Bill Payment Terms and Conditions United States & Canada

Paymentus Corporation and their affiliates (referred to herein as “Paymentus,” “we,” “our,” or “us”) recognize the importance of protecting personal data we may collect from individuals or entities (“users,” “you,” or “your”) who visit our websites, the Client Portal, the one -time payment collection services, access the interactive voice response (IVR) program, or access the agent-assisted IVR. Access through mobile apps, any other app or channel, and the related software, communications, capabilities, and services that are accessible on or by any of our Sites (collectively, the “Services”) other Paymentus-related sites, including those we maintain for our customers (“Billers”) (each, a “Site” and collectively the “Sites.”) This excludes services that state that they are offered under a different privacy notice or policy. This Privacy Notice also applies to information we may collect from representatives of billers and others directly at trade shows or through similar interactions.

PRIVACY NOTICE

The Paymentus Privacy Notice explains the information collected, why we collect it, how we use it, how and with whom we may share it, and your choices, including how to access and delete information.

Please familiarize yourself with our privacy practices and let us know if you have any questions. Using any Site or bill payment functionality signifies your acceptance of this Privacy Notice. If you disagree with this Privacy Notice, please do not use the Sites. If you have any questions or comments about this Privacy Notice, please submit a request to privacy@paymentus.com. See How to Contact Us for more information.

JURISDICTIONAL SPECIFIC PRIVACY NOTICE ADDITIONS

Residents in the following jurisdictions have specific privacy rights. For additional information that may apply to them, they should refer to the body of this Privacy Notice and the Jurisdiction-Specific Notices section.

  • European Economic Area ("EEA")
  • United Kingdom ("UK")
  • Switzerland
  • California
  • Colorado
  • Connecticut
  • Utah
  • Virginia

INFORMATION WE COLLECT

We collect information, including Personal Data, to provide better services to all our users and, in the case of information we collect from individuals connected with our commercial customers or prospects for marketing purposes.

We use “Personal Data” to refer to any information that identifies, relates to, or describes an identifiable natural person. Common examples of Personal Data include name, email address, phone number, digital identity, login name or handle, information about your device, and specific metadata.

“Sensitive Personal Data” refers to a smaller subset of Personal Data considered more sensitive to the individual, such as financial information, health, race, and ethnic origin.

We obtain Personal Data directly from customers and Biller agents who use our Services and directly and indirectly from activity on our Services.

Information We Collect about our Customers

The Personal Data we collect includes, but is not limited to, the following circumstances and data elements:

  • Directly from consumers who use our services.
  • If you register to and use our Sites or Services, including to pay bills, we will require that you or your Biller provide your personal identifiers (such as your name and username), password, contact information (such as your address, U.S. zip code or Canadian postal code, phone number, or email address), financial and billing information (such as billing name and address, account number, credit or debit card number or bank account information), other documents (such as PDFs of your billing statements), details from the bill and bill payment history, as well as information necessary to verify your identity, including personal identifiers (such as your name). Some of this information may be considered “sensitive” Personal Data under applicable privacy laws of Canada or provinces of Canada.
  • When you provide account information, Paymentus uses it to complete the requested task or as otherwise provided in this Privacy Notice.
  • Directly from our customers or their agents or service providers. For example, from documents and electronic files that our customers provide related to the services they engage us.
  • Indirectly from our customers or their agents or service providers. For example, we can use information we collect from our customers while providing services to them.
  • From third parties, such as payment processors and facilitators, that interact with us in connection with our services and from data providers to help us identify contacts within commercial prospects and billers.
  • When you use and interact with Sites and Services, mobile apps, or emails, we automatically collect information about your device and your usage of Sites and Services or emails through cookies, web beacons, or similar technologies. This information includes Internet or other electronic network activity information (such as Internet Protocol (IP) addresses, log files, or other identifiers) to monitor the performance and accuracy of our technology. Please see the Cookies & Similar Technologies section for more details.
  • If you pay a bill via Interactive Voice Recognition (IVR), we may request voice consent to confirm payment authorization, and as a result, we may collect and retain audio information (such as audio recordings through our interactive voice response system);
  • If you voluntarily submit certain information to our Services, such as filling out a survey about your user experience or participating in promotional activities, we collect the information you have provided as part of that request and
  • If you choose to post to our blogs, we may collect information you submit, such as your blog's content and personal identifiers (such as your name). Please note that the information you post on our blogs is public and can be viewed and used by others.
  • We can also access data from your connection within social media platforms and networks connected to our Sites, such as LinkedIn.
  • If a Biller requires an authentication token, we may collect your personal identifiers (such as your Social Insurance Number, date of birth, or driver’s license); this information may be considered “sensitive” Personal Data under specific privacy laws; we will only use this information for authentication purposes.
  • Directly and indirectly from activity on our Sites (www.paymentus.com and www.finovera.com) or sites we maintain for our customers, such as website usage details collected automatically. In addition, like many companies, we use “cookies,” which are small text files a website can use to recognize users who return, facilitate the user’s ongoing access to and use of the site, and track usage behavior of, for example, the webpages you visit.
  • If you express an interest in obtaining additional information about our Services, request customer support, use our “Contact Us” or similar features on our Sites, or download certain content, we may require that you provide us with your personal identifiers and contact information, such as your name, address, phone number, or email address;
  • If you schedule a demo, we may ask you to provide personal identifiers (such as a name, email address, and phone number), professional or employment-related information (such as a company name), and billing information.

