PRIVACY NOTICE

Last Revised: August 3, 2026

ONLINE PRIVACY FOR BUSINESS CUSTOMERS

1. Introduction and Scope

This Privacy Notice describes how we collect and use your personal information in relation to Nowcom websites, applications, products, services, events, and experiences that reference this Privacy Notice (together, “Nowcom Services”).

This Privacy Notice does not apply to the “content” processed, stored, or hosted by our customers using Nowcom Services in connection with an Account (an “Account” means the account you or your organization creates to access and use Nowcom Services). This Privacy Notice also does not apply to any products, services, websites, or content offered by third parties or which have their own privacy notice.

This Privacy Notice is provided by Nowcom, LLC, with headquarters at 4751 Wilshire Blvd., Suite 115, Los Angeles, CA 90010, and utilizing the trademarks, service marks, or d/b/a of DealerCenter® and CarZing® (“Nowcom,” “we,” “us,” or “our”).

One notice, two kinds of relationships. Nowcom provides dealership management software and related services to business customers, and online auto financing prequalification and related services to consumers. This Privacy Notice applies to both. All sections of this Privacy Notice apply to everyone who uses Nowcom Services, with one addition: if you interacted with Nowcom for products or services which are to be used primarily for personal, family, or household purposes, the Consumer Financial Privacy Notice in Section 7 also applies to you. It describes your rights under federal law to limit some of our sharing of your information. If anything in this Privacy Notice conflicts with Section 7 as it applies to your nonpublic personal information, Section 7 controls. If you interacted with Nowcom for products or services which are to be used primarily for business purposes, Section 7 does not apply to you.

2. Personal Information We Collect

We collect your personal information in the course of providing Nowcom Services to you. Personal information means personally identifiable information such as information you provide via forms, surveys, applications or other online fields including name, postal or email addresses, telephone, fax or mobile numbers, or account numbers.

If you are a consumer, the types of personal information we collect and share depend on how you interact online with us, and can also include Social Security number and income, account balances and payment history, credit history and credit scores, contact and identity data, demographic data, device data, online and mobile activity data, marketing data, and communications data. The Consumer Financial Privacy Notice in Section 7 describes this information and your choices.

Here are the types of information we gather:

Information You Give Us

We collect any information you provide in relation to Nowcom Services. You provide information to us when you:

• communicate with us by phone, email, or otherwise
• use our software, mobile applications, websites, or other electronic services
• search for, subscribe, or purchase Nowcom Services
• prequalify for a loan, perform transactions, or request a credit report
• create or administer your Account
• complete a support ticket, questionnaire, or other information request form
• post on Nowcom websites or participate in community features.

Automatic Information

We automatically collect certain types of information when you interact with Nowcom Services. Examples of the information we automatically collect include:

• computer and device information, such as application or browser type and version, browser plug-in type and version, operating system, time zone settings, and device version and type
• the location of your device or computer
• authentication and security credential information
• content interaction information, such as downloads, page views (including interaction such as scrolling, clicks, and mouse-overs), Service usage, occurrences of technical errors, diagnostic reports, your settings preferences, API calls, and other logs
• email addresses and phone numbers used to contact us
• identifiers and information contained in cookies.

Information from Other Sources

We might collect information about you from other sources, including service providers, partners, and publicly available sources, as well as credit bureaus, affiliates, or other companies. Examples of information we receive from other sources include:

• subscription, purchase, support, or other information about your interactions with products and services offered by us from our affiliates or third parties
• marketing information, including your name, email address, physical address, phone number and other similar contact information
• search results and links, including paid listings
• credit history information from credit bureaus.

Credit Information

Where we obtain or use consumer reports, credit history, or credit scores, for example in connection with financing prequalification or credit reporting services, we do so in accordance with the Fair Credit Reporting Act and other applicable law, and subject to the authorizations and disclosures provided to you at the time of collection.

