payment), information relating to your current residence (such as the type of residence and your monthly payment), information regarding your employment and income, and your date of birth. You also may voluntarily agree to provide us with your Social Security number. If you respond to an offer in the mail to refinance your auto loan, you will provide your pre-qualification code and zip code.
Loan Finder. If you choose to try our loan finder service, you will provide us with your credit score, zip code, and information relating to your current loan (such as current monthly auto payment, remaining loan balance, and your remaining loan term).
Prequalification. When you explore your options with our “Get Prequalified” you will provide us with Personally Identifiable Information such as your first and last name and physical address. You also will provide us with other information such as your date of birth, yearly income, monthly vehicle payments, and vehicle year.
Check Status. When you check the status of your loan application, you will provide us with your name, email address, date of birth, and last four digits of your Social Security number.
Create an Account. If you create an account through one of our Sites, you (and your co-applicant, if applicable) will provide us with your name, email address, phone number, physical address, date of birth, and gross annual income. You will also provide us with information relating to your vehicle (such as its year, make, model, trim, estimated number of miles, and estimated payoff amount).
Sign In. When you sign into your account, you will provide us with your login credentials.
Careers. If you apply for a job through one of our Sites, you will provide your last name, email address, phone number, employment history, education history, and any other information you choose to include. Our careers page is provided by JazzHR. JazzHR may collect, record, and store the information you provide in your application. Please review JazzHR’s privacy policy here
Refinancing Chat. If you engage with the RateGenius or AUTOPAY chat feature, you will provide your name, email address, phone number, and zip code, and any information you choose to provide in your message. Our RateGenius chat feature is provided by LiveChat and our AUTOPAY chat feature is provided by Podium. LiveChat and Podium may collect, record, and store the information you provide in the chat. Please review LiveChat’s privacy policy here and Podium’s privacy policy here.
Contact Us. If you contact us through the Sites, we may collect your name, email address, and telephone number along with any other Personally Identifiable Information you voluntarily provide.
Interact with our Sites or Services. When you send us any feedback, questions, comments, suggestions, ideas, or interact with us in any way, you may need to provide us with your log-in information, name and/or email address.
SMS Text/Phone Communications. We do not share SMS consent or phone numbers for the purpose of SMS.
Information as You Navigate Our Sites
We automatically collect certain personal data through your use of the Sites and our use of cookies and other tracking technologies, such as the following:
Usage Information. For example, the pages on the Sites you access, the frequency of access, and what you click on while on the Sites.
Device Information. For example, hardware model, operating system, application version number, and browser.
Mobile Device Information. Aggregated information about whether the Sites are accessed via a mobile device or tablet, the device type, and the carrier.
Location Information. Location information from Site visitors on a city-regional basis.
To learn more about how we use cookies and to manage your cookie settings, please see our Cookie Policy in Section 9 below.
Personal Data We Collect About You from Other Sources
In some cases, we may receive personal data about you from other sources. This includes from Experian, TransUnion, and Equifax, and identity verification providers, advertising networks, internet service providers, operating systems and platforms, social networks, and lead providers.
2. HOW WE USE YOUR PERSONAL DATA
In addition to the purposes stated above, we may use all the personal data we collect in accordance with applicable law such as to: Find you loan options from our lender base;
Maintain and improve our Sites and Services;
Protect the security and integrity of our Sites and Services;
Investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or violations of our Terms of Use, and to otherwise fulfill our legal obligations;
Monitor compliance with and enforce this Privacy Policy and any other applicable agreements and policies;
Defend our legal rights and the rights of others;
Fulfill any other purposes for which you provide it;
For any purpose that is reasonably necessary to or compatible with the original purpose for which we collected the personal data as disclosed to you; and
Comply with applicable law.
3. HOW WE SHARE YOUR PERSONAL DATA
We may share the personal data that we collect about you in the following ways:
Us and our Affiliates. With subsidiaries and affiliates, who adhere to this Privacy Policy.
Lenders. Once you have submitted an application, we will begin the process of finding you a loan, if qualified, from our lender base of over 200 financial institutions. Your personal data is not sent to each lender in our network for review. Instead, your credit profile and needs are matched to the borrower profile established by our lenders and sent to those lenders first. By submitting an application, you consent to the use of your credit report for the purpose of obtaining a credit offer from one of our participating lenders.