How We Use the Information We Collect

We use your Personal Data in ways that are compatible with the purposes for which it was collected or authorized by you and, in some instances, only as permitted by your biller, including for the following purposes:

  • To provide you with Services;
  • To present, operate, maintain, secure, authorize access to, or personalize our Sites and Services, and to respond to and support users;
  • To verify information provided as an additional step to ensure the accuracy of the information supplied to Paymentus;
  • To improve, enhance and further develop our Sites and Services;
  • To communicate with you regarding your bills from or payment obligations to your biller;
  • To enable trusted business partners to provide you with information regarding your bill from or payment obligations to your biller and facilitate your payment of those bills or obligations;
  • To perform data analysis and testing, including analysis of Site activity;
  • To investigate possible fraud and/or attempts to harm us, our users or customers or other violations of and to enforce the Conditions of Use, our Payment Authorization Terms, or this Privacy Notice, and to resolve disputes;
  • To comply with all applicable legal requirements and the rules of payment networks;
  • To inform you about Services and products available from Paymentus or your biller;
  • To offer and administer content, promotion, sweepstakes, surveys, voting polls, or other Site features;
  • To otherwise fulfill the purpose for which the information was provided.
  • For additional information we receive and process, please review our Jurisdiction-Specific Notices section.

Our Legal Basis for Collecting Your Personal Data

Whenever we collect Personal Data from you, we may do so on the following legal bases:

  • Your consent to such collection and use;
  • Out of necessity for the performance of an agreement between you and us, such as your agreement to use our Services or your request for Services;
  • Our legitimate business interest, including but not limited to the following circumstances where collecting or using Personal Data is necessary:
  • To perform services requested by your biller, our customer;
  • Intra-organization transfers for administrative purposes;
  • Product development and enhancement, where the processing enables Paymentus to enhance, modify, personalize, or otherwise improve our services and communications for the benefit of our users and customers and to understand better how people interact with our Sites;
  • Communications and marketing, including processing data for direct marketing purposes and to determine the effectiveness of our promotional campaigns and advertising;
  • Fraud detection and prevention;
  • Enhancement of our cybersecurity, including improving the security of our network and information systems; and
  • General business operations and diligence.

Provided that, in each circumstance, we will weigh the necessity of our processing against your privacy and confidentiality interests, including considering your reasonable expectations, the impact of processing, and any safeguards that are or could be put in place. In all circumstances, we will limit such processing to our legitimate business interest and what is necessary for its purposes.

When You Choose Not to Provide Your Personal Data

Your provision of Personal Data is required to use certain parts of our Services and our programs. If you fail to provide such Personal Data, you may be unable to access and use our Services and/or our programs or parts of our Services and/or our programs. Paymentus may use required fields to guarantee that the necessary data is provided and to ensure the quality of consumer data collected. Auto-complete fields may also be used to minimize the risk of inaccurate data.

Our Retention of Your Personal Data

We determine the appropriate retention period for Personal Data based on the amount, nature, and sensitivity of the data processed, the potential risk of harm from unauthorized use or disclosure of your Personal Data, and whether we can achieve the purposes of the processing through other means, as well as based on applicable legal requirements (such as applicable statutes of limitation).

Your personal data will be deleted after the applicable retention periods expire. If we cannot completely delete data from our systems for technical reasons, we will take appropriate measures to prevent any further use of such data.

Sharing Personal Data

Paymentus may disclose any of the categories of Personal Data listed above for our business and commercial purposes as described below.

  • Billers, service providers, affiliates, and trusted business partners

We disclose Personal Data to your billers (our Paymentus Partners), our service providers, affiliates, and trusted business partners for a business purpose, which includes verifying your identity, to enable our compliance with applicable law and payment network rules when you make a payment or register access to your accounts, to process your payment instructions, to offer you additional channels through which you may receive information about your bills or to make payments, or to test or improve our Services. When we disclose Personal Data for these reasons, we enter into a contract that describes the purpose and requires the recipient to both keep that Personal Data confidential and not use it for any purpose except for the purposes outlined in the contract.

  • Legal and similar disclosures

We may also disclose Personal Data to governmental authorities and in connection with judicial or administrative proceedings as required or permitted by applicable law to meet legal obligations or to defend or assert our rights or the rights of others.

