Paymentus Websites Privacy Notice

Paymentus Corporation and its affiliates (referred to herein as “Paymentus”, “we”, “our”, or “us”) recognize the importance of protecting personal data we may collect from visitors and any other individual or entity (“users”, “you”, or “your”) who visit our websites or otherwise provide us with personal data. This Paymentus Website Privacy Notice (“Privacy Notice”) applies to data collected by Paymentus and applies to your use of our websites, www.paymentus.com and www.ir.paymentus.com, and other websites where this Privacy Notice is posted (each, a “Site” and collectively the “Sites”), software, communications, capabilities and services (“Services”) that accessible on or by any of our Sites, but excluding services or websites that state that they are offered under a different privacy notice or policy. This Privacy Notice also applies to information we may collect from representatives of our clients (e.g. billers) and from others directly at trade shows or through similar interactions.

Paymentus is the data controller of personal data collected through the Site and Services.

Our Privacy Notice explains: (1) what information we collect; (2) why we collect it; (3) how we use that information; (4) how we may share it; and (5) the choices we offer, including how to access and delete information. Specifically, our Privacy Notice covers the following topics:

• Site Conditions of Use
• Personal Data We Collect
• Cookies & Similar Technologies
• How We Use the Personal Data We Collect
• Our Legal Basis for Collecting Personal Data
• When You Choose Not to Provide Personal Data
• Our Retention of Your Personal Data
• Disclosing Personal Data
• Communications
• Third Party Links on the Sites
• International Transfers
• How We Protect Personal Data
• Children
• Changes to This Privacy Notice
• How to Contact Us
• Privacy Rights
• Jurisdiction-Specific Notices
• Cookie Notice

Please familiarize yourself with our privacy practices and let us know if you have any questions. By using the Sites, you signify your acceptance of this Privacy Notice. If you do not agree to this Privacy Notice, please do not use the Sites.

If you have any questions or comments about this Privacy Notice, please submit a request to privacy@paymentus.com.

Residents in the European Economic Area (“EEA”), United Kingdom (“UK”), Switzerland, California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia should also review the Privacy Rights and Jurisdiction-Specific Notices sections in this Privacy Notice.

Residents of Canada should refer to the Payment Website Privacy Notice – Canada.

Site Conditions of Use

By accessing or using the Sites in any manner, you also agree to be bound by our Website Conditions of Use. Please read the Website Conditions of Use carefully. If you do not accept all of the terms and conditions contained in or incorporated by reference into the Website Conditions of Use, please do not use the Sites.

Personal Data We Collect

We collect information, including Personal Data (as defined below), to provide better services to all our users and, in the case of information we collect from individuals connected with our commercial customers or prospects, for marketing purposes. We use the term “Personal Data” to refer to any information that identifies, relates to, or describes an identified or identifiable natural person. Common examples of Personal Data include: full name, email address, digital identity, such as a login name or handle, information about your device, and certain metadata.

“Sensitive Personal Data” refers to a smaller subset of Personal Data which is considered more sensitive to the individual, such as a race and ethnic origin.

The Personal Data we collect includes, but is not limited to, the following circumstances and data elements:

• If you express an interest in obtaining additional information about our Services, request customer support, use our How to Contact Us or similar features on our Sites, or download certain content, we may require that you provide to us your personal identifiers and contact information, such as your name, address, phone number, or email address;

• If you sign up to receive investor email alerts, we may require that you provide us contact information, such your email address;

• If you schedule a demo, we may ask you to provide personal identifiers (such as a name, email address, phone number), professional or employment-related information (such as a company name) and billing information;

• If you use and interact with our Sites or emails, we automatically collect information about your device and your usage of our Sites or emails through cookies, web beacons or similar technologies, including Internet or other electronic network activity information (such as Internet Protocol (IP) addresses, log files, or other identifiers). Please see the Cookies & Similar Technologies section, below for more information; and

• If you choose to engage with our virtual learning opportunities, we may ask you to provide personal identifiers (such as name and email address) and professional or employment-related information (such as job title or company name).

Job Application Information

Personal Data required to apply for employment may be collected by us directly through the Sites, in-person, over the phone, or by email, or may be collected on our behalf by our contracted third-party administrator(s) for applicant tracking purposes and by background check providers. These third-party administrators are permitted to process the information you provide only for purposes of providing services to us. We collect the information you provide to us, such as your name, email address, phone number, address, the content of any comments, your resume, and any cover letter you provide. We may also collect certain information that is considered Sensitive Personal Data under certain laws. If you are a California resident, please see the California Residents that are Job Applicants section.

