WPCU® Online Privacy Policy

Last modified: October 14, 2025

Introduction

Wright-Patt Credit Union, Inc., together with its subsidiaries and affiliates (collectively “Credit Union”, “we”, “us” or “our”), strives to serve your needs and to protect your identity and information we collect about you while providing you services. This Online Privacy Policy is an addendum to our general Privacy Policy, and:

addresses our privacy practices to render online services when you visit any mobile or online Site or application that we own, including but not limited to, our public website (WPCU.coop) and our mobile apps (Wright-Patt CU Mobile Banking, aka WPCU Mobile Banking) and (WPCU Treasury Management) (each a “Site,” and collectively, the “Sites”);
describes the categories of personally identifiable information (“Personal Information”) that we may collect about you when you visit or interact with us or our Sites;
describes our texting policy;
describes the categories of other entities with whom we may share your Personal Information;
discloses whether other parties may collect Personal Information about your online activities over time and across different websites when you use our Sites;
describes the way you can review and request changes to any of your Personal Information we collect;
describes how we will inform you of important changes to our Online Privacy Policy;
discloses how we respond to web browser “do not track” signals or other opt-out mechanisms;
describes how we safeguard children’s privacy;
makes clear that no action on your part is needed; and
links to a California-specific description of consumers’ privacy rights.

Please also refer to our Electronic Services Agreement and Disclosure Statement for more information.

Data We Collect

We collect Personal Information only as allowed by law. To provide online services to you, we may collect Personal Information when you enter data into an application for new products or services, when you use our Sites, products, and services, or automatically (see “Automatic Data Collection and Tracking Technologies” below for more information). Personal Information may include:

Personal Identifiers – Like your name, home or physical address, email address, telephone number, date of birth, government-issued identifier (e.g., Social Security number, tax ID number, driver’s license, or other government ID), username and password, and other information that directly identifies you.
Account Information – Like account number, credit/debit card number, account history, account balances, loan details, vehicle or property information, information about beneficiaries and joint account holders, and other information related to your accounts and applications.
Business Information – Like business-related information (e.g., business name, address, revenue, and industry type, business contact(s), and professional information.
Transaction Information – Like transaction details when you transfer money to or from your accounts, third party billing information or statements, credit/debit card purchases, payment or transaction history, and payment card details.
Credit Report Information – Like your credit score, credit history, and other information that we receive from credit reporting agencies.
Demographic Information – Like gender, marital status, age, citizenship, household size/composition, education information, income, occupation, veteran or military status, and employment status.
Biometric Information – Like fingerprints, voiceprints, scans of your facial geometry, keystroke and mouse movement patterns.
Geolocation Information – Like internet protocol (IP) address, device location, and any information used to identify your physical location.
Device Information – Like your device type, web browser type and version, operating system type and version, display/screen settings, language preferences, device contacts (e.g., to facilitate payments), photos (e.g., to deposit checks), mobile network information, general location (e.g., city, state, or country), precise location (e.g., latitude/longitude to find a nearby branch or ATM), cookie IDs, device IDs, mobile advertising IDs, and likely connections among different browsers and devices that you use.
Online/Mobile Activity Information – Like login data, communication preferences, search history, information about how you use and interact with our Site (including content viewed, links clicked, and features used), when and how often you use our Site, and the webpage from where you were directed to our Site.
Marketing Information – Like your marketing preferences, information about products or services we think you might like, and inferences based on your interactions with us or our partners (e.g., Online/Mobile Activity Data used for targeted advertising).
Survey and Research Information – Like your responses to questionnaires, surveys, requests for feedback, and research activities.

If you inquire about or apply for a job at the Credit Union through our Site, we or an authorized third party may also collect:

Employment Application Information – Like professional, employment-related, and education history collected through the Sites about job applicants, employees, associates, contractors, or other members of our workforce.

You represent that you have the right to provide such Personal Information and that you give us the right to use the Personal Information in accordance with our Privacy Policy.

Automatic Data Collection and Tracking Technologies

As you interact with our Sites, we may use automatic data collection technologies to collect certain information about your device, browsing actions, and patterns, including:

Details of your visits to our Sites, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Sites.
Information about your device and internet connection, including your IP address, operating system, and browser type.

The information we collect automatically may include Personal Information, or we may maintain it or associate it with Personal Information we already have. This helps us to improve our Sites and to deliver a better and more personalized service, including by enabling us to:

Estimate our audience size and usage patterns.
Store information about your preferences, allowing us to customize our Sites according to your individual interests.
Speed up your searches.
Recognize you when you return to one of our Sites.