  • Merger, sale, or other asset transfers

If we establish a new related entity, acquire it by or merge with another organization, or substantially all of our assets are transferred to another organization, personal data about our users is often a transferred business asset. If Paymentus itself or substantially all of our assets are acquired, Personal Data about our users may be one of the transferred assets.

How We Protect Personal Data

Paymentus maintains administrative, technical, and physical safeguards to protect the user’s Personal Data and other information against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use. However, certain aspects of Internet communications are inherently not completely secure.

Your Rights and Choices

You may have some rights regarding your Personal Data to the extent local law provides. We will provide access to your Personal Data as required by applicable law. If that information is wrong, we strive to give you ways to update it quickly or to delete it – unless we have to keep that information for legitimate business or legal purposes. To the extent required by applicable law, you may obtain a copy of the Personal Data we maintain about you. To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to the information. For additional information, please review our Jurisdiction-Specific Notices section.

COMMUNICATION

Email

By providing an email address on the Paymentus Sites or Services, you agree that we may contact you in the event of a change in this Privacy Notice, to provide you with any Service-related notices, or if you provided the information other than in connection with making a payment to your biller, to provide you with information about our events, invitations, or related educational information.

SMS Text Messages

Your mobile phone number and personal information will be handled following this Notice. Paymentus will not share customer SMS opt-in information with any third party for any reason other than to deliver the specific services associated with the campaign. Paymentus may share customer personal data, including SMS opt-in or consent status, with third parties that assist in providing messaging services, such as platform providers, phone carriers, and other vendors involved in delivering text messages. You can reply “STOP” anytime to avoid receiving SMS texts.

Opt-out Policy

By providing an email address or phone number for SMS Text on the Paymentus Sites or Services, you agree that Paymentus may contact you in case of a change in this Privacy Notice, to provide you with any Service-related notices, or to provide you with information about our events, invitations, or related educational information.

We currently provide the following opt-out opportunities:

  • At any time, you can follow a link provided in offers, newsletters, or other email messages (except for payment confirmation or service notice emails) received from us or a Paymentus Partner to unsubscribe from the service.
  • At any time, you can contact us at customercare@paymentus.com or at (800) 420-1663 to unsubscribe from the service and opt out of our right, per your consent under the terms of this Privacy Notice, to share your Personal Data.
  • At any time, you can reply “STOP” to opt out of receiving SMS texts.

Notwithstanding anything else in this Privacy Notice, please note that we always reserve the right to contact you in case of a change in this Privacy Notice or provide you with any service-related notices.

WEBSITE

Third-Party Links on Paymentus Websites

The Sites may contain links to webpages operated by parties other than Paymentus. We do not control such websites and are not responsible for their contents, privacy policies, or other practices. These websites and services may have their own privacy policies, which the user will be subject to upon linking to the third party’s website. Paymentus strongly recommends that customers review the third party’s terms and policies.

INTERNATIONAL TRANSFERS

We may, directly or indirectly through third-party entities around the world, process, store, and transfer the information you provide, including your Personal Data, as described in this Privacy Notice. Specifically, the information and Personal Data that we collect may be transferred to, and stored at, a location outside of your jurisdiction. It may also be processed by staff operating outside of your jurisdiction who work for us or for one of the organizations outlined in this Privacy Notice in connection with the activities outlined in this Privacy Notice. By submitting your information and Personal Data using the Sites, you agree to this transfer, storing or processing. We will take all steps necessary to ensure that your Personal Data is treated securely and in accordance with this Privacy Notice. We have put in place commercially reasonable technical and organizational procedures to safeguard the information and Personal Data we collect on the Sites. If we transfer your Personal Data out of your jurisdiction, we will implement suitable safeguards and rely on legally-provided mechanisms to lawfully transfer data across borders to ensure that your Personal Data is protected.

CHILDREN

Our Sites are not intended for children under 16 years of age. We do not intentionally gather Personal Data about visitors under the age of 16. If a child has provided us with Personal Data, a parent or guardian of that child may contact us to have the information deleted from our records. If you believe that we might have any information from a child under 16 in the applicable jurisdiction, please get in touch with us at privacy@paymentus.com. If we learn that we have inadvertently collected the Personal Data of a child under 16, or an equivalent minimum age, depending on jurisdiction, we will delete the information as soon as possible.

COOKIES & SIMILAR TECHNOLOGIES

We and our partners use various technologies to collect and store information when you visit one of our Sites or use our mobile apps, and this may include using cookies or similar technologies to identify your browser or device. We also use these technologies to collect and store personal identifiers (such as your IP address), Internet or other electronic network activity information (such as your browser characteristics, device IDs, and characteristics, operating system version, and language preferences), and information concerning your usage of our Sites (including the link you used to reach a given webpage) when you interact with our Site or services from our partners, such as advertising services from our third-party advertising and analytics partner Google Analytics and similar partners. Please see our Cookie Notice for more details.

