Privacy Principles

1. We respect your privacy.
   We will not provide your personally identifiable information to nonaffiliated third parties (including our contributing companies) for marketing purposes without your permission, except in limited circumstances in connection with the Upromise Rewards service.
2. We secure your data.
   We monitor for intrusion attempts 24 hours a day, 7 days a week; deploy encryption technology, firewalls and systems monitoring; and audit our safeguards with the help of leading security firms.
3. We offer you choices.
   You may choose whether and to what extent you receive marketing messages from Upromise and our contributing companies. If you do not wish to receive marketing messages, you may opt out at any time. And we offer you choices, so that you receive only those offers that are of interest to you.

Upromise Privacy Statement

Protecting your privacy is a top priority at Upromise. We want you to understand how we handle the personal information about you that we may obtain, and how we may and may not share it. This statement covers all of our information handling practices for Upromise, Inc., for the benefit of current and past customers. Please also see our separate statement, Privacy of Upromise Rewards Service, for additional information about our practices. Our affiliates, including our subsidiaries, have separate privacy statements.

Information We May Obtain.

As part of providing you products or services, we may obtain personal information from the following sources:

• Information you provide to us on applications and other forms, that you otherwise enter on our web site, or that you provide to us in writing or by telephone, such as when you contact our customer service staff. This information may include items such as your name, address, telephone number and social security number. In addition, please see Use of Cookies and other Technologies below for information we receive automatically when you visit our web site.
• Information from your transactions with us, our affiliates or nonaffiliated third parties such as account activity and your purchase information in our Rewards service.
• Information from third parties, including public sources, such as verification services and consumer reporting agencies (to comply with regulatory requirements, ensure the accuracy of data and prevent fraud, forexample), or from other sources (such as from other institutions like a bank or broker you use to transfer funds into a Upromise account, or public sources).

We use the information we obtain in order to develop, offer and deliver our products and services, to offer products and services of our affiliates, participating companies, marketing partners and other companies, to process transactions in your accounts, and to fulfill legal and regulatory requirements.

Please note that information you voluntarily include in bulletin boards, chat rooms and other online forums, such as the Upromise Community, may be viewed and used by anyone with access to those forums. Upromise is unable to control any use of such information.

Sharing Information With Our Affiliates

As a subsidiary of SLM Corporation, commonly known as Sallie Mae, our affiliates are the family of companies controlled by SLM Corporation. Our affiliates include, among others, Sallie Mae, Inc., Upromise Investments, Inc., Upromise Investment Advisors, LLC, Student Loan Funding Resources, Nellie Mae Corporation, Southwest Student Services Corporation, Student Loan Finance Association, Academic Management Services Corp., SLM Financial Corporation, and Sallie Mae Bank. Our affiliates offer a broad range of products and services including education loans, private loans, mortgage loans, high-yield savings accounts, certificates of deposits, 529 college savings plan administrative services and debt collection services. By sharing your personal information with our affiliates, we and our affiliates can better understand and meet your college savings and other needs by letting you know about products, services and promotional offers in which you are most likely to be interested. For example, if you have a Rewards account that has accumulated sufficient funds, you may be interested in opening an account with the Upromise College Fund or Sallie Mae Bank, or if you have a high school student, you may be interested in learning more about Sallie Mae student loans.

Unless you tell us not to, we may share with our affiliates all of the information we obtain about you. If you prefer that we not share with our affiliates consumer report information about you that we may receive from third parties, you may direct us not to do so by sending us an email at customercare@upromise.com containing your name, address and account number and request, to opt out of affiliate consumer report information sharing, or by calling the following toll free number: 1-800-877-6647. Please be aware that we may continue to share any other information as permitted by law.