Social Media Information

Information on a social media platform may be used by us. We may use the information to respond, to promote our business and services, and in the normal course of our business operations. We may collect Personal Data, such as your social media username, and other personal characteristics that you have made publicly available on the social media website. Note that the third-party operators of social media websites also receive such information, and their use of your Personal Data is governed by their own privacy policies.

Paymentus Partners

Paymentus clients (“Paymentus Partners”) engage us to deliver Services to their employees, customers and other users. We treat Paymentus Partner Information (as defined), Paymentus Partner Contact Information (as defined), and Archival Information (as defined) as the confidential and proprietary information of our Paymentus Partners, subject to the terms of the Paymentus Terms of Use and any other service agreement between Paymentus and the Paymentus Partner. The Personal Data that we collect relating to our Paymentus Partners includes:

Paymentus Partner Information

We collect Personal Data about individuals within our Paymentus Partners organization (“Paymentus Partner Information”). Paymentus Partner Information may include information related to the Paymentus Partner’s account, including personal identifiers (such as name, work e-mail address) contact information (such as work phone number) and professional or employment-related information (such as job title or similar kinds of information). We use Paymentus Partner Information to support the Paymentus Partner account, maintain our business relationship with the Paymentus Partner, respond to Paymentus Partner inquiries, or perform accounting functions. Paymentus Partners may update personal information and password by logging into the Paymentus Platform and updating their account. Paymentus Partners may contact Paymentus support in order to delete their Personal Data. In some cases, we may not be able to delete Paymentus Partner Information.

Paymentus Partner Contact Information

We collect information about any contacts, such as employees, customers, and others, that may be uploaded into the Paymentus platform (“Paymentus Partner Contact Information”). Paymentus Partner Contact Information may include personal identifiers (such as name or e-mail address), contact information (such as a phone number), or professional or employment-related information (such as job title or similar kinds of information). We use Paymentus Partner Contact Information for the purposes of providing Services to such contacts. Paymentus Partners may update or delete their Paymentus Partner Contact Information in the Paymentus platform. Paymentus Partners may also contact Paymentus support in order to update and delete such information. In some cases, we may not be able to delete such information.

Archival Information

We collect communications information for archival purposes on behalf of, and as directed by, our Paymentus Partners. This information may include emails, texts, websites, social media messages or posts, and other forms of data or electronic communications (“Archival Information”). Archival Information includes data about our Paymentus Partners and the third parties they correspond with. It is the Paymentus Partner’s obligation to obtain all necessary consents and to comply with all applicable laws with respect to the Paymentus Partner’s communications. Individuals must contact the applicable Paymentus Partner in order to correct, amend, or delete their information, or to opt out of any collection, uses or disclosure of their information by our Paymentus Partner.

Automatically Collected Information

We collect information automatically about how our Paymentus Partners use our Services. Please see the Cookies & Similar Technologies section for more information.

Business Contacts

We may receive your contact information, such as your personal identifiers (including your name, telephone number, and email address) and/or professional or business-related information (including your business address), through our online or offline interactions with you, such as when we work together on a project or discuss opportunities to work together. We may send you emails or call you with information about our business dealings, news, or marketing information to communicate with you for business purposes.

If you provide us with information regarding another individual, you represent that you have that person’s consent to give us their information and to permit us to use the information in accordance with this Privacy Notice. If you believe that your Personal Data has been provided to us improperly, or to otherwise exercise rights you may have relating to your Personal Data, please contact us by using the information set out in the How to Contact Us section.

We obtain Personal Data from the following categories of sources:

• Directly from consumers who use our Services.

• Directly from our customers or their agents or service providers. For example, from documents and electronic files that our customers provide to us related to the services for which they engage us.

• Indirectly from our customers or their agents or service providers. For example, through information we collect from our customers in the course of providing services to them.

• Directly and indirectly from activity on our Sites. For example, from website usage details that are collected automatically. In addition, like many companies, we use “cookies” which are small text files a website can use to recognize repeat users, facilitate the user’s ongoing access to and use of the site and to track usage behavior of, for example, the webpages you visit.

