Sallie Privacy Policy

Last Updated: September 30, 2026

1. INTRODUCTION

This Privacy Policy (“Privacy Policy”) describes how the operating subsidiaries of SLM Corporation, including SLM Education Services, LLC and Sallie Mae Bank (collectively, “we,” “us,” or “Sallie”), collect, use, store, disclose, and otherwise process your personal information through our websites, platforms, mobile applications, and other online and offline services we own or control that link to, reference, or post this Privacy Policy (collectively, the “Services”). In this Privacy Policy, the term “personal information” refers to information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household.

Residents of certain states may have rights under applicable privacy laws in such states. Please see our State Privacy Notice for more information.

This Privacy Policy does not apply to our collection and processing of personal information related to consumer financial products and services, including private student loans, deposit accounts, and applications for such products and services. For information regarding our collection and processing of such personal information, please see the Sallie Consumer Privacy Notice.

This Privacy Policy also does not apply to any third-party websites, services, products, or mobile applications linked to from our Services, or to personal information relating to our job applicants, current employees, former employees, or independent contractors. For California residents in those roles, such information is governed by the California Employee Privacy Notice.

2. SOURCES OF PERSONAL INFORMATION

The personal information that we collect varies depending upon your use of our Services and our interactions with you. In certain circumstances (e.g., to enter a sweepstakes or submit an inquiry), you must provide us with certain personal information, and if you don’t, we may not be able to provide you with the requested product, service, or information. We may also combine information collected from one source with information collected in other contexts and use such combined information in accordance with this Privacy Policy and any other privacy policies that may apply.

We, and others on our behalf, may collect personal information from the following sources:

3. WHAT PERSONAL INFORMATION DO WE COLLECT?

The categories of personal information we may collect are outlined below:

Categories of Personal Information

1. Identifiers and contact information, including name, username, phone number, mailing address, billing address, email address, social security number, driver’s license number, passport number, or other similar identifiers, IP address, MAC address, cookie ID, GUID, device ID, third-party platform identifiers and other online or unique identifiers.

2. Personal Records, including account and profile information, family and reference information, consumer report information, user records that contain personal information, such as name, signature, address, telephone number, education, and financial information (such as bank account numbers, credit card numbers, and debit card numbers).

3. Personal Characteristics or Traits, including age or date of birth, marital status, sex, or veteran or military status.

4. Transaction/Commercial Information, including products or services used, purchased, or considered; products or services considered from third parties, including third-party partners and technology companies that offer digital advertising services, and other purchasing or consuming histories or tendencies.

5. Internet or other Electronic Network Activity/Usage Data, including browsing history, clickstream data, search history, access logs, information regarding your interactions with the Services and our marketing emails, newsletters, and online ads, and other usage data related to your use of the Services, such as language and preferences, statistics, click paths, preferences and friends, as well as your comments, posts, and interactions in any forums and communities.

6. Geolocation Data, including when we may infer your approximate location (such as zip code, phone number, IP Address or MAC Address) as part of the Services, and device location information for mobile users.

7. Audiovisual and Similar Information, including photographs, videos, and images (e.g., that you provide us, post to your profile or upload to our Services for viewing by others), and call recordings (e.g., of video conference calls or customer support calls).

8. Professional or Employment Information, including your title, affiliated organization, professional expertise and experience, or education-related information.

9. Non-public Education Records, including education transcripts you may upload yourself into your scholarship search account.

10. Inferences from Personal Information, including information we collect about you that we combine and use to derive other information and inferences about you. This includes inferences drawn from other personal information that we collect or are provided to create a profile based on your account and activities, that reflect your preferences, characteristics, behavior, attitude, and abilities.

11. Sensitive Information, some of the information we obtain may be considered “sensitive” under applicable laws, including government-issued identification numbers (e.g., Social Security numbers and driver’s license information), bank account numbers and passwords, certain personal characteristics and traits, and biometric information.