Sharing Information With Nonaffiliated Third Parties

Information about our customers is an important part of our business. We do not share your personal information with nonaffiliated third parties except as permitted or required by law, including as provided below:

• Agents and Service Providers. In order to provide our products and services, we may share personal information about you with agents and service providers to perform functions on our behalf, such as to send email and postal mail, analyze data, provide marketing services, process applications and credit card payments, and service accounts. We contractually obligate these service providers to access and use personal information only as needed to perform their functions and for no other purposes.
• Financial Services Providers. In order to make certain financial products available to you (for example, credit cards, loans or insurance), we sometimes enter into marketing agreements with nonaffiliated financial institutions that offer those products. We select the financial institutionswe work with very carefully. Generally, we provide these entities with only customer contact information. For some products, we might also provide them limited additional information. These entities are permitted to use the information we give them only for the specific products being offered under our contract. If you prefer that we do not share your information with nonaffiliated financial institutions so that they may market their products and services directly to you, you may opt-out of that information sharing by sending us an email at customercare@upromise.com containing your name, address, account number and request, or by calling the following toll free number: 1-800-877-6647. You may also opt-out of that information sharing by updating your Upromise account member profile opt-out preferences on our website to opt-out of receiving communications from our participating companies.
• Protection of Upromise and Others. We may disclose personal information about you to third parties when we believe such disclosure is appropriate to comply with a legal requirement, such as a law, regulation, court order, subpoena or search warrant, or in the course of a legal proceeding. We may also disclose personal information as we believe appropriate to enforce or apply our rights under our agreements with customers, to protect the rights, property or safety of Upromise, our customers and others, including exchanging information for fraud protection and credit risk reduction.
• Business Transfers. If there is a change of control in Upromise's business (whether by merger, sale, or otherwise), its customer information could be sold as part of that transaction and your personally identifying information potentially could be used by the purchaser. Notice will be posted on the website so that you are aware of this change of control.

Upromise does not share member information with nonaffiliated, non-financial institutions to enable them to market their products and services directly to you. Occasionally, we engage third party service providers in the business of facilitating communications to send you information from certain participating companies, but only subject to strict confidentiality provisions that prohibit those third parties from providing your personal information to the participating companies. If we ever make the decision to share member information with nonaffiliated third parties other than financial institutions as described above so that they may market their products and services directly to you, we will notify you ahead of time, and you will have the opportunity to opt-out of that information sharing.

Use of Cookies and other Technologies

As is true of most web sites, our servers automatically collect and store certain technical information when you visit our web site. This information includes your internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, a date/time stamp, and clickstream data.

In addition, our web servers place and read session and/or persistent "cookies" on our site's visitors' computers for a variety of purposes. Our service providers may also place and read cookies on your computer when you visit our website or open a Upromise email. Cookies are small data files that are stored on your hard drive. One important use of cookies is to help identify you when you come to the Upromise site, and while you are logged in to the Upromise site. Consequently, if your browser does not accept cookies, you will be unable to enroll or log in to our service using our site. You will, however, be able to browse our site as a visitor.

Upromise and our service providers use information from our server logs, cookies and similar technologies known as "web beacons", "clear gifs" or "pixels," in combination with information you provide, transaction information, and information that we or they collect from others to:

• Operate the Upromise web site
• Deliver products and services to Upromise members;
• Understand how visitors use our web site, and determine whether the content on our site is effective;
• Improve our web site and service offerings;
• Personalize your experience on the site and customize the communications and advertisements you receive from us;
• Deliver advertisements and other information about products or services offered by Upromise, our affiliates, our participating companies and others on the Upromise web site, via email and as you surf the Internet; and
• To let us know which emails have been opened by recipients so that we may gauge the effectiveness of our marketing communications and to make those communications more useful and interesting to you.

If you prefer not to receive these marketing communications, please see "Choices Regarding the Receipt of Marketing Messages" below for information on how to opt-out.

If you are a member of Upromise, information collected using cookies or similar technologies may be associated with personally identifiable information we have about you.

