Overview Protecting your privacy is important to FirsTech, Inc. We want you to know and understand what information we collect and how we use it. In order to provide our customers with a broad range of payment processing products and services as effectively and conveniently as possible, our affiliate, Main Street Bank & Trust, provides us access to certain customer information. The following policy serves as a standard for all FirsTech and Main Street Bank & Trust employees for collection, use, retention, and security of nonpublic personal information.

What Information We Collect We may collect the following types of "nonpublic personal information" about you from

• information we receive from you on applications or other account forms, such as your name, address, assets, income or payment volume; and
• information about your transactions with us or our affiliates, such as your account balance and payment history.

"Nonpublic personal information" is nonpublic information about you that we obtain in connection with providing a payment processing product or service to you. For example, nonpublic personal information includes information regarding your account balance, payment history, and overdraft history.

What Information We Disclose We may share information about our experiences or transactions with you (such as your account balance and your payment history with us) with companies related to us by common control or ownership ("affiliates"). We may also share additional information about you or your account with our affiliates. FirsTech, Inc. is a subsidiary of Main Street Trust, Inc.

In addition, we are permitted under law to disclose nonpublic personal information about you to "nonaffiliated third parties" (i.e., third parties that are not members of our corporate family) in certain circumstances. For example, we may disclose nonpublic personal information about you to such third parties to protect against potential fraud or unauthorized transactions; to respond to judicial process; to comply with federal, state, or local legal requirements; and to comply with your request.

Our Security Procedures We also take steps to safeguard customer information. We restrict access to your personal and account information to those employees who need to know that information to provide products or services to you. Employees are educated on the importance of maintaining the confidentiality of customer information and are responsible for maintaining the confidentiality of customer information. We maintain physical, electronic, and procedural safeguards that comply with federal standards to guard your nonpublic personal information. Main Street Bank & Trust also maintains a partnership with Digital Insight to provide encryption, firewalls and secure servers to assure appropriate security for its Online Banking. You can learn more about these security features by accessing www.diginsite.com/security.

Providing Privacy Information to Customers and Responding to Inquiries Customers who have questions about this Privacy Policy or about the privacy of their customer information should call FirsTech at 217-421-7000; or write to us at FirsTech, Inc., Attention: Client Services, 130 North Water, Decatur, IL 62523. Please include your name, address and how we may contact you.