3. How We Use Personal Information

We use your personal information to operate, provide, and improve Nowcom Services. Our purposes for using personal information include:

• Provide Nowcom Services: We use your personal information to provide and deliver Nowcom Services and process transactions related to Nowcom Services, including registrations, subscriptions, purchases, and payments.
• Measure, Support, and Improve Nowcom Services: We use your personal information to measure use of, analyze performance of, fix errors in, provide support for, improve, and develop Nowcom Services.
• Recommendations and Personalization: We use your personal information to recommend Nowcom Services that might be of interest to you, identify your preferences, and personalize your experience with Nowcom Services.
• Comply with Legal Obligations: In certain cases, we have a legal obligation to collect, use, or retain your personal information. For example, we collect bank account information from Subscribers of Credit Reporting Services for identity verification.
• Communicate with You: We use your personal information to communicate with you in relation to Nowcom Services via different channels (e.g., by phone, email, chat) and to respond to your requests.
• Marketing: We use your personal information to market and promote Nowcom Services. We might display interest-based ads for Nowcom Services. To learn more, please read the Interest-Based Ads disclosure in Section 4.
• Fraud and Abuse Prevention and Credit Risks: We use your personal information to prevent and detect fraud and abuse in order to protect the security of our customers, Nowcom Services, and others. We may also use scoring methods to assess and manage credit risks.
• Purposes for Which We Seek Your Consent: We may also ask for your consent to use your personal information for a specific purpose that we communicate to you.

4. Cookies, Internet Advertising, and Third Parties

Cookies

• To enable our systems to recognize your browser or device and to provide Nowcom Services to you, we use cookies. Cookies are pieces of information stored directly on the device you are using. Cookies allow us to collect information such as browser type, time spent on the Site, pages visited, language preferences, and your relationship with us. We use the information for security purposes, to facilitate navigation, to display information more effectively, to personalize/tailor your experience while engaging with us, and to recognize your device to allow your use of our online products and services. We collect statistical information about the usage of the Site in order to continually improve the design and functionality, to monitor responses to our advertisements and content, to understand how account holders and visitors use the Site and to assist us with resolving questions regarding the Site. We also utilize cookies for advertising purposes.

• Browsers and Devices: The Help feature on most browsers and devices will tell you how to prevent your browser or device from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether.

Internet Advertising and Third Parties

• Nowcom Services may include third-party advertising and links to other websites and applications. Third party advertising partners may collect information about you when you interact with their content, advertising, or services. We do not provide any personal information to advertisers or to third-party sites that serve our interest-based ads. We do not have access to or control over cookies or other features that advertisers and third party sites may use, and the information practices of these advertisers and third party websites are not covered by our Privacy Notice.

Interest-Based Ads

• We may display interest-based ads for Nowcom Services, sometimes referred to as personalized or targeted ads. Interest-based ads are shown to you based on information from activities such as your use of Nowcom Services, your visits to websites and applications that contain Nowcom content or advertising, and your interactions with our emails and other communications. As stated above, we do not provide any personal information to advertisers or to third-party sites that serve our interest-based ads. However, advertisers and other third parties may assume that users who interact with or click on an interest-based ad meet the criteria used to target the ad.

• You have choices about interest-based ads. You can opt out of interest-based advertising from participating companies through the Digital Advertising Alliance at optout.aboutads.info or the Network Advertising Initiative at optout.networkadvertising.org. On mobile devices, you can use your device settings to limit ad tracking or reset your advertising identifier. Opting out means the ads you see will be less relevant to you. It does not reduce the number of ads you see.

Browser-Based Privacy Signals

• Some browsers and browser extensions can transmit privacy preference signals to the websites you visit, such as “Do Not Track” signals and the Global Privacy Control. Our websites do not currently respond to these browser-based signals. You can exercise choices about your personal information through the methods described in this Privacy Notice, including the opt-outs described in Section 7, the cookie controls described above, and by contacting us as described in Section 16.