One of the service providers we use to track and analyze web site usage is Coremetrics, a third party analytics company. Coremetrics uses our cookie and log data, in combination with personally identifying information we provide, to assist us in tracking site usage in order to enhance our web site and our products and services offerings. Coremetrics acts as our agent, and is authorized to use the information we share exclusively to provide this service to Upromise. For further information, including how to opt out, consult Coremetrics' privacy policies at: http://www.coremetrics.com/company/privacy.php.

Upromise also engages third party advertising networks who use cookies, the similar technologies described above, and non-personally identifiable information about you: (i) to deliver ads or other offers from Upromise, our affiliates, our participating companies and others as you surf the Internet, and (ii) to track the effectiveness of ads and other offers Upromise delivers on third party websites. These companies are authorized to use the information we provide and they collect when you navigate to a site within the ad network to provide this service to Upromise. Each of the companies we work with is a member of the Network Advertising Initiative. If you prefer not to receive these ads or offers as you surf the Internet, you may opt-out by clicking on this opt-out link. Please allow up to 10 days for the opt-out to take effect. Please also note that in order for the opt-out to work your browser must be set to accept third party cookies. Furthermore, if you buy a new computer, change web browsers or delete the opt-out cookie, you will need to perform the opt-out task again.

In addition, if you download the Upromise Toolbar and use the Personalized Offers feature, a third party service provider uses cookies and similar technologies to provide college savings opportunities tailored to you and market research services to Upromise and others. The Personalized Offers feature is completely optional, and subject to a separate privacy statement which can be accessed here or from the webpage where you can download the Upromise Toolbar software.

Upromise may also use and share aggregate information, which does not identify individual visitors or customers, with third parties.

Choices Regarding the Receipt of Marketing Messages

You may choose whether and to what extent you receive marketing messages from Upromise about products and services offered by Upromise or third parties. You may also choose whether and to what extent you receive marketing messages from our participating companies based on our information. If you do not wish to receive any of these marketing messages, you may opt out. To opt-out of receiving targeted ads or offers relating to Upromise, our affiliates or our participating companies from our third party advertising networks when you surf the Internet, please click on the Network Advertising Initiative link above and opt-out. If you do not wish to receive other marketing messages from Upromise and/or participating companies based on our information about you, you may opt out by sending us an email at customercare@upromise.com containing your name, address, account number and request, or by contacting a customer service representative at 1-800-877-6647. You may also opt-out of receiving marketing emails from Upromise and marketing messages from our participating companies based on our information about you, by updating your Upromise account member profile opt-out preferences on our web site. We reserve the right to send you specific administrative notices that are required or permitted by law or, regulation, or as needed or advisable to service your account. We also reserve the right to post advertisements not specifically targeted to you on websites you may visit. In addition, our participating companies reserve the right to contact you using information from sources other than Upromise.

Security of Your Personal Information

Upromise is committed to earning and keeping your trust. We understand the need for our customers' personal information to remain secure and private, and we have implemented policies and procedures designed to safeguard your information. The only Upromise employees who are authorized to see your personal information are those who need it as part of their jobs.

Please remember that you also play a valuable part in data security. You should never share your Upromise password with anyone. If you feel your password has been compromised, you should change it immediately. After you have finished using our site, you should log out of your Upromise account and exit your browser so that no unauthorized persons can use our site under your name and account information.

Collection of Information from Children.

None of Upromise's products or services are intended for purchase by children. Accordingly, Upromise does not knowingly collect, either online or offline, personally identifiable information from children under the age of 13.

State Laws

In addition to the rights described in this policy, please note that you may have additional rights under state law. For example, if your address on file with us is a California address, we will not share personal information about you with a financial institution with whom we have a joint marketing relationship unless we provide you the required notice under California law and you do not opt-out of that information sharing. In addition, if your address on file with us is a Vermont address, we will not share consumer report information about you with our affiliates unless you expressly consent to that information sharing.

Changes to This Privacy Statement

If we materially change this statement or our information-handling practices as described in this statement, we will notify you by email and/or through a notice on our web site at least 30 days prior to their implementation.

Privacy of Upromise Rewards Service

What information does Upromise collect, and why?

