Privacy Policy

Rise by Credit Financier

Effective Date: 6 October 2026

This Privacy Policy explains how Rise by Credit Financier (“Rise”, “we”, “us”, or “our”) collects, uses, discloses, stores, and protects personal data when you access or use our website, mobile application (the “Rise App”), digital platforms, and financial services (collectively, the “Platform”).

By using the Platform, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

Rise operates under Credit Financier S.A.L., a financial institution:

• Licensed by Banque du Liban (License No. 26)
• Registered in the Trade Register – Beirut (No. 74156)
• Supervised by the Capital Markets Authority (CMA)

We provide loans, buy-now-pay-later financing, credit cards, savings, investment-related services, money transfers, and related digital financial services, in compliance with Lebanese laws and applicable regulatory requirements.

2. Scope of This Privacy Policy

This Privacy Policy applies to:

• Visitors to our website
• Users of the Rise App
• Users applying for or using our financial products
• Individuals completing digital onboarding and eKYC
• Customers, prospects, and authorized representatives

This Policy does not apply to third-party websites or services linked from our Platform.

3. Personal Data We Collect

We collect personal data directly from you and, where permitted by law, from trusted third parties.

3.1 Identity and Personal Information

• First name and last name
• Date and place of birth
• Gender
• Mother’s name and father’s name
• Nationality, including any additional nationalities
• Civil register number and residency status
• Official identification documents and their details (e.g. ID cards, passports, document number, and expiry date)
• Marital and family status, including spouse details (name, date of birth, nationality, and ID number) and number of dependents
• Profile picture, where you choose to upload one

3.2 Biometric Data

• Facial images and facial biometric data, including liveness detection and face-matching results, used solely for identity verification, liveness detection, and fraud prevention during eKYC processes

3.3 Contact Information

• Mobile number
• Email address
• Residential address

3.4 Professional and Financial Information

• Employment and business information, including employer name, address, and telephone, profession, position, and length of employment
• Source of funds, income range, assets range, expenses, and salary payment method
• Primary bank and account details
• Investment experience, investment objectives, and risk tolerance
• Beneficial owner information and details of any third party acting on your behalf
• Financial statements or supporting documents, where required
• Credit and risk-related information

3.5 Tax and Regulatory Information

• Tax identification number and tax residency
• U.S. person status and related tax forms (e.g. FATCA / Form W-9 information)
• Politically exposed person (PEP) status and related details
• Results of anti-money laundering, sanctions, and watch-list screening

3.6 Account and Transaction Information

• Details of the products you apply for or hold, including loans, buy-now-pay-later plans, credit cards, savings accounts, and investments
• Transaction history, including payments, repayments, card transactions, deposits, and withdrawals
• Money transfer details, including IBAN transfers, transfers to other Rise users, saved beneficiaries, and deposit receipts
• Signed agreements and contractual documents

3.7 Communications and Uploaded Content

When you use certain features of the Rise App, we may collect content that you choose to provide, including in-app chat messages, photos, videos, voice or sound recordings, and files or documents uploaded through the App. This information may be collected when you use features such as customer support, identity verification, loan applications, or document submission. We use this information to provide the requested services, process applications, verify information, prevent fraud, maintain the security of our services, and comply with applicable legal and regulatory requirements.

3.8 Login and Security Information

• Mobile number used to sign in
• One-time verification codes sent to you by SMS
• Your PIN, which is stored only in a secure, irreversibly hashed form and is never visible to us

3.9 Technical, Device, and Usage Data

• IP address
• Device identifiers, including the device MAC address, used to secure your account and detect unauthorized access
• Device type, operating system, and browser information
• Push notification token, used to send you notifications
• Log data, timestamps, and last activity time
• Crash reports and error diagnostics
• Platform usage data, including your interactions with in-app offers and promotions

4. Digital Onboarding and eKYC Processing

Rise uses a secure digital onboarding and electronic Know Your Customer (eKYC) process, integrated with Assentify Ltd. Digital Experience Platform, a solution qualified and approved in accordance with Banque du Liban regulations.

Personal data and biometric information collected during eKYC are processed strictly for:

• Identity verification
• Regulatory compliance
• Fraud prevention
• Risk assessment

As part of onboarding and on an ongoing basis, we screen customer information against sanctions lists, anti-money laundering watch lists, politically exposed person lists, and internal lists, as required by law. We may refuse or restrict services where required by these checks.