• From third parties, such as payment processors and facilitators that interact with us in connection with the services we perform, and from data providers to help us identify contacts within commercial prospects and billers.

• From social media platforms and networks that you use in connection with our Sites, such as LinkedIn.

Cookies & Similar Technologies

Paymentus allows you to choose your cookie options on our Sites. When you choose to allow certain cookies, we and our partners use various technologies to collect and store information and this may include using cookies or similar technologies to identify your browser or device. We also use these technologies to collect and store personal identifiers (such as your IP address), Internet or other electronic network activity information (such as your browser characteristics, device IDs and characteristics, operating system version, and language preferences) and information concerning your usage of our Sites (including the link you used to reach a given webpage) when you interact with our Sites or services from our partners, such as advertising services from our third-party advertising and analytics partner Google Analytics and similar partners. Please see our Cookie Notice for more details.

Depending on your cookie choices, we may use the following types of technologies for automatic data collection:

Cookies

A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our services. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our services. For more information about our use of cookies, including details on how to opt out of certain cookies, please see our Cookie Notice.

Clickstream Data

Clickstream data is information collected by our computers when you request webpages from the Sites. Clickstream data may include information such as the page served, the time spent viewing the page, source of the request, type of browser making the request, the preceding page viewed and similar information. Clickstream data permits us to analyze how visitors arrive at the Sites, what type of content is popular and what type of visitors in the gate are interested in particular kinds of content on the Sites.

We use information collected from cookies and other technologies to improve your user experience and the overall quality of our services. We may use your Personal Data to see which webpages you visit at our Sites, how you navigate through and interact with our Sites, which website you visited before coming to our Sites, and where you go after you leave our Sites. We can then develop statistics that help us understand how our visitors use our Sites and how to improve them. We may also use the information we obtain about you in other ways for which we provide specific notice at the time of collection.

However, some third-party sites do keep track of your browsing activities when they serve you content, which enables them to tailor what they present to you. If you are visiting such sites, your browser may include controls to block and delete cookies, pixels and similar technologies, to allow you to opt-out of data collection through those technologies.

How We Use the Personal Data We Collect

We use your Personal Data in ways that are compatible with the purposes for which it was collected or authorized by you and in certain cases only as permitted by your biller, including for the following purposes:

• To provide you with Services;

• To present, operate, maintain, secure, authorize access to, or personalize our Sites and Services, and to respond to and support users;

• To verify information provided, as an additional step to ensure the accuracy of information provided to Paymentus;

• To improve, enhance and further develop our Sites and Services;

• To perform data analysis and testing, including analysis of Site activity;

• To investigate possible fraud and/or attempts to harm us, our users or customers or other violations of and to enforce the Website Conditions of Use, the Paymentus Payment Authorization Terms, or this Privacy Notice, and to resolve disputes;

• To comply with all applicable legal requirements;

• To inform you about Services and products available from Paymentus or your biller;

• To offer and administer content, promotion, sweepstakes, surveys, voting polls or other Site features; and

• To otherwise fulfill the purpose for which the information was provided.

For additional information on the information we receive and process, please review our Jurisdiction-Specific Notices section.

Our Legal Basis for Collecting Personal Data

Whenever we collect Personal Data from you, we may do so on the following legal bases:

• Your consent to such collection and use;

• Out of necessity for the performance of an agreement between us and you, such as your agreement to use our Services or your request for Services;

• Our legitimate business interest, including but not limited to the following circumstances where collecting or using Personal Data is necessary for:

• To perform services requested by your biller, our customer;

• Intra-organization transfers for administrative purposes;

• Product development and enhancement, where the processing enables Paymentus to enhance, modify, personalize, or otherwise improve our services and communications for the benefit of our users and customers, and to better understand how people interact with our Sites;

• Communications and marketing, including processing data for direct marketing purposes, and to determine the effectiveness of our promotional campaigns and advertising;

• Fraud detection and prevention;

• Enhancement of our cybersecurity, including improving the security of our network and information systems; and

• General business operations and diligence;

Provided that, in each circumstance, we will weigh the necessity of our processing for the purpose against your privacy and confidentiality interests, including considering your reasonable expectations, the impact of processing, and any safeguards which are or could be put in place. In all circumstances, we will limit such processing for our legitimate business interest to what is necessary for its purposes.