To Comply with the Law. To comply with the law, including disclosure to law enforcement agencies and other government agencies and disclosure responsive to subpoenas. We also may disclose information we collect if we deem it necessary to protect the rights, property, or safety of us, our customers or others; in connection with any legal proceedings or prospective legal proceedings; and to any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal data where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal data.
Vendors. To vendors who perform services on our behalf (e.g., loan service providers, maintenance, analysis, backup, etc.).
Advertising. To vendors to prepare, deploy, and analyze advertising content.
Business Transactions. With any other person or entity as part of any business or asset sale, equity transaction, merger, acquisition, bankruptcy, liquidation, or similar proceeding, or in preparation for any of these events.
Consent. With any other person or entity where you consent to the disclosure.
Other Purposes. For any other purpose disclosed by us when you provide the information or for any other purpose we deem necessary, including to protect the health or safety of others.
4. UNIVERSAL OPT-OUT MECHANISMS
The Sites recognize the Global Privacy Control (“GPC”) signal. If you are using a browser setting or plug-in that sends an opt-out preference signal to each website you visit, we will treat that as a valid request to opt out. To download and use a browser supporting the GPC browser signal, click here: https://globalprivacycontrol.org/orgs. . If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use.
Some internet browsers incorporate a “Do Not Track” feature that signals to websites you visit that you do not want to have your online activity tracked. Given that there is not a uniform way that browsers communicate the “Do Not Track” signal, the Sites do not currently interpret, respond to or alter their practices when they receive “Do Not Track” signals.
5. SECURITY
We maintain commercially reasonable security measures to protect the personal data we collect and store from loss, misuse, destruction, or unauthorized access. However, no security measure or modality of data transmission over the Internet is 100% secure. Although we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security.
6. THIRD-PARTY LINKS
The Sites may contain links that will let you leave the Sites and access another website. Linked websites are not under our control. We accept no responsibility or liability for these other websites.
7. CHILDREN’S PRIVACY
The Sites are not intended for children under 13 years of age. We do not knowingly collect, use, or disclose personal information from children under 13.
8. YOUR STATE PRIVACY RIGHTS AND ADDITIONAL DISCLOSURES
Depending on the state in which you reside, you may have certain privacy rights regarding your personal data. If you are a California resident, please see our “NOTICE TO CALIFORNIA RESIDENTS” section below. For other state residents, your privacy rights may include (if applicable):
The right to confirm whether or not we are processing your personal data and to access such personal data;
The right to obtain a copy of your personal data that we collected from and/or about you in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another controller without hindrance, where the processing is carried out by automated means;
The right to delete personal data that we collected from and/or about you, subject to certain exceptions;
The right to correct inaccurate personal data that we maintain about you, subject to certain exceptions;;
The right, if applicable, to opt out of the processing of your personal data for purposes of (1) targeted advertising; (2) the “sale” of your personal data (as that term is defined by applicable law); and (3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you;
If we are required by applicable law to obtain your consent to process sensitive personal data, the right to withdraw your consent; and
The right not to receive discriminatory treatment by us for the exercise of your privacy rights.
We use cookies and other tracking technologies to display advertisements about our products to you on nonaffiliated websites, applications, and online services. This is “targeted advertising” under applicable privacy laws. When we engage in those activities, we sell personal data (i.e., information from cookies) to third-party advertisers and analytics companies. We do not use personal data for profiling in furtherance of decisions that produce legal or similarly significant effects concerning individuals.
To exercise your rights, please submit a request through our interactive webform available here, by emailing us at privacy@thesavingsgroup.com, or by calling us at (844) 276-3272. If legally required, we will comply with your request upon verification of your identity and, to the extent applicable, the identity of the individual on whose behalf you are making such request. To do so, we will ask you to verify data points based on information we have in our records. If you are submitting a request on behalf of another individual, please use the same contact methods described above. If we refuse to take action regarding your request, you may appeal our decision by emailing us at privacy@thesavingsgroup.com or by calling us at (844) 276-3272. If you would like to opt out of targeted advertising, you may alter your cookie preferences see our Cookie policy below.
