Effective Date: December 21, 2019
Last Updated: September 3, 2020
- Website Conditions of Use
- Information We Collect
- Cookies & Similar Technologies
- How We Use the Information We Collect
- Our Legal Basis for Collecting Personal Data
- Your Failure to Provide Personal Data
- Our Retention of Your Personal Data
- Sharing Personal Data
- Your Rights and Choices
- Third Party Links
- International Transfer
- How We Protect Personal Information
- “Do Not Track” Signals
- Use of Email
- How to Contact Us
- Privacy Notice to California Residents
- Paymentus Partners
Website Conditions of Use
By accessing or using the Sites in any manner, you also agree to be bound by our Website Conditions of Use. Please read the Conditions of Use carefully. If you do not accept all of the terms and conditions contained in or incorporated by reference into the Conditions of Use, please do not use the Sites.
Information We Collect
We collect information, including Personal Data, to provide better services to all our users and, in the case of information we collect from individuals connected with our commercial customers or prospects, for marketing purposes. We use the term “Personal Data” to refer to any information that identifies or can be used to identify you. Common examples of Personal Data include: full name, email address, digital identity, such as a login name or handle, information about your device, and certain metadata.
“Sensitive Personal Data” refers to a smaller subset of Personal Data which is considered more sensitive to the individual, such as race and ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic or biometric information, physical or mental health information, medical insurance data, or sexual orientation.
The personal information we collect includes, but is not limited to, the following circumstances and data elements:
- If you express an interest in obtaining additional information about our services, request customer support, use our “Contact Us” or similar features, register to use our Sites or Services, or download certain content, we may require that you provide to us your contact information, such as your name, address, phone number, or email address;
- If you desire to pay bills via our websites, mobile apps, or other channels, we may require that you or your biller provide to us your financial and billing information, such as billing name and address, account number, credit or debit card number or bank account information, details from the bill being paid and bill payment history, as well as information necessary to verify your identity, such as social security number;
- If you schedule a demo, we may ask you to provide, a name, company name, email address, phone number and billing information;
- If you use and interact with our websites, mobile apps, or emails, we automatically collect information about your device and your usage of our websites or emails through cookies, web beacons or similar technologies, such as Internet Protocol (IP) addresses, log files, or other identifiers, which may qualify as personal information (please see the “Cookies & Similar Technologies” section, below);
- If you voluntarily submit certain information to our services, such as filling out a survey about your user experience or participating in promotional activities, we collect the information you have provided as part of that request.
We obtain personal information from the following categories of sources:
- Directly from consumers who use our services.
- Directly from our customers or their agents or service providers. For example, from documents and electronic files that our customers provide to us related to the services for which they engage us.
- Indirectly from our customers or their agents or service providers. For example, through information we collect from our customers in the course of providing services to them.
- Directly and indirectly from activity on our website (www.paymentus.com) or sites we maintain for our customers. For example, from website usage details that are collected automatically. In addition, like many companies, we use “cookies” which are small text files a website can use to recognize repeat users, facilitate the user’s ongoing access to and use of the site and to track usage behavior of, for example, the webpages you visit.
- From third parties, such as payment processors and facilitators that interact with us in connection with the services we perform, and from data providers to help us identify contacts within commercial prospects and billers.
Cookies & Similar Technologies
We and our partners use various technologies to collect and store information when you visit one of our Sites or use our mobile apps, and this may include using cookies or similar technologies to identify your browser or device. We also use these technologies to collect and store information when you interact with services from our partners, such as advertising services from our third-party advertising and analytics partner Google Analytics and similar partners.
The technologies we use for this automatic data collection may include:
- Web Beacons. Pages of our services or our e-mails may contain small electronic files known as web beacons (also referred to as clear GIFs, pixel tags and single-pixel GIFs) that permit us, for example, to count users who have visited those pages or opened an e-mail and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).
- Clickstream Data. Clickstream data is information collected by our computers when you request webpages from the Sites. Clickstream data may include information such as the page served, the time spent viewing the page, source of the request, type of browser making the request, the preceding page viewed and similar information. Clickstream data permits us to analyze how visitors arrive at the Sites, what type of content is popular and what type of visitors in the aggregate are interested in particular kinds of content on the Sites.
We use information collected from cookies and other technologies to improve your user experience and the overall quality of our services. We may use your Personal Data to see which webpages you visit at our Site, how you navigate through and interact with our Site and mobile apps, which website you visited before coming to our Site, and where you go after you leave our Site. We can then develop statistics that help us understand how our visitors use our Site and mobile apps and how to improve them. We may also use the information we obtain about you in other ways for which we provide specific notice at the time of collection.
How We Use the Information We Collect
We use your Personal Data in ways that are compatible with the purposes for which it was collected or authorized by you and in certain cases only as permitted by your biller, including for the following purposes:
- To provide you with Services;
- To present, operate, maintain, secure, authorize access to, or personalize our Sites and Services, and to respond to and support users;
- To improve, enhance and further develop our Sites and Services;
- To communicate with you regarding your bills from or payment obligations to your biller;
- To enable trusted business partners to provide you with information regarding your bill from or payment obligations to your biller and facilitate your payment of those bills or obligations;
- To perform data analysis and testing, including analysis of Site activity;
- To comply with all applicable legal requirements and the rules of payment networks;
- To inform you about Services and products available from Paymentus or your biller;
- To offer and administer content, promotion, sweepstakes, surveys, voting polls or other Site features;
- To otherwise fulfill the purpose for which the information was provided.