When You Choose Not to Provide Personal Data

Your provision of Personal Data is required in order to use certain parts of our Services and our programs. If you choose not to provide such Personal Data, you may not be able to access and use our Services and/or our programs, or parts of our Services and/or our programs. Paymentus may use required fields to guarantee that the required amount of necessary data is provided to ensure quality of consumer data collected. Auto-complete fields may also be used to minimize the risk of inaccurate data.

Our Retention of Your Personal Data

We determine the appropriate retention period for Personal Data on the basis of:

• the amount, nature and sensitivity of your Personal Data processed;

• whether there is an ongoing legal claim that relates to any business (or otherwise) relationship you have with us, or that is otherwise related to your relationship with us;

• the length of time necessary to complete a transaction;

• whether you specifically consented to retain the data;

• the potential risk of harm from unauthorized use or disclosure of your Personal Data;

• whether any applicable law, statute, or regulation allows for a specific retention period;

• whether we can achieve the purposes of the processing through other means; and

• whether there are contractual or legal obligations that exist that require us to retain the data for a period of time

These criteria may also mean we adjust the period of time we retain the categories of Personal Data detailed above. After expiry of the applicable retention periods, your Personal Data will be deleted. If there is any data that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further use of such data.

Disclosing Personal Data

Paymentus may disclose any of the categories of Personal Data listed above for our business and commercial purposes as described below.

Billers, service providers, affiliates, and trusted business partners

We disclose Personal Data to our Paymentus Partners, our service providers, affiliates, and trusted business partners for a business purpose, which includes testing or improving our Sites. When we disclose Personal Data for these reasons, we enter into a contract that describes the purpose and requires the recipient to both keep that Personal Data confidential and not use it for any purpose except for the purposes set forth in the contract.

Legal and similar disclosures

We may also disclose Personal Data to governmental authorities and in connection with judicial or administrative proceedings as required or permitted by applicable law to meet legal obligations or to defend or assert our rights or the rights of others.

Merger, sale, or other asset transfers

If we establish a new related entity, are acquired by or merged with another organization, or if substantially all of our assets are transferred to another organization, Personal Data about our users is often a transferred business asset. In the event that Paymentus itself or substantially all of our assets are acquired, Personal Data about our users may be one of the transferred assets.

Communications

Email

By providing an email address on the Sites, you agree that we may contact you in the event of a change in this Privacy Notice, to provide you with information about our events, invitations, or to provide you with related educational information.

Email Opt-out Policy

By providing an email address on the Sites or Services, you agree that we may contact you in the event of a change in this Privacy Notice, to provide you with any Service-related notices, or to provide you with information about our events, invitations, or related educational information.

We currently provide the following opt-out opportunities for marketing emails:

• At any time, you can follow a link provided in offers, newsletters or other email messages (except for payment confirmation or service notice emails) received from us or a Paymentus Partner to unsubscribe the email.

• At any time, you can contact us through customercare@paymentus.com or at the telephone number (800) 420-1663 to unsubscribe from the email.

Notwithstanding anything else in this Privacy Notice, please note that we always reserve the right to contact you in the event of a change in this Privacy Notice, or to provide you with any service related notices.

Third Party Links on the Sites

The Sites may contain links to webpages operated by parties other than Paymentus. We do not control such websites and are not responsible for their contents or the privacy policies or other practices of such websites. These websites and services may have their own privacy policies, which the user will be subject to upon linking to the third party’s website. Paymentus strongly recommends that each user review the third party’s terms and policies.

International Transfers

We may, directly or indirectly through third-party entities around the world, process, store, and transfer the information you provide, including your Personal Data, as described in this Privacy Notice. Specifically, the information and Personal Data that we collect may be transferred to, and stored at, a location outside of your jurisdiction. It may also be processed by staff operating outside of your jurisdiction who work for us or for one of the organizations outlined in this Privacy Notice in connection with the activities outlined in this Privacy Notice. By submitting your information and Personal Data using the Sites, you agree to this transfer, storing or processing. We will take all steps necessary to ensure that your Personal Data is treated securely and in accordance with this Privacy Notice. We have put in place commercially reasonable technical and organizational procedures to safeguard the information and Personal Data we collect on the Sites. If we transfer your Personal Data out of your jurisdiction, we will implement suitable safeguards and rely on legally-provided mechanisms to lawfully transfer data across borders to ensure that your Personal Data is protected.