9. COOKIE POLICY
This Cookie Policy covers the following topics:
COOKIES AND ONLINE TRACKING TECHNOLOGIES WE USE
HOW YOU CAN MANAGE COOKIES
HOW TO CONTACT US
1. COOKIES AND ONLINE TRACKING TECHNOLOGIES WE USE
“Cookies” are small files of information that are stored by your web browser software on your computer hard drive, mobile or other devices (e.g., smartphones or tablets). We may use the following types of Cookies:
Strictly Necessary Cookies
These Cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these Cookies, but some parts of the Sites will not then work. These Cookies do not store any personally identifiable information.
Performance Cookies
These Cookies allow us to count visits and traffic sources so we can measure and improve the performance of our Sites. They help us to know which pages are the most and least popular and see how visitors move around the Sites. If you do not allow these Cookies we will not know when you have visited our Sites and will not be able to monitor its performance.
We use Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses Cookies or other tracking technologies to help us analyze how users interact with the Site and Services, compile reports on their activity, and provide other services related to their activity and usage. The technologies used by Google may collect information such as your IP address, time of visit, whether you are a returning visitor, and any referring website. The information generated by Google Analytics will be transmitted to and stored by Google and will be subject to Google’s link privacy policies. To learn more about Google’s partner services and to learn how to opt-out of tracking of analytics by Google, click here.
We use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g., how much time they spend on which pages, which links they choose to click, what users do and do not like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices. This includes a device’s IP address (captured and stored only in anonymized form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and preferred language used to display our Site. Hotjar stores this information in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf. For further details, please see Hotjar’s privacy policy. You can opt-out to the creation of a user profile, Hotjar’s storing of data about your usage of our Site and Hotjar’s use of tracking cookies on other websites by following the directions found here.
We use Microsoft Clarity to understand how users interact with our Site. Microsoft may collect personal information from individuals visiting our Site. Microsoft’s privacy policy is available here.
We may use Cookies and similar technologies third-party vendors provide to collect information on user behavior (e.g., screens and pages visited, buttons and links clicked, limited information entered, and user taps and mouse movements). This information enables us to monitor and improve the user experience.
Functional Cookies
These Cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these Cookies, then some or all of the Services may not function properly.
Targeting Cookies
These Cookies may be set through our Site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant advertisements on other websites. If you do not allow these Cookies, you will experience less targeted advertising.
Social Media Cookies
These Cookies are set by a range of social media services that we have added to the Sites to enable you to share our content with your friends and networks. They are capable of tracking your browser across other websites and building a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these Cookies, you may not be able to use or see these sharing tools.
Sample Cookies
Please note that our use of Cookies may change from time to time. However, here are a few examples of our cookies.
Host
Cookies
Cookies Used
Mytresl.com
__cf_bm
First party
Rategenius.com
_vis_opt_s
First party
Autopay.com
__cf_bm
First party
2. HOW YOU CAN MANAGE COOKIES
Cookies can be blocked by changing your Internet browser settings to refuse all or some Cookies. If you choose to block all Cookies (including essential Cookies) you may not be able to access all or parts of the Sites. You can find out more about Cookies and how to manage them by visiting www.AllAboutCookies.org.
Platform Controls
You can opt out of Cookies set by specific entities by following the instructions found at these links:
Advertising Industry Resources
You can understand which entities have currently enabled Cookies for your browser or mobile device and how to opt-out of some of those Cookies by accessing the Network Advertising Initiative’s website or the Digital Advertising Alliance’s website. For more information on mobile specific opt-out choices, visit the Network Advertising Initiative’s Mobile Choices website.
Please note that these opt-out mechanisms are specific to the device or browser on which they are exercised. Therefore, you will need to opt out on every browser and device that you use.
3. HOW TO CONTACT US
To contact us for questions or concerns about our privacy policies or practices please email privacy@thesavingsgroup.com or call (844) 276-3272.
10. NOTICE TO CALIFORNIA RESIDENTS
The California Consumer Privacy Act, as amended by the California Privacy Rights Act of 2020 (“CCPA”), requires that we provide California residents with a privacy policy that contains a comprehensive description of our online and offline practices regarding the collection, use, disclosure, sale, sharing, and retention of personal information and of the rights of California residents regarding their personal information. This section of the Privacy Policy is intended solely for, and is applicable only as to, California residents. If you are not a California resident, this section does not apply to you and you should not rely on it.