5. How We Share Personal Information

Information about our customers is an important part of our business and we are not in the business of selling our customers’ personal information to others. We share personal information only as described below and with affiliates that are either subject to this Privacy Notice or follow practices at least as protective as those described in this Privacy Notice.

If you are a consumer, the Consumer Financial Privacy Notice in Section 7 lists the reasons we can share your personal information and tells you whether you can limit that sharing.

• Transactions Involving Third Parties: We make available to you services and content provided by third parties for use on or through Nowcom Services. You can tell when a third party is involved in your transactions, and we share information related to those transactions with that third party. For example, you can interact with services and content from third parties using Nowcom Services and we provide those third parties information to facilitate your subscription, purchases, or support.
• Third-Party Service Providers: We employ other companies and individuals to perform functions on our behalf. Examples include: sending communications, processing payments, assessing credit and compliance risks, analyzing data, providing marketing and sales assistance (including advertising and event management), conducting customer relationship management, and providing training. These third party service providers have access to personal information needed to perform their functions, but may not use it for other purposes. Further, they must process that information in accordance with this Privacy Notice and as permitted by applicable data protection law.
• Business Transfers: As we continue to develop our business, we might sell or buy businesses or services. In such transactions, personal information generally is one of the transferred business assets but remains subject to the promises made in any pre-existing Privacy Notice (unless, of course, the individual consents otherwise). Also, in the unlikely event that Nowcom or substantially all of its assets are acquired, your information will of course be one of the transferred assets.
• Protection of Us and Others: We release account and other personal information when we believe release is appropriate to comply with the law, enforce or apply our terms and other agreements, or protect the rights, property, or security of Nowcom, our customers, or others. This includes exchanging information with other companies and organizations for fraud prevention and detection and credit risk reduction.
• At Your Option: Other than as set out above, and except as otherwise permitted or required by applicable law, you will receive notice when personal information about you might be shared with third parties, and you will have an opportunity to choose not to share the information.

6. YouTube API Services and Google User Data

Some Nowcom Services, including the YouTube Publishing feature available through DealerCenter, allow you to connect a YouTube channel so that we can publish and manage videos for you. These features use YouTube API Services. By using them, you agree to be bound by the YouTube Terms of Service. Google’s handling of your information is described in the Google Privacy Policy.

• What we access. When you authorize the connection, we receive and store the following Google user data: the OAuth access and refresh tokens that Google issues for the connection, and your YouTube channel metadata, specifically your channel name and channel URL.
• How we use it. We use this data only to authenticate calls to the YouTube API so that we can upload and manage videos on the connected YouTube channel at your direction. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
• How we share it. We do not share Google user data with third parties. It is used only internally to make YouTube API calls on your behalf. It is not used for advertising and it is not sold.
• How we protect it. OAuth tokens are encrypted at rest using AES (Rijndael) encryption. Google user data is also covered by the safeguards described in Section 8 (How We Secure Personal Information).
• Retention and deletion. Access tokens expire automatically at the interval set by Google. Refresh tokens are retained until they are revoked or replaced when you re-authenticate the connection. When you disconnect your YouTube channel from Nowcom Services, we delete the stored tokens. You can also revoke our access at any time through your Google security settings page, and you can request deletion of stored Google user data by contacting us as described in Section 16.

7. Consumer Financial Privacy Notice

This Section applies to you if you interacted with Nowcom for products or services which are to be used primarily for personal, family, or household purposes. It is our privacy notice under the Gramm-Leach-Bliley Act and is presented in the format required by federal regulators.

CONSUMER PRIVACY

FACTS	WHAT DOES NOWCOM DO WITH YOUR PERSONAL INFORMATION?
Why?	Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do.
What?	The types of personal information we collect and share depend on how you interact online with us. This information can include: •     Social Security number and income •     Account balances and payment history •     Credit history and credit scores •     Contact and identity data •     Demographic data •     Device data •     Online and mobile activity data •     Marketing data Communications data
How?	All financial companies need to share customers’ personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers’ personal information; the reasons Nowcom chooses to share; and whether you can limit this sharing.