4. HOW DO WE USE YOUR PERSONAL INFORMATION?

We may use your personal information for any of the following purposes:

• Processing transactions and providing our products and services – to process transactions and applications, administer scholarships for which you may have applied or donated funds, service accounts and provide you with information or services or to perform activities that you have requested or information you agreed to receive.
• Support, maintenance and product research and development – to provide, maintain, and improve the Services (including building correlations for use in our advertising services) and to develop new products, services, features and functionalities. We may use your personal information to better understand how users access and use our Services in order to improve our products and services, respond to user desires and preferences, and for other research and analytical purposes. We also use your information to measure performance and analyze key metrics relevant to our business and Services, and to administer surveys and questionnaires, including for market research.
• Customizing your experience, offers, and content – to enhance your experience using our Services and the products and services we offer, you may be delivered curated content and recommendations within our Services based on your interests and interactions with our Services, including information about our own products, our affiliates’ products, or those of our third-party partners or business customers such as scholarship providers, financial services providers, and other companies.
• Registering and administering accounts – to process your registration with our Services, verify your information is active and valid, and manage your account.
• Customer service and communications – to respond to questions, comments, or requests that you have for us or for other customer service purposes, to contact you with regard to your use of the Services and, in our discretion, changes to the Services and/or Services’ policies, and to verify eligibility for certain services offered by us, our affiliates, our third-party partners, or our business customers. We use your information to communicate with you, including communications via telephone calls, text messages, push notifications and email. We may also use automated systems using artificial intelligence, machine learning or similar technologies to review and respond to customer questions and inquiries, including chat and search functions on our Services.
• Advertising services, measurement and administration – to show you ads (including targeted or personalized ads on behalf of us, our affiliates, and other third parties) and to measure and understand the effectiveness of our advertising. We may also use artificial intelligence technologies to analyze the information you provide or that we collect about you from multiple sources and to infer or generate information about your interests, characteristics, and preferences. We also use information to help us, our affiliates, third-party partners, business customers, and advertising partners to create segments, reach the desired audience and understand, measure, and improve their ad campaigns. We use your information to reach you with more relevant ads and to evaluate, measure, and improve the effectiveness of our ad campaigns.
• Marketing and promotions – for marketing purposes, including to send you alerts, notifications, emails, newsletters, and text messages, about products, events, promotions, contests, and offers from us or our third-party partners or business customers, and to measure and understand the effectiveness of our marketing efforts.
• Legal Compliance – for complying with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities; for auditing our internal processes for compliance with legal and contractual requirements or our internal policies; and for enforcing our policies and terms, including our Terms of Use and this Privacy Policy, and other legitimate purposes.
• Safety, security and fraud detection and prevention – for protecting our, your or others’ rights, privacy, safety, or property (including by making and defending legal claims); and for preventing, identifying, investigating, and deterring fraudulent, harmful, unauthorized, unethical, or illegal activity, including cyberattacks, and identity theft.
• Disclosed and additional compatible purposes – for purposes disclosed at the time you provide your personal information and other purposes that are compatible with the purpose of collecting your personal information and that are not prohibited by law, including for our legitimate business interests, such as in protecting, maintaining, and improving the Services, and developing new features and services.
• Business transactions – for purposes related to any actual or contemplated merger, acquisition, sale of some or all of our assets, financing, bankruptcy, or restructuring of all or part of our business.
• Fulfilling any other purpose for which you give your consent.

We may also de-identify or aggregate personal information. Where we process de-identified information, we maintain and use it in de-identified form and do not attempt to reidentify the information, except in accordance with applicable privacy laws. Once personal information is de-identified, it is no longer subject to this Privacy Policy.

5. TO WHOM DO WE DISCLOSE YOUR PERSONAL INFORMATION?

We may disclose the personal information listed above to the following types of third parties:

• Our affiliates, for the purposes described above, including for marketing purposes.
• Our service providers, for various purposes, including helping us provide our products, services and customer support to you, such as support for the internal operations of our Services (e.g., operations and technical support processing), communicating with you, and collecting information through Tracking Technologies, as well as related offline product support services, data storage, and other services.
• Joint marketing partners, including financial institutions with whom we have joint marketing agreements and service providers that perform marketing services on our behalf, and on behalf of us and other financial institutions.
• Third-party partners and business customers, including those with which we partner or provide services to provide contests, scholarships, or co-branded services, or that want to market to you or otherwise provide you with special offers or materials regarding products or services that may be of interest to you.
• Third-party platforms, sites, and services, including third-party ad networks, advertisers, analytics providers, social networks, Internet service providers, channel partners, measurement services, data aggregators or suppliers, and others, to help us personalize, display, and measure advertising within our Services and on third-party services, as described further in “Tracking Technologies and Targeted Advertising” below. We and these third-party companies may use Tracking Technologies to collect information within our Services and on third-party sites and services. These parties may act as our service providers, or in certain contexts, may independently decide how to process your personal information.
• Universities, colleges, professional schools, certificate and licensing programs, and other education providers, for the purposes described in Section 4 above.
• Government agencies, to the extent reasonably necessary to fulfill legal and regulatory requirements or requests, or to comply with applicable laws, or investigations.
• Other third parties, if we reasonably believe that such disclosure is reasonably necessary to (a) comply with legal requirements, including reasonable requests of law enforcement, (b) to enforce our Terms of Use, defend claims, or to protect the security or integrity of our Services, servers, databases, and other technology assets, and business, or (c) to exercise or protect the rights, property, or personal safety of us, our customers, visitors, or others.
• The public, for example, when we post the names of scholarship or sweepstakes winners on our Services.
• Third parties in relation to a proposed or completed transfer, sale or merger of all or part of us or our affiliates, whether through a sale, acquisition, merger, consolidation, reorganization, bankruptcy, or other corporate change involving us or our affiliates.

6. TRACKING TECHNOLOGIES AND TARGETED ADVERTISING

Tracking Technologies

We collect certain device and usage information through a variety of tracking technologies, including cookies, web beacons/pixel tags, server logs, file information, SDKs, session replay technology, our interactive chat functionality, and other similar tools and technologies (collectively, “Tracking Technologies”), and we may use third parties, including social media platforms, analytics companies, data brokers, third-party advertisers, and other technology companies that offer digital advertising services, to collect information using Tracking Technologies, both on our Services and third-party online services. By using the Services, you agree to the collection of this information via these technologies.

Information collected using Tracking Technologies includes information described in the “What Personal Information Do We Collect” section above, including information collected from your device (such as device IDs, advertising IDs or other unique identifiers), network devices (such as IP address or router information), device and software characteristics, and other information collected. We may disclose, or we may permit third parties to collect, personal information about your use of our Services over time, to provide and enhance the performance of the Services, facilitate user experience, monitor and analyze trends, conduct internal research and development, and for debugging, fraud prevention, and session management. We and these third parties may also use information collected through Tracking Technologies for personalization, analytics, and targeted advertising on or through the Services and third-party websites, apps, and platforms. We or third parties may also collect and use such information to analyze and evaluate the success of our advertising efforts.

Depending on your browser or mobile device, you may be able to control the way in which your browser or device permits the use of Tracking Technologies. For example, if you choose, you may block or delete cookies from your browser or take steps to limit cross-site tracking. We use Tracking Technologies offered by third-party companies such as Google, Adobe, and Microsoft. For Google Analytics, please visit https://tools.google.com/dlpage/gaoptout/ to learn more about the opt out choices offered by Google. As to Adobe Advertising, please visit https://www.adobe.com/privacy/opt-out.html to learn more about the opt-out choices offered by Adobe. As to Microsoft Advertising Services, you may learn more about how Microsoft processes your personal information and Microsoft’s company-specific opt-outs by reviewing Microsoft’s privacy statement available at https://www.microsoft.com/en-us/privacy/privacystatement. Please keep in mind, however, that if you delete or block cookies, our Services may not function as intended.

If you would like to learn more about the use of information for targeted advertising, and to opt out of targeted advertising from companies that participate in industry opt-out programs, please use the links set out directly below. Even if you opt out, you still may receive advertising from us that is not customized or advertising from other third parties if they are not a participating company.

• Network Advertising Initiative: http://www.networkadvertising.org/managing/opt_out.asp
• Digital Advertising Alliance: https://optout.aboutads.info/?c=2&lang=EN
• AppChoices: https://www.youradchoices.com/appchoices

Depending on where you live, you may have rights relating to Tracking Technologies and targeted advertising, described further in our State Privacy Notice.

Session Replay Technology

We use third-party session recording and replay technology to observe mouse movements, scrolling, and clicks on our Services. This involves the use of third-party cookies and other Tracking Technologies. We use these Tracking Technologies for support and analytics purposes, and to better understand how people engage with our Services (e.g., pageviews, clicks, inputs, tap and mouse clicks, scrolls and swipes, long loading spinners, session time, rage clicks, frequent refreshes, site errors, JS errors, etc.). This also enables us to build and maintain the Services with user feedback. This information is often collected and processed by our service providers whom we have engaged to analyze this information on our behalf.