Enrollment Information. To set up your membership with the Upromise Rewards service, you will need to provide certain contact information, such as your name, mailing address, email address, phone number, username, and password. This information will also allow us to contact you about new college savings opportunities, unless you opt out of receiving these messages.

Purchase Information. As a Rewards service member, you can save for college by shopping with our participating companies. We may require additional information in order to keep track of and collect your contributions. For example, if you use a credit card to make a purchase, we may use your credit card number to identify the transaction. A phone company might require your telephone number, while an airline might require your frequent flyer account number. To take part in our grocery service, you may need to provide a grocery loyalty card number. In order to keep track of and collect your contributions, Upromise collects from some participating companies, grocery retailers or third party processors details of your transactions such as the date and amount of your transaction.

Rewards Account Information. We will maintain records to keep track of the contributions you earn from your purchases with our participating companies. You can use our website to view your Rewards service account balances and recent account activities, update your account profile, establish college savings goals, add new future college students, or contact a customer service representative.

Student Information. In order to link an eligible investment account or student loan account to the Rewards service so that we may direct your savings from your Rewards service account to the investment or student loan account you will need to provide certain information about the students or future students for whom you are saving such as the name, date of birth and social security number of the student and the account number of the investment or loan account. You can also personalize your Rewards service account to reflect your progress toward achieving your personal college savings goals by providing additional information about your future college students, such as when they anticipate starting college and whether they plan to attend a public or private institution. We may use this information to contact you about college savings opportunities, unless you opt out of receiving these messages.

Investment Account Information. When you open an investment account, the investment manager is required by law and by industry regulations to obtain certain personal information before creating your investment account. We and our investment manager partners will share certain personal information (such as your or your student's social security number or address) and demographic data with one another to facilitate the application process and monthly processing, and to comply with applicable law. This sharing of information is required to manage your account. Additionally, we may use this demographic information (such as your future college student's date of birth) to contact you about relevant college savings opportunities, unless you opt out of receiving such messages.

Family and Friends Network Information. You may use our Tell-a-Friend service to notify your family and friends about Upromise by providing their names and email addresses. You can also increase your college savings through Upromise by creating a savings network of family and friends that directs a portion of its Upromise savings to your future college students.

Upromise will automatically send a one-time email inviting your family and friends to visit Upromise. We store the information for the purpose of sending these emails and to measure overall response rates to these services. Your family and friends may contact us to request that their information be removed.

Family and friends who contribute to your future college students' investment accounts will receive confirmation of the name and age of each future college student for whom they are saving.

How does Upromise use my information?

Management of Your Account. When you become a member, we use your contact and transaction data to manage your account.

Use of Third Parties for Fulfillment Purposes. We may use certain third parties to provide marketing and administrative services, such as keeping track of your purchases, analyzing data or delivering special college saving offers to you on our behalf or on behalf of our participating companies. Third parties may also be used to help us administer our grocery, dining, travel and other rewards programs. In order to obtain these services, we may need to share certain personally identifiable information about our members. However, these third parties will be bound by legal agreements to not use or disclose the information we provide them for any purpose other than to perform the requested service.

On occasion, contests, sweepstakes or surveys on our web site may be co-sponsored by Upromise and another company, or may be sponsored by companies other than Upromise. Some or all of the data collected through these contests, sweepstakes or surveys may be shared with the sponsor(s) or companies indicated on the entry form or in the applicable rules.

Notification About Products and Services. We offer you the chance to maximize your Upromise membership through opportunities made available to you on our site and, unless you opt out of receiving them, through email, mail, and telephone messages. We may use information about you to provide you offers tailored to your interests. Sometimes, we send offers to selected groups of members on behalf of our participating companies and/or affiliates. Occasionally, we engage third parties in the business of facilitating communications to send you information from certain participating companies, but only subject to strict confidentiality provisions that prohibit those third parties from providing your personal information to the participating companies. In addition, unless you opt-out, we may share your information with nonaffiliated financial institutions with whom we have a marketing relationship so that those participating companies may market to you the specific products being offered under our contract with them. If you do not want to receive any of these marketing communications, you may opt out of receiving them.