How We Protect Personal Data

Paymentus maintains administrative, technical and physical safeguards designed to protect the user’s Personal Data and other information against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. Note however that certain aspects of Internet communications are inherently not completely secure.
Paymentus encrypts data at rest as an additional precaution.

Children

Our Sites are not intended for children under 16 years of age. We do not intentionally gather Personal Data about visitors who are under the age of 16. If a child has provided us with Personal Data, a parent or guardian of that child may contact us to have the information deleted from our records. If you believe that we might have any information from a child under age 16 in the applicable jurisdiction, please contact us at privacy@paymentus.com. If we learn that we have inadvertently collected the Personal Data of a child under 16, or equivalent minimum age depending on jurisdiction, we will take steps to delete the information as soon as possible.

Changes to this Privacy Notice

Our Privacy Notice may change from time to time. We will not reduce your rights with respect to information collected under this Privacy Notice without your explicit consent. We will post changes on this page and, if the changes are material, we may provide a more prominent notice (including, for certain services or programs, email notification of privacy notice changes) for a reasonable period of time. Nevertheless, you should review this Privacy Notice from time to time to be sure you are aware of the most recent version.

How to Contact Us

If you have any specific questions about this Privacy Notice, you can contact us via email or by writing to us at the address below:

Send e-mail to: privacy@paymentus.com

Call: 800-420-1663

Send mail to our address:

Paymentus Corporation
Attn: Privacy Notice Inquiry
11605 North Community House Road
Suite 300
Charlotte, NC 28277
U.S.A.

Privacy Rights

Certain jurisdictions have specific legal requirements and grant privacy rights with respect to Personal Data, and we will comply with restrictions and any requests you submit as required by applicable law. If you are an EEA, UK, Switzerland, or California resident, see the Jurisdiction-Specific Notices section below for additional information as to your rights and to how to exercise those rights.

Nevada residents have the right to opt out of the sale of certain pieces of their information to third parties who will license or sell their information to others. However, Paymentus does not sell Personal Data as contemplated by Nevada law.

If you are a resident of one of the U.S. states listed below, you have one or more of the following rights: (1) to request additional information about our data collection, use, disclosure, and sales practices in connection with your Personal Data; (2) to request the specific Personal Data collected about you; (3) to request the deletion of the Personal Data we have about you, with exceptions; (4) to request a restriction on certain processing of Personal Data; (5) to request correction of inaccurate information; (6) to opt-out of the processing of Personal Data for the purpose of “profiling” in furtherance of decisions that produce legal or similarly significant effects; and (7) to opt-out of the “selling” and “sharing”/“targeted advertising” of Personal Data as such terms are defined under U.S. state privacy laws.

Please note, Paymentus does not sell Personal Data and does not share Personal Data/engage in “targeted advertising”. Paymentus does not engage in profiling in furtherance of decisions that produce legal or similarly significant effects. You may also have the right to not be discriminated against for exercising your privacy rights. If you are a resident of one of the following U.S. states, you have one or more of these rights:

Colorado	Connecticut	Delaware	Indiana (as of Jan. 1, 2026)
Iowa	Kentucky (as of Jan. 1, 2026)	Maryland (as of Oct. 1, 2025)	Minnesota
Montana	Nebraska	New Hampshire	New Jersey
Oregon	Rhode Island (as of Jan. 1, 2026)	Tennessee	Texas
Utah	Virginia

If you are located outside of these jurisdictions and seek to exercise your rights under the law of another jurisdiction, please contact us by emailing privacy@paymentus.com.

You or your authorized agent may submit a request regarding your Personal Data by:

• Emailing: privacy@paymentus.com

• Calling: (800) 420-1663

To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to the information. We may need to request specific information from you to help us confirm your identity. This is a security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it. When you make a request, we may require that you provide information and follow procedures so that we can verify your identity (and the applicable jurisdiction). The verification steps we take may differ depending on your jurisdiction and the request. Where possible, we will attempt to match the information that you provide in your request to information we already have on file to verify your identity. If we are able to verify your request, we will process it. If we cannot verify your request, we may ask you for additional information to help us do so.

We will respond to your request within the time period required by applicable law. However, we may not always be able or required to comply with your request, in whole or in part, and we will notify you in that event.

Jurisdiction-Specific Notices

California Residents

The following information is provided to California residents to comply with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (the “CCPA”) and other California privacy laws and forms a part of this Privacy Notice. Any terms defined in the CCPA have the same meaning when used in this Privacy Notice.