Reasons we can share your personal information	Does Nowcom share?	Can you limit sharing?
For our everyday business purposes — such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or to request credit reports from credit bureaus	Yes	No
For our marketing purposes — with service providers we use to offer our products and services to you (please see below to limit the ways we contact you)	Yes	No
For joint marketing with other financial companies – such as to offer you insurance, financing, or other products from financial companies with which we have a joint marketing agreement	Yes	No
For our affiliates’ everyday business purposes — Information about your transactions and experiences	Yes	No
For our affiliates’ everyday business purposes — Information about your creditworthiness	Yes	Yes
For nonaffiliates to market to you — for automotive financing and vehicle interest submissions — your name, contact information, and vehicle interests, but not information about your creditworthiness.	Yes	Yes

To limit our sharing

• Call: 888-669-2669 during business hours and talk to Support • Email: compliance@nowcom.com Please note: If you are a new customer, we can begin sharing your information 30 days from the date we sent this notice, or immediately upon receiving your information if you were presented the opportunity to opt-out during the interaction with us. When you are no longer our customer, we continue to share your information as described in this notice.However, you can contact us at any time to limit our sharing.

Questions?

Call 888-669-2669 or go to www.nowcom.com

Who are we
Who is providing this notice?	Nowcom, LLC, with headquarters at 4751 Wilshire Blvd., Suite 115, Los Angeles, CA 90010, and utilizing the trademarks, service marks, or d/b/a of DealerCenter® and CarZing®.

What we do
How does Nowcom protect my personal information?	To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings. See also Section 8 (How We Secure Personal Information) of this Privacy Notice.
How does Nowcom collect my personal information?	We collect your personal information, for example, when you •     prequalify for a loan •     perform transactions •     request a credit report We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.
Why can’t I limit all sharing?	Federal law gives you the right to limit some but not all sharing related to: •     affiliates’ everyday business purposes — information about your creditworthiness •     affiliates from using your information to market to you •     nonaffiliates to market to you State laws and individual companies may give you more rights to limit sharing. See Section 14 (State-Specific Information) for your rights under state law.
What happens when I limit sharing for an account I hold jointly with someone else?	Your choices will apply to you alone unless you tell us otherwise.

Definitions
Affiliates	Companies related by common ownership or control. They can be financial and nonfinancial companies. •     Our affiliates include Westlake Services LLC, d/b/a Westlake Financial Services, Westlake Direct LLC, Western Funding Inc., Midway Rent A Car Inc., d/b/a Midway Leasing, North Hollywood Toyota, Knight Insurance Group, Credit Union Leasing of America, and Hankey Investment Company
Nonaffiliates	Companies not related by common ownership or control. They can be financial and nonfinancial companies. •     Nonaffiliates we share with can include financial services companies such as finance companies, insurance agencies, automobile dealerships, automobile manufacturers, credit reporting bureaus, nonfinancial companies such as market analysis companies, marketing companies, technology service companies, and membership groups.
Joint marketing	A formal agreement between nonaffiliated financial companies that together market financial products or services to you. .•     Our joint marketing partners include financial service companies, automobile dealerships, automobile manufacturers

Other important information
Where to find it	For the Nowcom Do Not Call Policy and call monitoring and recording disclosures, see Section 13 of this Privacy Notice. For information for Nevada, Vermont, and California residents, see Section 14 of this Privacy Notice.

8. How We Secure Personal Information

We design our systems with your security and privacy in mind. To protect your personal information from unauthorized access and use, we use security measures that comply with federal law.

