| Protecting Your Online Banking |
California First National Bank is committed to making sure that your online banking is safe and secure. With our own security infrastructure in place, we are confident that access to your accounts is private and secure. We cannot, however, provide similar assurances for other Websites. While California First National Bank works to protect your banking privacy, you also play a role in protecting your accounts. Only provide your user ID or PIN when your browser shows a Secure Socket Layer (SSL) connection directly to the California First National Bank Website or to another site you have investigated and fully trust.
Our computer system does not connect directly to the Internet. It is isolated from the network via a "firewall" - a software and hardware product that defines, controls and limits the access that "outside" computers have to the bank's computer. In other words, use of the firewall allows only authenticated bank customers or administrators to send or receive transactions through it.
When you bank online with us, we, along with the outside companies we work with to bring these services to you, have access to your information. Information is retained on our system or on the system of the appropriate outside company, depending on what is required in order to serve you.
We use state-of-the-art Internet technology, supported by the outside companies we work with, to make online banking secure and to protect your personal information. We require an ID and password to access your accounts. If you do not provide this information, we cannot establish an online banking service for you.
You can also help maintain the security of your banking information by not sharing your ID or password with anyone, by changing your password regularly, and by remembering to properly log out once you complete your online banking activity.
Protecting Your Privacy Online
Whenever we ask for personal information on our Website, we use Secure Socket Layer (SSL technology) for transferring data. This technology encrypts - or scrambles - your account information so it's virtually impossible for anyone other than California First National Bank to read it.
Secure Socket Layer (SSL) technology secretly encodes information that is being sent over the Internet between your computer and California First National Bank, helping to ensure that the information remains confidential. The use of SSL requires that you have an SSL-compatible browser. While older browser versions may support SSL sessions, California First National Bank strongly recommends the following browsers.

|
Windows and Unix operating systems: Netscape Navigator 6.0 or later, and Microsoft Internet Explorer 5.0 or later.
|

|
Macintosh: Netscape Navigator 6.0 or later, and Microsoft Internet Explorer 5.0 or later. |
You can download the latest version from either of the links below.

|

|
Some areas of our Website require information, such as your e-mail address or your account number, to enable you to perform certain tasks (for example, to review your accounts or to correspond with us). In these cases, we collect your information, if necessary, to interact with you. If you do not interact with us, you browse our Website anonymously, and personal information, such as your e-mail address, is not collected. We gather and analyze data regarding the usage of our Website, including domain name, number of hits, pages visited, length of user session, etc., to evaluate the usefulness of our sites.
E-Mail Use
Customer inquiries sent through our Website pages use SSL as described above. However, since our e-mail response to you is not secure, we will not include confidential account information in the e-mail response. Of course, you may also contact us by telephone or U.S. mail.
Security Monitoring
Ensuring the security of your transaction with us is an ongoing process at CalFirst. As such, we employ around-the-clock security monitoring of CalFirst's systems and network. We also have periodic third-party reviews of our security systems.
About "Cookies"
To provide better service and a more effective Website, we use "cookies" as part of our interaction with your browser. A "cookie" is a small text file placed on your hard drive by our Web page server. These cookies do not collect personally identifiable information, and we do not combine information collected through cookies with other personal information to determine who you are or your e-mail address. Cookies are commonly used on Websites and do not harm your system. By configuring your preferences or options in your browser, you determine if and how a cookie will be accepted. We use cookies to determine if you have previously visited our Website and for a number of administrative purposes.
Third-Party Account Aggregators
Some of our customers may use the services of third parties to obtain information on their CalFirst deposit accounts and to conduct transactions on them. This disclosure concerns your use of these third-party companies and your liability in connection with their activities on your accounts. These companies, often referred to as "account aggregators" or "consolidation sites", are not affiliated with California First National Bank. If you choose to use the services of an account aggregator, you assume all risks inherent in disclosing your passwords or personal identification numbers (PINs) to a third party. CalFirst has no responsibility for any use or misuse of your account information by a third party to whom you provide your account information, passwords or PINs. You are liable for all transactions conducted by the account aggregator on your behalf or with the use of your passwords or PINs. CalFirst cannot ensure the accuracy of information provided to you by a third-party aggregator, and CalFirst cannot guarantee the ability of the third party to perform any type of banking transaction on your behalf, including, but not limited to, verification of credits and debits, transfers of funds and bill payment. If you experience any problems with a third-party account aggregator to whom you provided your account information, you will have to resolve the problem directly with that third party. CalFirst cannot accept responsibility for any losses, damages or fees assessed by another company or institution caused by the involvement of a third-party account aggregator.
Protecting Our Children
CalFirst does not knowingly market its products or services to children, nor do we knowingly solicit personal information from children. We recognize that protecting children's identities and privacy online is important and that the responsibility to do so rests with both the online industry and with parents.
Digital Identification
To ensure the security of your account information, we use a system involving "Digital Identification Certificates" (Digital IDs) from Verisign, a leader in digital authentication products and services. Using today's most reliable cryptographic techniques, Verisign Digital IDs provide a trusted means of verifying the identity of each party in an electronic transmission. Through Digital IDs, you can rest assured that you are actually transacting with CalFirst when you transmit personal or financial information to us through our Website. For more information visit http://www.verisign.com.
|