What We Collect & How We Use Information We Collect

During the last twelve (12) months, we have collected the following categories of Personal Data from consumers depending on how a consumer uses our Sites.

Please see our Cookie Notice for information about the collection and use of personal information by third-parties who process information collected by cookies and related technologies that we permit them to use on the Sites. Except as indicated above in the Personal Data We Collect section and below in the California Job Applicants section, we do not seek to collect any additional “sensitive personal information” (as defined in the CCPA).

Category (* may constitute “sensitive personal information” under the CCPA)	Type of Identifiers We Collect	Sold or Shared	Disclosed To
A. Identifiers	First and last name, postal address, unique personal identifier, online identifier, Internet Protocol address, email address	Not sold or shared	Service providers, affiliates, billers, partners
B. Personal Data categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))	Name, signature, address, telephone number	Not sold or shared	Service providers, affiliates, billers, partners
C. Internet or another similar network activity	Information on a consumer’s interaction with a website, application, or advertisement	Not sold or shared	Service providers, affiliates, billers, partners
D. Audio, electronic, visual, thermal, olfactory, or similar information	Audio recordings	Not sold or shared	Service providers, affiliates, billers, partners

California Residents that are Job Applicants

When you apply for a job with Paymentus, information may be collected about you in multiple ways: you may provide it to us in connection with your application; we may make observations in the application process or collect information from public information sources; or you may authorize us to collect information from other sources, such as a former employer or reference.

The following table describes our practices with regard to information submitted in the job application process. If you use our Sites in the job application process, additional information may be automatically collected, as described above.

Category (* may constitute “sensitive personal information” under the CCPA)	Examples	Sold or shared	Disclosed to
Personal Identifiers	name, email address, phone number, and contact address, username, social media handle	Not sold or shared	Service Providers
Protected Classifications*	gender, race and ethnicity, date of birth	Not sold or shared	Service Providers
Location Information	Coarse information (e.g., ZIP code, IP address)	Not sold or shared	Service Providers
Professional or employment-related information.	employer’s name, employer’s address	Not sold or shared	Service Providers
Education Information	institutions attended, degrees and certifications attained	Not sold or shared	Service Providers

In certain circumstances, you may submit your application for employment through a third-party service that displays our job posting. We do not control the privacy practices of these third-party services. Please review their privacy policies carefully prior to submitting your application materials.

Rights Specific to California Residents

Under the CCPA, a California resident has the following rights: (1) to request additional information about our data collection, use, disclosure, and sales practices in connection with your Personal Data; (2) to request the specific Personal Data collected about you; (3) to request the deletion of the Personal Data we have about you; (4) to request a restriction on certain processing of Personal Data; (5) to request correction of inaccurate information; and (6) to opt-out of the selling or sharing of personal information, as defined by the CCPA. You may not be discriminated against for exercising your California privacy rights. You may submit a request to exercise your rights under the CCPA through one of two means:

1. Submit a request via email to privacy@paymentus.com, or

2. Call (800) 420-1663 to submit your request.

Upon receiving your request, we will confirm receipt of your request by email or if you are registered in our customer portal, we may do so by a message directed to you in the portal. To help protect your privacy and maintain security, we may take steps to verify your identity before granting you access to the information. In some instances, such as a request to delete Personal Data, we may first separately confirm that you would like for us to in fact delete your Personal Data before acting on your request.

We aim to respond to your request as soon as reasonably practicable and consistent with any applicable laws. If we require more time, we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option. You may authorize another individual or a business, called an authorized agent, to make requests on your behalf through these means. We may have a reason under the law why we do not have to comply with your request, or why we may comply with it in a more limited way than you anticipated. If we do, we will explain that to you in our response.

California residents are also entitled to contact us to request information about whether we have disclosed Personal Data to third parties for the third parties’ direct marketing purposes. Under the California “Shine the Light” law, California residents may opt-out of our disclosure of Personal Data to third parties for their direct marketing purposes. You may choose to opt-out of the sharing of your Personal Data with third parties for marketing purposes. To make such a request you should send (a) an email to privacy@paymentus.com with the subject heading “California Privacy Rights,” or (b) a letter to us at the address listed in the How to Contact Us. In your request, please attest to the fact that you are a California resident and provide a current California address for our response. Please be aware that not all information sharing is covered by the California privacy rights requirements and only information on covered sharing will be included in our response. We reserve our right not to respond to requests submitted to addresses other than the addresses specified in this paragraph.