Use of Information from Third Parties. We may obtain information about you from our participating companies and other third parties in order to provide you with college savings opportunities tailored to your interests. You may opt out of receiving these offers by updating your account profile at any time on our website, or by contacting a customer service representative at 1-800-877-6647. We may also use information obtained from our participating companies and other third parties in conjunction with member account and enrollment information for analytical and audit purposes.

Use of Non-Personally Identifiable Information. We may also provide aggregated, non-personally identifiable information about our members and their future college students to third parties for audit, marketing and other purposes. Because aggregated data is not associated with any particular person, these third parties will not have access to any personally identifiable information about you or your future college students.

What are my choices regarding the receipt of marketing messages?
We reserve the right to send you specific administrative notices that are required by law, regulation, or as needed to service your account. You may choose whether or not to receive messages from Upromise and our participating companies that may better suit your interests based on your preferences and transaction history. To opt-out of receiving targeted ads or offers relating to Upromise, our affiliates or our participating companies from our third party advertising networks when you surf the Internet, please click on the Network Advertising Initiative link above and opt-out. If you do not wish to receive other marketing messages from Upromise and/or our participating companies based on our information about you, you may opt out by sending us an email at customercare@upromise.com containing your name, address, account number and request, or by calling the following toll free number: 1-800-877-6647. You may also opt-out of receiving marketing emails from Upromise and marketing messages from our participating companies based on our information about you by updating your Upromise account member profile opt-out preferences on our web site. Our participating companies reserve the right to contact you using information from sources other than Upromise. We also reserve the right to post advertisements not specifically targeted to you on websites you may visit.

How can I access and update my Upromise data?
You may access and update information stored in your account profile by visiting the Upromise site. Please keep your contact, account, and preference information up-to-date. Doing so ensures that your contributions are properly tracked and received. It also helps us inform you of new participating companies who may help you boost your college savings.

What about links to other sites and participating companies' use of information?
Through our various online offerings, we may provide links to third-party websites, such as those of our participating companies or your investment manager. Each of these sites may have separate privacy and different data-collection practices from Upromise, and we are not responsible for the actions or practices of these third parties, nor for the content on these sites. We encourage you to review the privacy policies of their sites. In addition, the Upromise Toolbar is provided by a third party and is subject to a separate privacy policy which can be accessed from the webpage where you have the option to download the Upromise Toolbar software. To learn more about privacy and the Upromise TurboSaver, please read the TurboSaver Privacy Statement. Finally, please remember that when you shop or do any other business with any of our participating companies, any information you provide to them is subject to their own privacy and data collection practices, for which Upromise is not responsible.

What is TRUSTe and why is it so important?
Upromise, a wholly-owned subsidiary of Sallie Mae, is a licensee of the TRUSTe Privacy Program. TRUSTe is an independent, non-profit organization whose mission is to build users' trust and confidence in the Internet by promoting the use of fair information practices. TRUSTe has agreed to review the practices of www.upromise.com because this website wants to demonstrate its commitment to your privacy. Please note that the TRUSTe program does not cover the privacy practices of Upromise, Inc. affiliates. Please also note that the TRUSTe program covers only information that is collected through this website, and does not cover information that may be collected through software downloaded from the site.

If you have questions or concerns regarding this statement, you should first contact Upromise (see below). If you do not receive acknowledgment of your inquiry or your inquiry has not been satisfactorily addressed, you should then contact TRUSTe. TRUSTe will then serve as a liaison with Upromise to resolve your concerns.

How do I contact Upromise about this Privacy Statement?
If you have any questions about this privacy statement, our information-handling practices, or other aspects of privacy at Upromise, please contact us by email or at Upromise, Inc., Customer Care - Privacy Policy Issues, 95 Wells Avenue, Suite 160, Newton, MA 02459

Last Updated 4-25-10