The technologies we use for this automatic data collection and tracking may include:

Server Logs – Server logs automatically capture details of your online interactions with us, such as the time and date of your Site visit.
Cookies – A cookie is a small file placed on your computer's hard drive. You can refuse to accept cookies by changing your browser settings, but this may limit access to parts of a Site. If you don’t adjust your browser settings to refuse cookies, our Sites will place and use cookies. For information on managing cookie privacy and security, see “Choices About the Use and Disclosure of Your Information” below.
Pixels/Web Beacons/Web tags – Pixels, web beacons and web tags are an image or small code in a website or online ad. They enable companies (us or our service providers) to set or read cookies or transfer data to their servers when you load a webpage or interact with online content. For instance, we or our service providers might use pixels to see if you have interacted with part of a Site or viewed an online ad.
SDKs – Software Development Kits (“SDKs”) are code integrated in mobile apps to connect them to third party technologies and services, such as in-app ad displays and tools for analytics. SDKs may be used to track users with an advertising ID (such as Apple’s IDFA and Google’s Advertising ID) to identify your mobile device over time for advertising purposes. They can also be used to collect information such as geolocation or IP address.
Third Party Plugins– Plugins from other companies, including social media companies (for example, through a “Share” or Like” button). Plugins might collect data about your Site visits and share it with the plugin creator, even if you do not click on a button. Their use is governed by the creators' privacy policies and terms.
Session Replay/Heatmaps – Session replay technology uses trackers added to a user’s browser to record how they navigate a website (keystrokes, mouse clicks, movements and scrolling) and interact with content. A heatmap is a visual representation of user interaction on a website, highlighting sections with more clicks and attention.

Third Party Use of Automatic Data Collection and Tracking Technologies for Targeted Advertising

Some content or applications, including advertisements, on the Sites are served by third parties, including advertisers, ad networks and servers, content providers, and application providers. These third parties may use automatic data and tracking technologies to collect information about you when you use the Site. The information they collect may be associated with your Personal Information or they may collect information, including Personal Information, about your online activities over time and across different websites and other online services. These third parties may use this information to provide you with interest-based (behavioral) advertising or other targeted content on third party websites and mobile apps, including online advertisements for the Credit Union’s services and products.

We do not control these data collection and tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible third party directly. For information about how you can opt out of receiving targeted advertising from certain third parties, see “Choices About the Use and Disclosure of Your Information” below.

We do not and will not sell your Personal Information.

How We Use Your Information

We use information that we collect about you or that you provide to us for various purposes depending on how you interact with us, including, but not limited to:

Providing Products and Services – Such as evaluating your applications for our products and services, managing your accounts, offering member support, communicating with you, and providing online tools.
Processing Transactions – Such as transferring funds, processing payments and other transactions, fulfilling orders, conducting settlements and billing, clearing or reconciliation activities.
Identity Verification and Fraud Prevention – Such as verifying your identity when you apply for products or services, authenticating your login credentials, confirming your location to grant access to your accounts, storing security questions for future verification, assessing fraud risk, and detecting fraudulent transactions.
Security – Such as monitoring network logs, detecting incidents, conducting investigations, and protecting against malicious activities.
Advertising – Such as sending you offers, displaying online ads, targeting offers or promotions, providing sweepstakes, conducting market research, and improving our marketing.
Analytics – Such as analyzing Site usage, performance, mobile application features, user interface and experience, feature testing, troubleshooting issues and debugging.
Improving Products and Services – Such as personalizing and optimizing website and mobile experiences, recognizing users across devices and browsers, enhancing existing products and services, and developing new ones.
Legal and Business Purposes – Such as complying with laws, responding to lawsuits and investigations, defending legal claims, exercising our rights (including for collections on delinquent accounts), resolving disputes, conducting credit risk analysis and reporting, performing compliance and institutional risk control activities, managing human resources, and overall business operations.
Aggregating or Deidentifying Information – Such as using or modifying information to prevent identification of you, for example, compiling aggregated statistics to understand trends or feature usage. Aggregated and de-identified data is not subject to this Online Privacy Policy.