The technologies we use for this automatic data collection may include:

Cookies

A cookie is a small file placed on your computer's hard drive. You may refuse to accept browser cookies by activating the appropriate settings on your browser. However, if you select this setting, you may be unable to access certain parts of our services. Unless you have adjusted your browser setting to refuse cookies, our system will issue cookies when you direct your browser to our services. For more information about our use of cookies, including details on how to opt out of certain cookies, please see our Cookie Notice.

Web Beacons

Pages of our services or our e-mails may contain small electronic files known as web beacons (also referred to as clear GIFs, pixel tags, and single-pixel GIFs) that permit us, for example, to count users who have visited those pages or opened an e-mail and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).

Clickstream Data

Clickstream data is information our computers collect when you request webpages from the Sites. It may include information such as the page served, the time spent viewing the page, the request's source, the type of browser making the request, the preceding page viewed, and similar information. Clickstream data permits us to analyze how visitors arrive at the Sites, what type of content is widespread, and what type of visitors at the gate are interested in particular kinds of content on the Sites.

We use information collected from cookies and other technologies to improve your user experience and the overall quality of our services. We may use your Personal Data to see which web pages you visit at our Site, how you navigate through and interact with our Site and mobile apps, which websites you visited before coming to our Site, and where you go after you leave our Site. We can then develop statistics that help us understand how our visitors use our Site and mobile apps and how to improve them. We may also use the information we obtain about you in other ways for which we provide specific notice at the time of collection.

However, some third-party sites keep track of your browsing activities when they serve you content, enabling them to tailor what they present. If you are visiting such sites, your browser may include controls to block and delete cookies, web beacons, and similar technologies to allow you to opt out of data collection through those technologies.

HOW TO CONTACT US

If you have any specific questions about this Privacy Notice, you can contact us via email or by writing to us at the address below:

  • Send e-mail to: privacy@paymentus.com
  • Send mail to our address:

    Paymentus Corporation
    Attn: Privacy Notice Inquiry
    11605 North Community House Road, Suite 300
    Charlotte, NC 28277
    U.S.A.

PRIVACY RIGHTS

Certain jurisdictions have specific legal requirements and grant privacy rights concerning personal information, and we will comply with restrictions and any requests you submit as required by applicable law. For example, you may have the right to

  • (1) obtain a copy of personal information we maintain about you in a portable format;
  • (2) correct inaccuracies or incompletion in your personal information;
  • (3) object to the continued processing or use of your personal information;
  • (4) complain to a supervisory authority;
  • (5) or request that personal information be blocked, anonymized or deleted.

In addition, if you believe that personal information we maintain about you is inaccurate and subject to applicable law, you may have the right to request that we correct or amend the information by contacting us as indicated in the “How to Contact Us” section below. You may also have the right not to be discriminated against for exercising your privacy rights. If you are a California, Colorado, Connecticut, Virginia, EEA, Switzerland, or UK resident, see our Jurisdiction-Specific Notices section below for additional information on exercising rights under those jurisdictions' laws. If you are located outside that jurisdiction and seek to exercise your rights under the law of another jurisdiction, please get in touch with us by emailing privacy@paymentus.com.

To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to the information. When you make a request, we may require that you provide information and follow procedures so that we can verify your identity (and the applicable jurisdiction). Our verification steps may differ depending on your jurisdiction and the request. We will attempt to match the information you provide in your request to information we already have on file to verify your identity. If we can confirm your request, we will process it. If we cannot verify your request, we may ask you for additional information to help us do so.

We will respond to your request within the time period required by applicable law. However, we may not always be able or required to comply with your request, in whole or part, and we will notify you in that event.

JURISDICTION SPECIFIC PRIVACY NOTICES

CALIFORNIA RESIDENTS

The following information is provided to California residents to comply with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (the “CCPA”) and other California privacy laws and forms a part of the Paymentus Privacy Notice. Any terms defined in the CCPA have the same meaning when used in this Privacy Notice.

What We Collect & How We Use Information We Collect

During the last twelve (12) months, we have collected the following categories of Personal Data from consumers, depending on how they use our Services.

Please see our Cookie Notice for information about the collection and use of personal information by third parties who process information collected by cookies and related technologies that we permit them to use on the Site.

Except as indicated in the "Information We Collect" section and in the "California Job Applicants" section, we do not seek to collect any additional "sensitive personal information" (as defined in the CCPA).

Category

(*may constitute "sensitive personal information" under the CCPA)

Type of Identifiers We Collect

Criteria used to determine retention periods

Sold or Shared

Disclosed To

A. Identifiers

First and last name, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account number for bills you review or pay

The duration of our relationship with you; the time necessary to complete a transaction; whether your Personal Data is sensitive; whether you expressly consented to retain the data; and our legal, contractual, or similar obligations to keep or delete the data.

Not sold; shared

Service providers, affiliates, billers, partners

B. Personal Data categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))

Name, signature, address, telephone number, bank account number, credit card number, debit card number

Same as above.

Not sold or shared

Service providers, affiliates, billers, partners

C. Commercial information

Bill payment history, utility services consumption information

Same as above.