• We maintain a wide variety of compliance programs that validate our security controls.
• We protect the security of your information during transmission to or from Nowcom Services by using encryption protocols and software.
• We follow the Payment Card Industry Data Security Standard (PCI DSS) when handling credit card data.
• We maintain physical, electronic, and procedural safeguards in connection with the collection, storage, and disclosure of personal information. These measures include computer safeguards and secured files and buildings. Our security procedures mean that we may request proof of identity before we disclose personal information to you.

9. Location of Personal Information

Nowcom is located in the United States, and our affiliated companies are located throughout the world. Depending on the scope of your interactions with Nowcom Services, your personal information may be stored in or accessed from multiple countries, including the United States. Whenever we transfer personal information to other jurisdictions, we will ensure that the information is transferred in accordance with this Privacy Notice and as permitted by applicable data protection laws.

While using our mobile applications, personal information, including data, images, and files, will be transferred from your mobile device to our systems over a secured network connection and may be shared in accordance with this Privacy Notice.

While using our web applications, personal information, including data, images, and files, will be transferred from your internet connected device to our systems over a secured network connection and may be shared in accordance with this Privacy Notice.

10. Your Access and Choices

You can view, update, and delete certain information about your account and your interactions with Nowcom Services. If you cannot access or update your information yourself, you can always contact us for assistance.

Examples of information you can access through Nowcom Services include:

• your name, email address, physical address, phone number, and other similar contact information
• usernames, roles, and other authentication and security credential information
• your subscription, purchase, usage, billing, and payment history.

You have choices about the collection and use of your personal information. Many Nowcom Services include settings that provide you with options as to how your information is being used. You can choose not to provide certain information, but then you might not be able to take advantage of certain Nowcom Services.

• Account Information: If you want to add, update, or delete information related to your Account, please go to the administration or settings section of the Nowcom Service. When you update or delete any information, we usually keep a copy of the prior version for our records.
• Communications: If you do not want to receive promotional messages from us, please unsubscribe or adjust your communication preferences in the Nowcom Service. If you do not want to receive in-app notifications from us, please adjust your notification settings in the app or your device.
• Consumer opt-outs: If you are a consumer, you can limit certain sharing of your information as described in Section 7 (To limit our sharing).

11. Children’s Personal Information

Nowcom Services are not intended for or directed to anyone under the age of 18, and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from someone under 18, we will delete that information promptly in accordance with applicable law. If you believe that someone under 18 has provided personal information to us, please contact us as described in Section 16.

12. Retention of Personal Information

We keep your personal information to enable your continued use of Nowcom Services, for as long as it is required in order to fulfill the relevant purposes described in this Privacy Notice, as may be required by law (including for tax and accounting purposes), or as otherwise communicated to you. How long we retain specific personal information varies depending on the purpose for its use, and we will delete your personal information in accordance with applicable law.

13. Telephone Communications

Do Not Call Policy. This notice is the Nowcom Do Not Call Policy under the Telephone Consumer Protection Act. We do not solicit via telephone numbers listed on the state or federal Do Not Call lists, unless the law allows. Nowcom employees receive training on how to document and process telephone marketing choices. Consumers who ask not to receive telephone solicitations from Nowcom will be placed on the Nowcom Do Not Call list and will not be called in any future campaigns.

Call Monitoring and Recording. If you communicate with us by telephone, we may monitor or record the call.

Text Messaging. With your consent where required by law, we and our service providers may send you text (SMS/MMS) messages. These may include transactional and service messages about your Account, transactions, or requests, and, if you have opted in, marketing messages. Message frequency varies, and message and data rates may apply. You can opt out of marketing text messages at any time by replying STOP to any message, and you can get help by replying HELP or by contacting us as described in Section 16. Opting out of marketing texts will not stop transactional or service messages. Consent to receive marketing texts is not a condition of purchasing any Nowcom Services.

