Effective Date: October 15, 2026
Company: Key 2 Recovery, Inc. (“Key 2,” “we,” “us,” or “our”)

1) Scope

This Privacy Policy describes how Key 2 collects, uses, discloses, and protects information when you:

  • Visit our websites and related pages (the “Site”);
  • Use our online portals and payment tools (the “Portal”);
  • Contact us by phone, email, SMS/text message, webform, mail, or other methods; or
  • Interact with us in connection with account recovery services performed on behalf of our clients (such as schools, institutions, or other creditors).

2) Information We Collect

We may collect the following categories of information:

A. Identifiers & contact information
Name, mailing address, email address, phone number, and similar contact details.

B. Account related information
Information related to an account placed with Key 2 for recovery, which may include account identifiers, balances, payment history, and related records provided by our clients during servicing.

C. Verification information
To help verify identity and protect accounts, we may obtain information such as date of birth, partial Social Security number (e.g., last 4 digits), and other authentication data.

D. Payment information
If you make a payment, we (and our payment processors) may collect payment details such as bank account information for ACH, debit/credit card details, billing information, and transaction history.

E. Communications
Call recordings where permitted by law, voicemails, emails, SMS/text messages, chat interactions, and other communications with Key 2.

F. Website/Portal usage & device data
IP address, device identifiers, browser type, operating system, pages viewed, referring/exit pages, approximate location derived from IP, and similar analytics/usage data.

G. Client-provided placement files
If you are an institutional client, you may upload files (e.g., spreadsheets, PDFs, word processing documents) containing account data for placement or servicing.

3) How We Collect Information

We collect information:

  • Directly from you (e.g., when you submit a form, make a payment, contact us, or use the Portal);
  • From our clients/creditors (e.g., institutions that place accounts with Key 2);
  • Automatically (e.g., through cookies or similar technologies on the Site/Portal); and
  • From service providers supporting our operations (e.g., hosting, analytics, payment processing).

4) How We Use Information

We may use information to:

  • Provide and operate the Site, Portal, and our services;
  • Verify identity and prevent fraud or unauthorized access;
  • Communicate with you about an account, payment options, notices, and support;
  • Process payments and maintain transaction records;
  • Comply with applicable laws and regulatory requirements;
  • Maintain security, audit, and internal controls;
  • Improve our services, training, quality assurance, and customer experience; and
  • Protect our rights, property, and the safety of users and others.

5) How We Disclose Information

We may disclose information:

  • To our clients/creditors in connection with servicing activities;
  • To service providers that perform functions on our behalf (e.g., website hosting, payment processing, communications, data security, analytics) under appropriate contractual restrictions;
  • For legal and compliance reasons (e.g., to comply with law, court orders, subpoenas, regulatory requests, or to protect rights and safety);
  • In business transfers (e.g., merger, acquisition, financing, or sale of assets), subject to customary confidentiality protections; and
  • With your direction/consent where applicable.

Text messaging (SMS) exception: The categories above do not include text messaging originator opt-in data and consent. This information will not be shared with any third parties or affiliates. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.

6) Cookies, Analytics, and Tracking

We may use cookies and similar technologies to operate the Site/Portal, remember preferences, enhance security, and understand usage. You can control cookies through browser settings, but disabling cookies may affect functionality. We use Google Analytics to understand how visitors use this website. Google Analytics uses cookies to collect information such as the pages you visit, how long you stay, the website that referred you, and your approximate location. It does not receive your account or payment information. To opt out, you can install Google's opt-out browser add-on at https://tools.google.com/dlpage/gaoptout or block cookies in your browser settings.

7) Communications, Calls, and Text Messages

If you provide a phone number or other contact details, you may receive communications from Key 2 Recovery related to your account. Where required, we will obtain appropriate consent. You can opt out of communications by using the unsubscribe method provided.

For account-related SMS/text messages (if you opt in or otherwise consent), message frequency may vary and message/data rates may apply. You can opt out by replying STOP

We send account-related texts in two ways: individual conversations with Key 2 employees, and account messages (such as notices, payment reminders, payment links and receipts) sent automatically through our collection platform.

Mobile opt-in information and consent will not be shared with any third parties or affiliates, and subscriber mobile numbers will not be sold or shared. For full terms, see our Text Message Policy at https://www.key2recovery.com/legal/text-message-policy.

8) Information Security

We use reasonable administrative, technical, and physical safeguards to protect information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9) Data Retention

We retain information for as long as reasonably necessary to:

  • Provide services and manage accounts;
  • Maintain business records;
  • Comply with legal/regulatory requirements; and
  • Resolve disputes and enforce agreements.
    Retention periods vary depending on the type of information and the purpose for which it is maintained.

10) Children’s Privacy

Our Site/Portal is not directed to children under 18, and we do not knowingly collect personal information from children under 18 without appropriate authorization.

11) External Links

Our Site may include links to third-party websites. We are not responsible for the privacy practices of those third parties.

12) Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The “Effective Date” above indicates when the latest version took effect.

13) Contact Us

Key 2 Recovery, Inc.
251 W Garfield Rd. Suite 289 Aurora Ohio 44202
Email: info@key2recovery.com
Phone: 877.322.KEY2

California Privacy Notice

This section applies to California residents to the extent the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”) applies.

A) Notice

We collect the categories of personal information listed in Section 2 above for the business purposes described in Section 4, and we retain information as described in Section 9.

B) Your California Privacy Rights

Subject to certain exceptions, California residents may have the right to:

  • Request to know/access the personal information a business collects about you;
  • Request deletion of personal information;
  • Request correction of inaccurate personal information;
  • Opt out of the sale or sharing of personal information (if applicable);
  • Limit the use/disclosure of sensitive personal information (if applicable); and
  • Not be discriminated against for exercising privacy rights.

C) Submitting Requests

You may submit a request by:

  • Emailing: info@key2recovery.com
  • Mailing: 251 W Garfield Rd. Suite 289 Aurora Ohio 44202

We may need to verify your identity before completing certain requests (for example, by confirming data points related to your account). If you use an authorized agent, we may require proof of authorization and may still need to verify your identity directly, as permitted by law.

D) Response Timing

We will respond within the timeframe required by California law. If we need additional time, we will notify you as required.

E) Sale/Sharing, Targeted Advertising, and Opt-Out Preference Signals

If our online activities are considered a “sale” or “sharing” of personal information under the CCPA/CPRA, you may opt out. Where applicable, we will also process valid opt-out preference signals (such as the Global Privacy Control) as required.

F) “Shine the Light”

California Civil Code section 1798.83 may permit California residents to request information regarding certain disclosures of personal information for direct marketing purposes. You may submit such a request using the contact methods above.