Not sold or shared

Service providers, affiliates, billers, partners

D. Internet or another similar network activity

Information on a consumer’s interaction with a website, application, or advertisement

Same as above.

Not sold; shared

Service providers, affiliates, billers, partners

E. Audio, electronic, visual, thermal, olfactory, or similar information

Audio recordings

Same as above.

Not sold or shared

Service providers, affiliates, billers, partners

California Residents who are Job Applicants

When you apply for a job with Paymentus, information may be collected about you in multiple ways: you may provide it to us in connection with your application; we may make observations in the application process or collect information from public information sources; or you may authorize us to collect information from other sources, such as a former employer or reference.

The following table describes our practices regarding information submitted in the job application process. If you use our Sites in the job application process, additional information may be automatically collected, as described above.

Category (* may constitute "sensitive personal information" under the CCPA)

Examples

Sold or shared

Criteria used to determine retention periods

Disclosed to

Personal Identifiers

name, email address, phone number, and contact address, username, social media handle

Not sold or shared

The duration of our relationship with you; the length of time necessary to complete a transaction; whether your Personal Data is a sensitive type; whether you specifically consented to retain the data; and our legal, contractual or similar obligations to retain or delete the data.

Service Providers

Protected Classifications*

gender, race and ethnicity, date of birth

Not sold or shared

Same as above.

Service Providers

Location Information

Coarse information (e.g., ZIP code, IP address)

Not sold or shared

Same as above.

Service Providers

Professional or employment-related information.

employer’s name, employer's address

Not sold or shared

Same as above.

Service Providers

Education Information

institutions attended, degrees and certifications attained

Not sold or shared.

Same as above.

Service Providers

In certain circumstances, you may submit your application for employment through a third-party service that displays our job posting. We do not control the privacy practices of these third-party services. Please review their privacy policies carefully before submitting your application materials.

Rights Specific to California Residents

Under the CCPA, a California resident has the following rights: (1) to request additional information about our data collection, use, disclosure, and sales practices in connection with your Personal Data; (2) to request the specific Personal Data collected about you during the previous 12 months; (3) to request the deletion of the Personal Data we have about you; (4) to request a restriction on certain processing of Personal Data; and (5) to request correction of inaccurate information. You may not be discriminated against for exercising your California privacy rights. You may submit a request to exercise your rights under the CCPA through one of two means:

Upon receiving your request, we will confirm receipt of your request by email, or if you are registered in our customer portal, we may do so by sending a message to you in the portal. To help protect your privacy and maintain security, we may take steps to verify your identity before granting you access to the information. In some instances, such as a request to delete Personal Data, we may first separately confirm that you would like for us to delete your Personal Data before acting on your request.

We aim to respond to your request as soon as reasonably practicable and consistent with applicable laws. We will inform you of the reason and extension period in writing if we require more time. We will deliver our written response by mail or electronically, at your option. You may authorize another individual or a business registered with the California Secretary of State, called an authorized agent, to make requests on your behalf through these means. We may have a reason under the law why we do not have to comply with your request or why we may comply with it in a more limited way than you anticipated. If we do, we will explain that to you in our response.

California residents are also entitled to contact us to request information about whether we have disclosed Personal Data to third parties for the third parties’ direct marketing purposes. Under the California “Shine the Light” law, California residents may opt out of our disclosure of Personal Data to third parties for their direct marketing purposes.

You may opt out of sharing your Personal Data with third parties for marketing purposes. To make such a request, you should send

  1. (a) an email to privacy@paymentus.com with the subject heading “California Privacy Rights” or
  2. (b) a letter to us at the address listed in the “How to Contact Us.” 

In your request, please attest that you are a California resident and provide a current California address for our response. Please be aware that not all information sharing is covered by California's privacy rights requirements, and only information on covered sharing will be included in our response. We reserve the right not to respond to requests submitted to addresses other than those specified in this paragraph.

Colorado Residents

Colorado residents have certain rights around Paymentus' collection, use, and sharing of their Personal Data. Paymentus does not sell your Personal Data and will not do so in the future without providing you with notice and an opportunity to opt-out of such sale as required by law. Similarly, Paymentus does not engage in profiling in furtherance of decisions that produce legal or similarly significant effects. Paymentus engages in “targeted advertising” as that term is defined in the Colorado Privacy Act ("CPA").

Paymentus collects various categories of Personal Data when you use our Sites or Services. A more detailed description of the information Paymentus collects and how we use it is provided above in the "Information We Collect" section. The "Sharing Personal Data" section describes the categories of third parties with whom we share Personal Data, and what information may be shared under different circumstances. If you are a resident of Colorado, starting July 1, 2023, you have the right to (1) request to know what Personal Data has been collected about you, and to access that information; (2) request to correct inaccuracies in your Personal Data; (3) request deletion of your Personal Data, subject to exceptions; and (4) obtain a copy of your Personal Data. Also, a Colorado consumer may not be discriminated against for exercising the consumer’s Colorado privacy rights. You can learn more about how to submit a data rights request, or appeal denial of a request, by emailing privacy@paymentus.com.