Sharing Your Information with Third Parties

We may disclose Personal Information that we collect or you provide as follows:

Affiliates and Acquisitions – We may share information with our subsidiaries and affiliates to deliver products and services and for other business purposes as stated in our general Privacy Policy. If the Credit Union is to be merged with another institution, we will share information with the merging institution.
Business Partners – We may share information with companies that we have partnered with to offer or enhance products and services.
Advertising Providers – We may allow companies to collect information through our Sites to provide us with advertising services, including targeted or behavioral advertising. See “Third Party Use of Automatic Data Collection and Tracking Technologies for Targeted Advertising” above for more information.
Service Providers – We may share your information with service providers who assist us with website creation and administration, surveys, technical support, payment processing, or to fulfill your request for services.
Credit Reporting Agencies – We share information with credit reporting agencies like Experian, Transunion, and Equifax to report or learn about your financial history and for other lawful purposes.
Legal Obligations and Security – We may disclose information to government authorities or law enforcement due to legal requirements, such as subpoenas, warrants, court orders or other legal process. Information may also be shared to establish or exercise our rights, defend against legal claims, investigate illegal activities or policy violations, investigate suspected fraud or data security incidents, and protect our members, Sites, brand, or other legal interests.
Other Third Parties with Your Consent – We may disclose your information to third parties with your consent. For example, you might authorize third parties to access your information for financial services like account aggregation, payments, or tax preparation. The third party’s privacy policy governs their use of your data. We may block third party access without notice for security reasons.

We may disclose aggregated information about our Site users, and information that does not identify any individual, without restriction.

Keeping Your Information Accurate

It is important that we have accurate information about you. If you notice that your Personal Information is incomplete, inaccurate, or out of date, please contact our Member Help Center at (800) 762-0047 or visit a Member Center near you. You can also review and request changes to certain Personal Information through Mobile or Online Banking.

How You Can Control Your Information

We strive to provide you with choices regarding your Personal Information. The following may provide you with certain control over your information:

Interest-Based Targeted Advertising – We do not control third parties’ collection or use of your information to serve interest-based targeted advertising. However, third parties that are members of certain self-regulatory associations provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from these third parties by visiting the Digital Advertising Alliance Opt Out Page, Network Advertising Initiative Opt Out Page, and TrustArc Preference Manager and by adjusting the privacy settings on your mobile device.
Manage Cookies On Your Devices – You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of our Sites may not be accessible or function properly. Please note that due to a lack of consistent standards across browsers, our Sites do not respond to “do not track” browser settings.
Google – The Site sends information to Google Analytics for the purpose of providing us with the ability to conduct technical and statistical analysis on the Site’s performance. Google Ad Manager uses cookies and other tracking technology to collect information about a user’s website activity, allowing them to deliver targeted ads based on browsing history, online behavior, and past ad interactions across different websites. You can find more information about Google’s privacy practices and how to control the information here: “How Google uses information from sites or apps that use our services”: https://policies.google.com/technologies/partner-sites. You can opt-out of having your Site activity available to Google Analytics by installing the Google Analytics opt-out browser add-on for the Chrome browser: https://chromewebstore.google.com/detail/google-analytics-opt-out/fllaojicojecljbmefodhfapmkghcbnh?hl=en. You can manage your advertising preferences on Google sites and apps (including YouTube) here: https://myadcenter.google.com/.
Meta (Facebook and Instagram) – The Meta pixel relies on Facebook and Instagram cookies, which enable Meta to match Site visitors to their respective Facebook and Instagram user accounts to deliver targeted advertisements. The Meta Pixel also allows us to track the effectiveness of Facebook and Instagram ads for statistical and market research purposes. Please review Meta’s privacy policy for more information about Meta’s privacy practices: https://www.facebook.com/policy.php and https://privacycenter.instagram.com/policy. You can manage your advertising preferences on Facebook and Instagram here: https://accountscenter.facebook.com/ads/ and https://accountscenter.instagram.com/ads/.
LinkedIn –The LinkedIn Insight Tag allows us to optimize our marketing campaigns on LinkedIn and retarget advertisements on LinkedIn to visitors of our Site. For more information on the LinkedIn Privacy Policy, go to https://www.linkedin.com/legal/privacy-policy. Please review LinkedIn’s privacy policy for more information about LinkedIn’s privacy practices: https://www.linkedin.com/legal/privacy-policy. You can opt out of retargeting on LinkedIn here: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
glia – The Site uses certain glia products, such as live chat, that collect device information, behavior Site usage information and information provided by you through the use of the Site. Please review glia’s privacy policy for more information about glia’s privacy practices and how to control the information here: “Opt-out” at https://www.glia.com/security-compliance/privacy-policy.