14. State-Specific Information

For Nevada residents only. We are providing you this notice under state law. You may be placed on our internal Do Not Call List by following the directions in the “To limit our sharing” section of the Consumer Financial Privacy Notice in Section 7. Nevada law requires we provide the following contact information: Bureau of Consumer Protection, Office of the Nevada Attorney General, 555 E. Washington St., Suite 3900, Las Vegas, NV 89101. Phone number: 702.486.3132. Email: aginfo@ag.nv.gov. You can also contact us: Nowcom, LLC, 4751 Wilshire Blvd., Suite 115, Los Angeles, CA 90010. Phone number: 888-669-2669. Email: compliance@nowcom.com.

Nevada residents also have the right under Nevada law to direct a website operator not to sell certain covered information the operator collects through its websites. We do not sell covered information as defined by Nevada law. Nevada residents may nevertheless submit an opt-out request by emailing compliance@nowcom.com with the subject line “Nevada Opt-Out Request,” and if our practices change we will honor previously submitted verified requests.

Vermont. Under Vermont law, we will not share information we collect about Vermont residents with companies outside of our corporate family, unless the law allows. For example, we may share information with your consent, to service your accounts or under joint marketing agreements with other financial institutions with which we have joint marketing agreements. We will not share information about your creditworthiness within our corporate family except with your consent, but we may share information about our transactions or experiences with you within our corporate family without your consent.

California. Under California law, we will not share information we collect about you with third parties for the third parties’ direct marketing purposes if you have exercised an option that prevents that information from being disclosed to third parties for those purposes. You may exercise such an option by following the directions of this Privacy Notice. In accordance with California law, we will not share information we collect about you with companies outside of the Nowcom family of companies, unless the law allows. For example, we may share information with your consent, to service or audit or fund your accounts, or to provide benefits you are entitled to. We will limit sharing among our companies to the extent required by California law. California residents, see the Privacy Notice for California Residents.

Your State Privacy Rights

A number of states have comprehensive privacy laws that give their residents rights over personal information. These laws generally do not apply to nonpublic personal information that we collect and process subject to the Gramm-Leach-Bliley Act, or to information subject to the Fair Credit Reporting Act. Those categories, which make up much of the information we handle, are instead governed by the federal laws described in this Privacy Notice, including the Consumer Financial Privacy Notice in Section 7. For personal information that is covered by your state’s privacy law, and depending on your state of residence, you may have the right to:

• confirm whether we process your personal information and access a copy of it, including in a portable format
• correct inaccuracies in your personal information
• delete personal information you provided to us or that we obtained about you
• opt out of the processing of your personal information for purposes of targeted advertising, the sale of personal information, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

To exercise these rights, call 888-669-2669, email compliance@nowcom.com, or write to Nowcom, LLC, Attn: Privacy, 4751 Wilshire Blvd., Suite 115, Los Angeles, CA 90010. We will verify your request using information associated with your account or your prior interactions with us, and we may request additional information if needed to verify your identity. Where permitted by your state’s law, an authorized agent may submit a request on your behalf with proof of your authorization. We will respond within the time required by applicable law. If we decline to act on your request, we will explain our reasons and tell you how to appeal our decision. If your appeal is unsuccessful, you may contact your state attorney general. We will not discriminate against you for exercising any of these rights.

15. Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our practices, technologies, legal requirements, or Nowcom Services. The most current version will always be posted on our websites with its effective date shown at the top. If we make material changes, we will notify you before the changes take effect as required by applicable law, which may include posting a prominent announcement on our websites or contacting you directly. Your continued use of Nowcom Services after the effective date of an updated Privacy Notice means the updated notice applies to you. We encourage you to review this Privacy Notice periodically.

16. How to Contact Us

If you have questions about this Privacy Notice, or wish to exercise any of the choices described in it, you can reach us at:

• Call: 888-669-2669 during business hours
• Email: compliance@nowcom.com
• Mail: Nowcom, LLC, 4751 Wilshire Blvd., Suite 115, Los Angeles, CA 90010
• Online: www.nowcom.com

REV. 7/28/2026 (supersedes Rev. 1/25/2023)