Connecticut Residents

Connecticut residents have certain rights around Paymentus' collection, use, and sharing of their Personal Data. Paymentus does not sell your Personal Data and will not do so in the future without providing you with notice and an opportunity to opt-out of such sale as required by law. Similarly, Paymentus does not engage in profiling in furtherance of decisions that produce legal or similarly significant effects. Paymentus engages in “targeted advertising” as that term is defined in the Connecticut Data Privacy Act ("CTDPA").

Paymentus collects various categories of Personal Data when you use our Sites or Services. A more detailed description of the information Paymentus collects and how we use it is provided above in the section titled "Information We Collect." In the section titled "Sharing Personal Data" describes the categories of third parties with whom we share Personal Data, and what information may be shared under different circumstances.

If you are a resident of Connecticut, starting July 1, 2023 you have the right to:

  • request to know what Personal Data has been collected about you, and to access that information;
  • request to correct inaccuracies in your Personal Data;
  • request deletion of your Personal Data, subject to exceptions; and
  • obtain a copy of your Personal Data. Also, a Connecticut consumer may not be discriminated against for exercising the consumer’s Connecticut privacy rights.

You can learn more about how to submit a data rights request, or appeal denial of a request, by emailing privacy@paymentus.com.

Virginia Residents

Virginia residents have certain rights around Paymentus’ collection, use, and sharing of their Personal Data. Paymentus does not sell your Personal Data and will not do so in the future without providing you with notice and an opportunity to opt-out of such sale as required by law. Similarly, Paymentus does not engage in profiling in furtherance of decisions that produce legal or similarly significant effects. Paymentus engages in “targeted advertising” as that term is defined in the Virginia Consumer Data Protection Act ("VCDPA").

Paymentus collects various categories of Personal Data when you use our Sites or Services. A more detailed description of the information Paymentus collects and how we use it is provided above in the "Information We Collect" section. The "Sharing Personal Data" section escribes the categories of third parties with whom we share Personal Data, and what information may be shared under different circumstances.

If you are a resident of Virginia, starting January 1, 2023 you have the right to

  • request to know what Personal Data has been collected about you and to access that information;
  • request to correct inaccuracies in your Personal Data;
  • request deletion of your Personal Data, subject to exceptions; and
  • obtain a copy of your Personal Data.

Also, a Virginia consumer may not be discriminated against for exercising the consumer’s Virginia privacy rights. You can learn more about how to submit a data rights request, or appeal denial of a request, by emailing privacy@paymentus.com.

EEA, Switzerland, and UK Residents

The following information is provided to EEA residents to comply with the European Union’s General Data Protection Regulation (“GDPR”), and corresponding legislation in the UK and Switzerland and forms a part of the Paymentus Privacy Notice. Any terms defined in the GDPR have the same meaning when used in this notice. If you are resident in the EEA, Switzerland, and UK, you may have the following rights:

  • The right to be informed. You are entitled to be informed of the use of your Personal Data. This Privacy Notice provides such information to you.
  • The right of access. You have the right to request a copy of your Personal Data which we hold about you.
  • The right of correction: You have the right to request correction or changes of your Personal Data if it is found to be inaccurate or out of date.
  • The right to be forgotten: You have the right to request us, at any time, to delete your Personal Data from our servers and to erase your Personal Data when it is no longer necessary for us to retain such data. Note, however, that deletion of your Personal Data will likely impact your ability to use our services.
  • The right to object (opt-out): You have the right to opt out of certain uses of your Personal Data, such as direct marketing, at any time.
  • The right to data portability: You have the right to a “portable” copy of your Personal Data that you have submitted to us. Generally, this means your right to request that we move, copy or transmit your Personal Data stored on our servers / IT environment to another service provider’s servers / IT environment.
  • The right to refuse to be subjected to automated decision making, including profiling: You have the right not to be subject to a decision and insist on human intervention if the decision is based on automated processing and produces a legal effect or a similarly significant effect on you.
  • The right to lodge a complaint with a supervisory authority. You may also have the right to make a GDPR complaint to the relevant Supervisory Authority. A list of Supervisory Authorities is available here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.

To exercise your rights, please submit your request to privacy@paymentus.com or by using the contact information provided below and we will consider your request in accordance with applicable law. For your protection, we may need to verify your identity before responding to your request, such as verifying that the email address from which you send the request matches your email address that we have on file. If we no longer need to process Personal Data about you in order to provide our Services or our Site, we will not maintain, acquire or process additional information in order to identify you for the purpose of responding to your request. In some cases, our ability to uphold these rights for you may depend upon our obligations to process Personal Data for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the Services you have requested. Where this is the case, we will inform you of specific details in response to your request. We endeavor to respond to a verifiable consumer request within 30 days of its receipt consistent with applicable law. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.