Please note that your preferences will apply only to the specific browser or device from which you disable cookies/opt out. You will need to disable cookies/opt out separately on all your browsers and devices. If you delete cookies, change web browsers, reset your mobile advertising ID, or use a different device, you may need to opt out again.

For members using our financial products and services, our general Privacy Policy governs how we share certain information with our affiliates and third parties, including for their direct marketing purposes, and will enable you to opt out of certain types of sharing.

Children’s Privacy

The privacy of our young members and other young visitors to our Sites is of great importance to us. We do not knowingly collect or use Personal Information from individuals under the age of 13 without parental or guardian consent. Under the Children’s Online Privacy Protection Act and implementing rule, parents have the right to review, and request deletion of information collected about their children (under the age of 13) when the information is collected online. If we are aware of any Personal Information that we have collected about an individual under the age of 13 without parental or guardian consent, we will take steps to securely remove it from our systems. We encourage parents and guardians to provide adequate protection measures to prevent minors from providing information unwillingly on the internet. If parents want to review the information collected about their child, please visit a Member Center near you, write to us at 3560 Pentagon Boulevard, Beavercreek, Ohio 45431, call us at (937) 912-7000 or (800) 762-0047, or email us at [email protected].

Texting

By providing us with your mobile number, you give us and others texting on our behalf permission to send you account-related text messages, account verification messages, account alerts and multi-factor authentication messages in conjunction with the services you have requested, including but not limited to payment reminders and notifications. Any personal information collected through the text message service will be used in accordance with our Privacy Policy. By providing us with your mobile number, you agree you have ownership rights or permission to use the number given to us. The number and frequency of messages will vary by account and the services you have with us. Message and data rates may apply to each text message sent or received, as provided in your mobile telephone service plan (contact your provider for pricing plans). To opt-out, text STOP to any text message we send you. An opt-out confirmation message will be sent back to you. To request support, text HELP to any text message we send you or email us at [email protected]. If your phone does not support MMS, any MMS messages sent may be delivered as SMS messages instead. We may terminate the text messaging program at any time, with or without notice. Wireless carriers are not liable for undelivered or delayed messages. No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Text messaging originator opt-in data and consent information will not be shared with unaffiliated third parties.

Security Practices

We take the security of your Personal Information and the information you provide to us very seriously. We have an information security program that includes administrative, technical, and physical measures that are designed to protect information within the Credit Union. Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your Personal Information in compliance with applicable laws, we cannot guarantee the security of your Personal Information transmitted to our Site. Any transmission of Personal Information is at your own risk. Please also take your own steps to educate yourself on threats and scams to prevent fraudulent use of your account. No one at the Credit Union will know or need to know your password, and Credit Union employees will never ask for your password.

Although we do not share Personal Information with nonaffiliated third parties except as provided in this Online Privacy Policy or our general Privacy Policy, we are aware that you may choose to do so to use the services of others. For example, you may have provided your account information to an account aggregation service (that consolidates your financial information from different sources), making payments via mobile applications, or for tax preparation. Because these third parties have access to your Personal Information and account data and may use your account sign-in credentials to provide the services, we recommend you use caution when granting such access to third parties. We are not responsible for the use or disclosure of any Personal Information or account data accessed by or on behalf of any company or person to whom you knowingly provide your Credit Union sign-in credentials or account information. We do not control the privacy, security or accuracy of your information that may be held by these third-party companies. If you revoke the authority you have to a third party, we recommend that you change your password.

Social Media

We have official pages on social media platforms like Meta/Facebook/Instagram, X/Twitter, YouTube, and LinkedIn. When you engage with us there, we may gather information such as your likes, interests, and preferences. Social media companies may collect and share information about you with us.

Posts on our social media pages—including pictures, comments, suggestions, or complaints—are visible to other users. Avoid sharing sensitive personal or confidential information in your posts. Please review the privacy policies of our social media partners when using those platforms.

Policy Updates

We may change our Online Privacy Policy from time to time. When we do, changes will be effective by posting them to our website (www.WPCU.coop). Any changes to our policy will become effective when posted, unless indicated otherwise. The date the Online Privacy Policy was last revised is identified at the top of the page. You are responsible for periodically visiting this Site and viewing the Online Privacy Policy to check for any changes.

Notice for California Residents

If you are a California resident, please refer to our California Consumer Privacy Notice for additional information about your rights under the California Consumer Privacy Act of 2018.