Failure to provide required information may prevent completion of onboarding or access to services.

5. App Permissions

The Rise App requests access to the following device features only when you use a feature that needs them. You can withdraw these permissions at any time from your device settings, although some features may then be unavailable.

• Camera: to capture identity documents and facial images for eKYC, and to take photos or videos you choose to share
• Microphone: to record voice messages you choose to send through in-app chat
• Photos, media, and files: to upload documents, photos, or files you select
• Notifications: to send you transaction alerts, account updates, and service messages

6. How We Use Personal Data

We process personal data for legitimate business and regulatory purposes, including:

• Verifying identity and conducting eKYC
• Opening and managing your accounts and products
• Assessing eligibility for financial products
• Performing credit, risk, and compliance checks
• Processing payments, transfers, and card transactions
• Preventing fraud and financial crime
• Securing your account and detecting unauthorized devices
• Fulfilling legal, regulatory, and tax reporting obligations
• Communicating with customers, including customer support and push notifications
• Showing relevant offers and measuring how in-app promotions perform
• Improving our services, App stability, and Platform security

We do not sell personal data.

7. Legal Basis for Processing

Personal data is processed based on one or more of the following:

• Performance of a contract or pre-contractual measures
• Compliance with legal and regulatory obligations
• Legitimate interests of Rise, including fraud prevention and security
• Your consent, where required by law

8. Data Sharing and Disclosure

We may share personal data with:

• Regulators, supervisory authorities, tax authorities, and law enforcement where required
• Identity verification and compliance providers, including Assentify, for eKYC, biometric verification, and sanctions and anti-money laundering screening
• Card issuing and payment processing partners, to issue and operate credit cards and process payments
• Money transfer and financial service partners (such as BOB Finance and Mintnow), when you use services they provide through the Platform
• Communication providers, including SMS providers for verification codes and Google Firebase Cloud Messaging for push notifications
• Technology providers supporting hosting, security, and error monitoring (such as Sentry)
• Auditors, legal advisors, and professional consultants

We share only the data each recipient needs for its purpose. All third parties are required to protect personal data and use it only for authorized purposes.

9. International Data Transfers

Some of our service providers, such as push notification and error monitoring providers, may process data outside Lebanon. Where personal data is transferred outside Lebanon, we ensure that appropriate safeguards are in place, including contractual protections and security controls, in line with applicable laws and regulatory expectations.

10. Data Retention

Personal data is retained only for as long as necessary to:

• Fulfill the purposes outlined in this Policy
• Comply with legal, regulatory, and audit requirements

Retention periods are determined based on regulatory obligations, contractual requirements, and legitimate business needs. Banking, identity verification, and transaction records may be retained after your account is closed for the period required by Banque du Liban and other applicable regulations.

11. Account and Data Deletion

You may request the closure of your account and the deletion of your personal data at any time:

• From within the Rise App, using the account deletion option; or
• By emailing info@riselb.com from the email address registered to your account, stating your full name and mobile number

We will verify your identity before processing the request. Outstanding balances, loans, or card obligations must be settled before an account can be closed. Once your request is processed, we delete or anonymize your personal data, except for data we are legally required to retain as described in Section 10, which is kept securely and used only for those legal purposes.

12. Data Security

Rise implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration. These measures include:

• Encryption of data in transit and secure data storage
• Hashing of PINs and other security credentials
• Access controls and authentication mechanisms
• Device recognition to detect unauthorized access
• Audit logging, monitoring, and incident response procedures

Despite these measures, no system can be guaranteed to be completely secure.

13. Your Rights

Subject to applicable laws, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate or incomplete data
• Request deletion or restriction of processing, where legally permissible
• Withdraw consent, where processing is based on consent, including by revoking App permissions in your device settings

Requests may be subject to identity verification and regulatory limitations.

14. Children

The Platform and our financial services are intended only for individuals aged 18 or older. We do not knowingly collect personal data from children.

15. Cookies and Tracking Technologies

Our Platform may use cookies and similar technologies to enhance functionality, security, and user experience. You may manage cookie preferences through your browser settings.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on the Platform and will take effect on the date of publication.

17. Contact Us

For questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact:

Rise by Credit Financier
Registered Address: Berytus Park, Bloc A, Floor 2
Beirut, Lebanon
info@riselb.com