Paymentus Bill Payment Cookie Notice

We use cookies and similar tools across our Sites to improve their performance and security and to enhance your user experience. This Cookie Notice explains how we do that.

What are cookies?

Cookies are small text files which a website may put on your computer or mobile device when you first visit a site or page. The cookie will help the website to recognize your device the next time you visit. Cookies may be used to remember your preferences and to help you navigate within a website. Web beacons or similar technology have similar functions. We use the term “cookies” in this Cookie Notice to refer to cookies as well as web beacons, pixels, or similar technologies.

There are many functions cookies serve. For example, they can help us to remember your username and preferences, analyze how well our Sites are performing and allow us to recommend content we believe will be most relevant to you.

Certain cookies contain personal information – for example, if you click to “remember me” when logging in, a cookie will store your username.

What sort of cookies does Paymentus use?

Essential Cookies

Some cookies are essential for the operation of our Sites. For example, some cookies allow us to identify registered users and ensure they can access the subscription-only pages, or they may facilitate page navigation or assist with security checks.

Performance Cookies

We utilize other cookies to analyze how our visitors use our Sites and to monitor website performance. This allows us to provide a high-quality experience by customizing our offering and quickly identifying and fixing any issues that arise. For example, we might use performance cookies to keep track of which pages are most popular, which method of linking between pages is most effective, and to determine why some pages are receiving error messages.

Functionality Cookies

We use functionality cookies to allow us to remember your preferences. For example, cookies save you the trouble of typing in your username every time you access the site, and recall your preferences, such as which sections of the Sites you want to see when you log in.

Behaviorally Targeted Advertising Cookies

These cookies are used to highlight articles, other content, or services that we think will be of interest to you based on your use of the Sites. They may also be utilized by third parties, such as when a third-party consent feed has been included on the Site so that you can view videos.

Does anyone else use cookies on our Site?

We do use or allow certain third parties to serve cookies on our Sites. We may allow third parties to serve cookies to help identify fraudulent or automated traffic on our Sites. We may also use third party cookies to help us with market research, improving website functionality, and enforcing website terms and policies. For example, like many companies, we use Google Analytics to help us evaluate our website traffic. You can see how Google Analytics uses cookie information across various websites by visiting https://policies.google.com/technologies/partner-sites, or any successor webpage that Google may provide.

Which specific cookies do we use?

The “Cookies Used on Our Sites” table lists cookies that may be used on our Sites.

COOKIES USED ON OUR SITES

Cookie and Cookie Provider

Purpose

Type of Cookie (Essential, Functional, Performance / Analytics, Behaviorally Targeted Advertising)

Privacy Notice of Provider

Pardot (visitor_id***, lpv48232)

Marketing and advertising

Behaviorally Targeted Advertising

https://www.salesforce.com/company/privacy/

Clickagy (cb, chs)

Marketing and advertising

Behaviorally Targeted Advertising

https://www.zoominfo.com/about-zoominfo/privacy-policy

Google Tag Manager (_gat_gtag_UA***)

Store preferences

Performance

https://privacy.google.com/businesses/rdp/

Google Ads and Doubleclick (1P_JAR, NID, IDE)

Marketing and advertising

Behaviorally Targeted Advertising

https://privacy.google.com/businesses/rdp/

Google Analytics (_gid, _ga, AEC, OTZ)

Services usage analytics

Essential

https://privacy.google.com/businesses/rdp/

Google (GRECAPTCHA)

Protects forms on the Site from auto-submissions by bots

Essential

https://privacy.google.com/businesses/rdp/

Youtube (YSC, PREF, VISITOR_INFO1_LIVE)

Maintains statistics of what YouTube videos are viewed on the Website (YSC). Stores user preferences (PREF). Measures users’ bandwidth to determine which interface to show (VISITOR_INFO1_LIVE)

Functional

https://privacy.google.com/businesses/rdp/

Zoom Information (visitorID, _cf_bm)

Prospecting database

Behaviorally Targeted Advertising

https://www.zoominfo.com/about-zoominfo/privacy-policy

LiveIntent Inc./Lead Forensics (lidid)

Marketing and advertising

Behaviorally Targeted Advertising

https://www.leadforensics.com/privacy-policy/

DemandBase/AtData (f/k/a TowerData) (pxrc, rlas3)

Marketing and advertising

Behaviorally Targeted Advertising

https://www.demandbase.com/privacy/

OneTrust (OptanonConsent, OptanonAlertBoxClosed)

OneTrust opt-in control cookies

Essential

https://www.onetrust.com/privacy-notice/

Vimeo, LLC (JESESSIONID, vuid)

Video player

Functional

https://vimeo.com/privacy

Cookie policy: https://vimeo.com/cookie_policy

Cloudflare (_cf_bm)

Supports bot management

Essential

https://www.cloudflare.com/privacypolicy/

Craft CMS (CRAFT_CSRF_TOKEN, CraftSessionId)

Associated with the Craft content management system

Essential

https://craftcms.com/privacy

(gated-webinar-XXX, gated-blog)

Set when users access gated content

Functional

(alert-bar-status)

Tracking whether the alert bar has been dismissed for future visits

Functional

Can a website user block a cookie?