The CCPA defines “personal information” to mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. Personal information does not include information publicly available, deidentified or aggregated information. For purposes of this “NOTICE TO CALIFORNIA RESIDENTS” section we will refer to this information as “Personal Information.”
Notice at Collection of Personal Information
We currently collect and, in the 12 months prior to the last updated date of this Privacy Policy, have collected the following categories of Personal Information:
Characteristics of protected classifications under California or federal law (age (40 and older))
Commercial information (records of personal property, products or services purchased, obtained, or considered; other purchasing or consuming histories or tendencies; or other commercial information)
Internet or other electronic network activity information (browsing history; search history; and information regarding consumer’s interaction with website, application or advertisement)
Geolocation data
Professional or employment-related information (including employment history)
Education information
We collect Personal Information directly from California residents and from Experian, TransUnion, and Equifax, and identity verification providers, advertising networks, internet service providers, operating systems and platforms, social networks, and lead providers. We do not collect all categories of Personal Information from each source.
In addition to the purposes stated above in the section “HOW WE USE YOUR PERSONAL DATA” we currently collect and have collected the above categories of Personal Information for the following business or commercial purposes:
Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
Helping to ensure security and integrity to the extent the use of your Personal Information is reasonably necessary and proportionate for these purposes
Debugging to identify and repair errors that impair existing intended functionality
Short-term, transient use, including, but not limited to, nonpersonalized advertising shown as part of your current interaction with us, provided that your Personal Information is not disclosed to another third party and is not used to build a profile about you or otherwise alter your experience outside the current interaction with us
Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, providing financing, or providing similar services
Undertaking internal research for technological development and demonstration
Undertaking activities to verify or maintain the quality or safety of a service or enhance the service
Advancing our commercial or economic interests, such as by inducing another person to buy, rent, lease, join, subscribe to, provide, or exchange products, goods, property, information, or services, or enabling or effecting, directly or indirectly, a commercial transaction
Notice at Collection of Personal Information
The following table identifies the categories of Personal Information that we sold or shared to third parties in the 12 months preceding the last updated date of this Privacy Policy and, for each category, the category of third parties to whom the Personal Information was sold or disclosed:
Category of Personal Information
Categories of Third Parties
Identifiers (IP address)
Data analytics providers; advertising networks
Unique personal identifiers (device identifier; cookies, beacons, pixel tags, mobile ad identifiers, or other similar technology; customer number, unique pseudonym or user alias; telephone numbers, or other forms of persistent or probabilistic identifiers that can be used to identify a particular consumer or device)
Data analytics providers, advertising networks
We sold or shared Personal Information to third parties to advance our commercial and economic interests.
The following table identifies the categories of Personal Information that we disclosed for a business purpose in the 12 months preceding the last updated date of this Privacy Policy and, for each category, the categories of recipients to whom we disclosed Personal Information.
Category of Personal Information
Categories of Recipients
Identifiers (name, email address, telephone number, and postal address)
Unique personal identifiers (device identifier; cookies, beacons, pixel tags, mobile ad identifiers, or other similar technology; customer number, unique pseudonym or user alias; telephone numbers, or other forms of persistent or probabilistic identifiers that can be used to identify a particular consumer or device)
Cloud hosting providers
Internet Protocol address
Cloud hosting providers
Social Security number
Credit bureaus, lenders, cloud hosting providers
Personal information described in California’s Customer Records statute (California Civil Code § 1798.80(e)) (bank account number, credit card number, debit card number, or any other financial information)
We disclosed Personal Information for the following business or commercial purposes:
Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, providing financing, or providing similar services
Undertaking activities to verify or maintain the quality or safety of a service and to improve, upgrade, or enhance the service
Advancing our commercial or economic interests, such as by inducing another person to buy, rent, lease, join, subscribe to, provide, or exchange products, goods, property, information, or services, or enabling or effecting, directly or indirectly, a commercial transaction
In addition, when you apply for a loan using our Services, you must agree to our Terms of Use, in which you will consent to the disclosure of your Personal Information to other entities, such as financial institutions, as part of your application process. In so doing, you are directing us to intentionally disclose your personal information and using us to intentionally interact with third parties. If you do not consent to these transfers, do not use our Services.
We do not collect, sell, or share the Personal Information of minors under 16 years of age. We do not use sensitive Personal Information for purposes other than those allowed by the CCPA and its regulations.