EEA, Switzerland, and UK Residents

The following information is provided to EEA residents to comply with the European Union’s General Data Protection Regulation (“GDPR”), and corresponding legislation in the UK and Switzerland, provide EEA, UK and Swiss residents with certain rights in connection with the Personal Data you have shared with us. If you are resident in the EEA, Switzerland, and UK, you have the following rights:

• ● The right to be informed. You are entitled to be informed of the use of your Personal Data. This Privacy Notice provides such information to you.

• ● The right of access. You have the right to access your Personal Data (commonly known as a “subject access request”). This enables you to receive a copy of the Personal Data we hold about you and to check that we are lawfully processing it.

• ● The right of correction: You have the right to request correction of the Personal Data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.

• ● The right of erasure: You have the right to request erasure of your Personal Data in certain circumstances. This enables you to ask us to delete or remove Personal Data where there is not a good reason for us continuing to process it. You also have the right to ask us to delete or remove your Personal Data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your Personal Data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

• ● The right to object: You have the right to object to the processing of your Personal Data where we are relying on a legitimate interest (or those of a third party) as the legal basis for that particular use of your data (including carrying out profiling based on our legitimate interests). In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your right to object. You also have the absolute right to object any time to the processing of your Personal Data for direct marketing purposes.

• ● The right to data portability: You have the right to request the transfer of your Personal Data to you or to a third party. We will provide to you, or a third party you have chosen, your Personal Data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you. We do not use Personal Data to make automated decisions about you in any situations where you may have a legal right to opt out.

• ● The right to restrict processing: You have the right to restrict the processing of your Personal Data. This enables you to ask us to suspend the processing of your Personal Data in one of the following scenarios:

• If you want us to establish the data’s accuracy;

• Where our use of the data is unlawful but you do not want us to erase it;

• Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or

• You have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

To exercise your rights, please submit your request to privacy@paymentus.com or by using the contact information provided below and we will consider your request in accordance with applicable law. For your protection, we may need to verify your identity before responding to your request, such as verifying that the email address from which you send the request matches your email address that we have on file. If we no longer need to process Personal Data about you in order to provide our Services or our Site, we will not maintain, acquire or process additional information in order to identify you for the purpose of responding to your request. In some cases our ability to uphold these rights for you may depend upon our obligations to process Personal Data for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the Services you have requested. Where this is the case, we will inform you of specific details in response to your request. We endeavor to respond to a verifiable consumer request within 30 days of its receipt consistent with applicable law. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded and we could refuse to comply with your request in these circumstances. We may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive.

Cookie Notice

Effective Date: July 15, 2025

We use cookies and similar tools across our Sites to improve their performance and security and to enhance your user experience. This Cookie Notice explains how we do that.

What are cookies?

Cookies are small text files which a website may put on your computer or mobile device, and certain cookies may be used if you choose to allow the cookies when you visit our Sites.

Cookies help websites to recognize your device the next time you visit. Cookies may be used to remember your preferences and to help you navigate within a website. We use the term “cookies” in this Cookie Notice to refer to cookies as well as pixels or similar technologies.

There are many functions cookies serve. For example, they can help us to remember your username and preferences, analyze how well our Sites are performing and allow us to recommend content we believe will be most relevant to you.

Certain cookies contain personal information – for example, if you click to “remember me” when logging in, a cookie will store your username.

What sort of cookies does Paymentus use?

Strictly Necessary Cookies

Some cookies are essential or strictly necessary for the operation of our Sites. For example, some cookies allow us to identify registered users and ensure they can access the subscription-only pages, or they may facilitate page navigation or assist with security checks.

Performance Cookies

We utilize other cookies to analyze how our visitors use our Sites and to monitor website performance. This allows us to provide a high quality experience by customizing our offering and quickly identifying and fixing any issues that arise. For example, we might use performance cookies to keep track of which pages are most popular, which method of linking between pages is most effective, and to determine why some pages are receiving error messages. Performance cookies are used to understand and analyze the key performance indexes of the Sites which helps in delivering a better user experience for the visitors. Performance cookies may involve a “sale” of Personal Data under certain U.S. state laws.