7. LINKS TO THIRD-PARTY WEBSITES AND SERVICES

Our Services may permit you to access third-party websites directly that we do not own or control. It is important to remember that if you link to a third-party website from our Services, that third-party’s privacy policy and its terms and conditions of use apply to you. We encourage you to learn about each third-party’s privacy policy before sharing your personal information with them. We are not responsible for the privacy practices or the content of the sites to which we link, including their collection and use of your information by these third-party sites.

In addition, our Services may include or incorporate social media and other third-party features (e.g., widgets, buttons, and plugins), which are operated by third parties, such as educational institutions, Facebook, Reddit, Twitch, X, Instagram, SnapChat, YouTube, and others. These features are hosted by the respective third-party operator even though they appear on our Services, and the third-party may collect certain information about you (such as your IP address, URL, date and time stamp, browser details, and the like) via Tracking Technologies, subject to their own privacy policies.

If you provide your personal information on a co-branded page, your personal information may be shared with the third-party partner. Please review the third-party partner’s privacy policy and terms of use prior to providing any personal information. If you have any questions regarding the privacy policies of our third-party partners or business customers, please contact the third party directly using the channels provided by the third party.

Some of our products and services may use Google Maps features and content to validate your address. The use of Google Maps features and content is subject to (1) Google Maps/Google Earth Additional Terms of Service at https://maps.google.com/help/terms_maps/; and (2) Google Privacy Policy at https://policies.google.com/privacy. Google may collect and receive data, including but not limited to search terms, IP addresses, and latitude/longitude coordinates in accordance with their Privacy Policy at https://policies.google.com/privacy.

8. CHILDREN’S PRIVACY

Children under the age of 13 are not permitted to use the Services, and we do not seek or knowingly collect any personal information about children under 13 years of age. If we become aware that we have unknowingly collected information about a child under 13 years of age, we will make commercially reasonable efforts to delete such information. If you are the parent or guardian of a child under 13 years of age who has provided us with their personal information, you may contact us using the below information to request that it be deleted.

9. PROTECTION OF INFORMATION

We take a variety of physical, technical, administrative, and organizational security measures to protect your personal information against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure, or access. Despite our reasonable efforts to protect your information, no security measures are impenetrable, and we cannot guarantee “perfect security.” Any information you send to us electronically, while using our Services or otherwise interacting with us, may not be secure while in transit. We recommend that you do not use unsecure channels to send us sensitive or confidential information.

10. INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION

Your personal information may be stored and processed in the United States or any other country in which we or service providers maintain facilities. While our Services are only intended for users in the United States, if you are located outside the United States (e.g., in the European Union), those countries have data protection laws that may differ from data protection laws in the United States. Please note that we or third parties on our behalf may transfer personal information to a country that does not have the same data protection laws as your jurisdiction.

11. RETENTION OF PERSONAL INFORMATION

We may retain information as required or permitted by applicable laws and regulations, including to honor your choices, for our billing or records purposes and to fulfill the purposes described in this Privacy Policy. We may retain information for our legitimate interests and essential business purposes, such as operating, maintaining, securing, and improving our Services; complying with our legal obligations; and exercising our legal rights and remedies, including enforcing our Terms of Use. Our retention of information is based on many factors, such as your relationship with us, the nature of the information, compliance with our legal obligations, defending or resolving actual or anticipated legal claims, and applicable statute of limitations and records retention requirements.

12. UPDATES

This Privacy Policy is current as of the Last Updated Date set forth above. We may modify this Privacy Policy from time to time, in which case we will update the “Last Updated” date at the top of this Privacy Policy. If we make material changes to the way in which we use or disclose information we collect, we will use reasonable efforts to notify you (such as by emailing you at the last email address you provided us, by posting notice of such changes on our Services, or by other means consistent with applicable law) and will take additional steps as required by applicable law. If you do not agree to any updates to this Privacy Policy, please do not continue using or accessing the Services.

13. CONTACT US

If you have any questions or comments about this Privacy Policy or our privacy practices generally, you are welcome to contact us at:

Sallie Customer Privacy
P.O. Box 3319
Wilmington, DE 19804-4319
(855) 582-1928

You may also contact us via email at: privacy@sallie.com.

SLM Education Services Consumer Privacy Notice

Rev. 9/2026