Your browser may allow you to disable cookies, or the third party listed may provide an opt-out tool. Also, the following websites provide useful information about cookies, and may permit you to control the use of cookies by certain third parties:

Like most websites, we use Google Analytics to collect and process certain website usage data. To learn more about Google Analytics and how to opt out of personalized ads from Google, see: https://tools.google.com/dlpage/gaoptout.

Note that, when you opt out of personalized advertising, you may continue to see online advertising on the Site and/or our ads on other websites and online services. Please remember that if you do choose to disable cookies, you may find that certain sections of our websites do not work properly.

More Information

More detail on how businesses use cookies can be found at www.allaboutcookies.org.

What about changes to this Cookie Notice?

We may revise this Cookie Notice from time to time in order to reflect changes in our use of cookies, changes in the law, changes in our services, or best practices. The revised version will be effective when it is posted and apply to personal information received after that date. If we make any material changes, we will provide notice of such changes on the pertinent website for a reasonable period of time (which we estimate will be approximately two weeks). We encourage you to review this Cookie Notice periodically, especially if you don’t visit our Sites regularly.

PAYMENTUS PARTNERS

Paymentus clients (“Paymentus Partners”) engage us to deliver Services to their employees, customers, and other users. We treat Paymentus Partner Information (as defined below), Paymentus Partner Contact Information (as defined below), and Archival Information (as defined below) as the confidential and proprietary information of our Paymentus Partners, subject to the terms of the Paymentus Master Service Agreement General Term and Conditions and any other service agreement between Paymentus and the Paymentus Partner. The Personal Data that we collect relating to our Paymentus Partners includes:

Paymentus Partner Information

We collect Personal Data about individuals within Paymentus Partner Informationour Paymentus Partners organization (“Paymentus Partner Information”). Paymentus Partner Information may include information related to the Paymentus Partner’s account, including personal identifiers (such as name, work e-mail address), contact information (such as work phone number), and professional or employment-related information (such as job title or similar kinds of information). We use Paymentus Partner Information to support the Paymentus Partner account, maintain our business relationship with the Paymentus Partner, respond to Paymentus Partner inquiries, or perform accounting functions. Paymentus Partners may update their personal information and passwords by logging into the Paymentus Platform and updating their account. Paymentus Partners may contact Paymentus support to delete their Personal Data. In some cases, we may be unable to delete Paymentus Partner Information.

Paymentus Partner Contact Information

We collect information about contacts, such as employees, customers, and others, that may be uploaded into the Paymentus platform (“Paymentus Partner Contact Information”). Paymentus Partner Contact Information may include personal identifiers (such as name or e-mail address), contact information (such as a phone number), or professional or employment-related information (such as job title or similar kinds of information). We use Paymentus Partner Contact Information to provide Services to such contacts. Paymentus Partners may update or delete their Paymentus Partner Contact Information in the Paymentus platform. Paymentus Partners may also contact Paymentus support to update and delete such information. In some cases, we may not be able to delete such information.

Archival Information

We collect communications information for archival purposes on behalf of, and as directed by, our Paymentus Partners. This information may include emails, texts, websites, social media messages or posts, and other data or electronic communications (“Archival Information”). Archival Information includes data about our Paymentus Partners and the third parties they correspond with. The Paymentus Partner is obligated to obtain all necessary consents and comply with all applicable laws concerning the Paymentus Partner’s communications. Individuals must contact the applicable Paymentus Partner to correct, amend, or delete their information or to opt out of any collection, use, or disclosure of their information by our Paymentus Partner.

Business Contacts

We may receive your contact information, such as your personal identifiers (including your name, telephone number, and email address) and/or professional or business-related information (including your business address), through our online or offline interactions with you, such as when we work together on a project or discuss opportunities to work together. We may send you emails or call you with information about our business dealings, news, or marketing information to communicate with you for business purposes.

If you believe that your Personal Data has been provided to us improperly or you wish to exercise any rights you may have relating to your Personal Data, please contact us by using the information set out in the “How to Contact Us” section below.

Automatically Collected Information

Paymentus automatically collects information about how our Partners use our Services. For more information, please see the Cookies & Similar Technologies section.

CHANGES TO THIS PRIVACY NOTICE

Our Privacy Notice may change from time to time. Without your explicit consent, we will not reduce your rights concerning information collected under this Privacy Notice. We will post any privacy notice changes on this page, and if the changes are material, we may provide a more prominent notice (including, for certain services or programs, email notification of privacy notice changes) for a reasonable period of time. Nevertheless, you should review this Privacy Notice from time to time to be sure you are aware of the most recent version.