Retention of Personal Information
We retain your Personal Information for as long as necessary to fulfill the purposes for which we collect it, such as to provide you with the service you have requested, and for the purpose of satisfying any legal, accounting, contractual, or reporting requirements that apply to us.
Your Rights
If you are a California resident, you have the following rights with respect to your Personal Information:
Specific pieces of Personal Information that we have collected about you;
Categories of Personal Information that we have collected about you;
Categories of sources from which the Personal Information was collected;
Categories of Personal Information that we sold (if applicable) or disclosed for a business purpose about you;
Categories of third parties to whom the Personal Information was sold (if applicable) or disclosed for a business purpose; and
The business or commercial purpose for collecting or, if applicable, selling Personal Information.
How to Submit a Request to Know, Delete, and/or Correct
You may submit a request to know or delete by completing our online request form available here, emailing
ccpa@thesavingsgroup.com, or by calling us at (844) 276-3272. If you submit a request to delete online, you may be asked to confirm separately that you want your Personal Information deleted.
If you are submitting a request on behalf of a California resident, please submit the request through one of the designated methods discussed above. After submitting the request, we will require additional information to verify your authority to act on behalf of the California resident.
Our Process for Verifying a Request to Know, Delete, and/or Correct
We will comply with your request upon verification of your identity and, to the extent applicable, the identity of the California resident on whose behalf you are making such request.
We will verify your identity either to a “reasonable degree of certainty” or a “reasonably high degree of certainty” depending on the sensitivity of the Personal Information and the risk of harm to you by unauthorized disclosure, deletion, or correction as applicable. To do so, we will ask you to verify data points based on information we have in our records concerning you.
Right to Opt-Out of Sale of Personal Information
If you are a California resident, you have the right to direct us to stop selling your Personal Information.
You may submit a request to opt out of sales or sharing through our use of cookies by clicking review Section 9 above here. If you have enabled privacy controls on your browser (such as a plugin), we will also treat that as a valid request to opt out. Please see the “UNIVERSAL OPT-OUT MECHANISMS” section above for more information. In addition, you may submit a request to opt out of sales with third parties through our interactive webform available here or by emailing us at ccpa@thesavingsgroup.com.
Notice of Financial Incentive
From time to time, you may have the opportunity to provide Personal Information in exchange for discounts and price differences. For example, we provide discounts and price differences if you refer your friends. Categories of Personal Information that we may collect when you join our referral program include your name, email address, and phone number.
How to Opt-In and Right to Withdraw
Signing up for discounts and price differences is optional. By providing your name, email address, and phone number during the sign-up process, you affirmatively opt in to receiving the financial incentive and to joining our referral program. You have the right to withdraw from the financial incentive at any time. If you opt out of receiving a financial incentive, we will not reduce the value of any financial incentives you previously received from us. If you wish to withdraw from receiving the financial incentive, you may submit such a request at any time by emailing us at ccpa@thesavingsgroup.com.
How the Financial Incentive is Reasonably Related to the Value of Your Personal Information
The financial incentive or price difference is reasonably related to the value provided by your Personal Information. We take into consideration, without limitation, the anticipated revenue generated from such information, the anticipated expenses which we might incur in the collection, storage, and use of such information, and the anticipated expenses which we might incur related to the offer, provision, and imposition of any financial incentive or price difference. Based on this analysis, the value of your Personal Information that allows us to make these offers and financial incentives is the value of the offer itself.
Shine the Light Law
If you are a California resident and have an established business relationship with us, California Civil Code § 1798.83 permits you to request information regarding the disclosure of your personal information by us to third parties for the third parties’ direct marketing purposes (as those terms are defined in that statute). To make such a request, please send an email to ccpa@thesavingsgroup.com or write to us at 9300 United Drive, Ste 180, Austin, Texas 78758.
11. ACCESSIBILITY
We are committed to ensuring this Privacy Policy is accessible to individuals with disabilities. If you wish to access this Privacy Policy in an alternative format, please contact us as described below.
12. HOW TO CONTACT US
To contact us for questions or concerns about our privacy policies or practices please call RateGenius at 866-728-3436; AUTOPAY at 844-276-3272; Tresl at 866-504-3272 or email us at privacy@thesavingsgroup.com.