Functional Cookies

We use functional cookies to allow us to remember your preferences. For example, cookies save you the trouble of typing in your username every time you access the site, and recall your preferences, such as which sections of the Sites you want to see when you log in.

Targeting Cookies

These cookies are used to highlight articles, other content, or services that we think will be of interest to you based on your use of the Sites. By evaluating information, we receive from these cookies, we may more clearly target the information we provide you to the specific items we think you will find interesting, based on your prior online activities and preferences. This information may also be utilized by third parties, such as when a third party consent feed has been included on the Site so that you can view videos. Advertising cookies may involve “sharing” for targeted advertising purposes under certain U.S. state laws.

Does anyone else use cookies on our Site?

We do use or allow certain third parties to serve cookies on our Sites. We may allow third parties to serve cookies to help identify fraudulent or automated traffic on our Sites. We may also use third party cookies to help us with market research, improving website functionality, and enforcing website terms and policies. For example, like many companies, we use Google Analytics to help us evaluate our website traffic. You can see how Google Analytics uses cookie information across various websites by visiting https://policies.google.com/technologies/partner-sites, or any successor webpage that Google may provide.

Which specific cookies do we use?

Click on “Cookie Preferences” link on the footer of the Site’s homepage to view the cookies being used on the Site.

Cookie Choices

To manage certain cookies used on the Sites, please use the “Cookie Preferences” link in the footer of the website. Also, your browser may allow you to disable cookies, or the third party listed may provide an opt-out tool. Depending on your cookie choices, we may use Google Analytics to collect and process certain website usage data. To learn more about Google Analytics and how to opt out of personalized ads from Google, see: https://tools.google.com/dlpage/gaoptout.

For website visitors from the EEA, UK, or Switzerland, you may also manage certain cookies by utilizing the “Cookie Preferences” link on the Site’s homepage.

The main web browsers also allow you to change your cookie settings directly through their sites. These settings will typically be found in the ‘options’ or ‘preferences’ menu of your browser. In order to understand these settings, the following links may be helpful; otherwise you should use the ‘Help’ option in your browser for more details.

Browser	Link to Change Cookie Settings
Chrome	support.google.com/chrome/bin/answer.py
Internet Explorer	support.microsoft.com/kb/196955
Safari	docs.info.apple.com/article.html
Firefox	support.mozilla.org/en-US/kb/Cookies
Edge	https://support.microsoft.com/en-us/help/4027947/microsoft-edge-delete-cookies

For information on how to use the browser of your mobile device to amend cookie settings, you will need to refer to your mobile device manual.

The following third-party links contain additional information about cookies and other helpful information on your ability to control what cookies apply to you. Please note, however, that these links will take you to third-party sites over which we have no control:

Link to Site	Description
www.allaboutcookies.org/manage-cookies/index.html	Offers comprehensive information on how to amend the settings of a wide variety of browsers, details on how to delete cookies from your computer, and more general information about cookies
www.aboutcookies.org	Offers comprehensive information on how to amend the settings of a wide variety of browsers, details on how to delete cookies from your computer, and more general information about cookies
www.youronlinechoices.com/uk www.youronlinechoices.eu	For users located in the UK and Europe, offers information about third-party cookies generated by advertisers and how you can turn these off by going to the Internet Advertising Bureau’s (“IAB”) consumer site
www.networkadvertising.org	Offers a comprehensive listing of opt-outs for advertising platforms, however, note that there are many more networks listed on this site than those used by us
https://youradchoices.com/ http://www.aboutads.info/choices	For users located in the U.S., offers information about advertising networks and opt out of receiving personalized advertisements on this browser or device from advertisers who are members of the Network Advertising Initiative or who subscribe to the Digital Advertising Alliance’s Self-Regulatory Principles for Online Behavioral Advertising by visiting the opt-out options of each of those organizations

Note that, when you opt out of personalized advertising, you may continue to see online advertising on the Site and/or our ads on other websites and online services. Please remember that if you do choose to disable cookies, you may find that certain sections of our websites do not work properly.

What about changes to this Cookie Notice?

We may revise this Cookie Notice from time to time in order to reflect changes in our use of cookies, changes in the law, changes in our services, or best practices. The revised version will be effective when it is posted and apply to personal information received after that date. If we make any material changes, we will provide notice of such changes on the pertinent website for a reasonable period of time. We encourage you to review this Cookie Notice periodically, especially if you don’t visit our Sites regularly.