Our Legal Basis for Collecting Personal Data
Whenever we collect Personal Data from you, we may do so on the following legal bases:
- Your consent to such collection and use;
- Out of necessity for the performance of an agreement between us and you, such as your agreement to use our Services or your request for Services;
- Our legitimate business interest, including but not limited to the following circumstances where collecting or using Personal Data is necessary for:
- To perform services requested by your biller, our customer;
- Intra-organization transfers for administrative purposes;
- Product development and enhancement, where the processing enables Paymentus to enhance, modify, personalize, or otherwise improve our services and communications for the benefit of our users and customers, and to better understand how people interact with our Sites;
- Communications and marketing, including processing data for direct marketing purposes, and to determine the effectiveness of our promotional campaigns and advertising;
- Fraud detection and prevention;
- Enhancement of our cybersecurity, including improving the security of our network and information systems; and
- General business operations and diligence;
Provided that, in each circumstance, we will weigh the necessity of our processing for the purpose against your privacy and confidentiality interests, including taking into account your reasonable expectations, the impact of processing, and any safeguards which are or could be put in place. In all circumstances, we will limit such processing for our legitimate business interest to what is necessary for its purposes.
Your Failure to Provide Personal Data
Your provision of Personal Data is required in order to use certain parts of our services and our programs. If you fail to provide such Personal Data, you may not be able to access and use our Services and/or our programs, or parts of our Services and/or our programs.
Our Retention of Your Personal Data
We determine the appropriate retention period for Personal Data on the basis of the amount, nature and sensitivity of your Personal Data processed, the potential risk of harm from unauthorized use or disclosure of your Personal Data and whether we can achieve the purposes of the processing through other means, as well as on the basis of applicable legal requirements (such as applicable statutes of limitation).
After expiry of the applicable retention periods, your Personal Data will be deleted. If there is any data that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further use of such data.
Sharing Personal Data
Paymentus may disclose your Personal Data to your biller, commercial providers and trusted business partners for a business purpose, which includes verifying your identity, to enable our compliance with applicable law and payment network rules when you make a payment or register access to your accounts, to process your payment instructions, to offer you additional channels through which you may receive information about your bills or to make payments, or to test or improve our Services. When we disclose Personal Data for these reasons, we enter into a contract that describes the purpose and requires the recipient to both keep that Personal Data confidential and not use it for any purpose except for the purposes set forth in the contract. We may also disclose Personal Data to governmental authorities and in connection with judicial or administrative proceedings as required or permitted by applicable law to meet legal obligations or to defend or assert our rights or the rights of others. If we establish a new related entity, are acquired by or merged with another organization, or if substantially all of our assets are transferred to another organization, Personal Data about our users is often a transferred business asset. In the event that Paymentus itself or substantially all of our assets are acquired, Personal Data about our users may be one of the transferred assets.
Your Rights and Choices
You may have certain rights relating to your Personal Data, to the extent provided by local law. We will provide you with access to your Personal Data as required by applicable law. If that information is wrong, we strive to give you ways to update it quickly or to delete it – unless we have to keep that information for legitimate business or legal purposes. To the extent required by applicable law, you may obtain a copy of Personal Data we maintain about you. To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to the information.
- Our Opt-in/Opt-out Policy
We currently provide the following opt-out opportunities:
- At any time, you can follow a link provided in offers, newsletters or other email messages (except for payment confirmation or service notice emails) received from us or a Paymentus Partner to unsubscribe from the service.
- At any time, you can reply “STOP” to opt out of receiving SMS texts.
The Sites may contain links to webpages operated by parties other than Paymentus. We do not control such websites and are not responsible for their contents or the privacy policies or other practices of such websites. These websites and services may have their own privacy policies, which the user will be subject to upon linking to the third party’s website. Paymentus strongly recommends that each user review the third party’s terms and policies.
How We Protect Personal Data
Paymentus maintains administrative, technical and physical safeguards designed to protect the user’s Personal Data and other information against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. For example, we use commercially reasonable security measures such as encryption, firewalls, and Transport Layer Security software (TLS) or hypertext transfer protocol secure (HTTPS) to protect Personal Data.
Our website is not intended for children under 16 years of age. We do not intentionally gather Personal Data about visitors who are under the age of 16. If a child has provided us with Personal Data, a parent or guardian of that child may contact us to have the information deleted from our records. If you believe that we might have any information from a child under age 16 in the applicable jurisdiction, please contact us at firstname.lastname@example.org. If we learn that we have inadvertently collected the Personal Data of a child under 16, or equivalent minimum age depending on jurisdiction, we will take steps to delete the information as soon as possible.
Direct Marketing and “Do Not Track” Signals
Paymentus does not track its users over time and across third-party websites to provide targeted advertising and therefore does not respond to Do Not Track (DNT) signals. However, some third-party sites do keep track of your browsing activities when they serve you content, which enables them to tailor what they present to you. If you are visiting such sites, your browser may include controls to block and delete cookies, web beacons and similar technologies, to allow you to opt out of data collection through those technologies.
California residents are entitled to contact us to request information about whether we have disclosed Personal Data to third parties for the third parties’ direct marketing purposes. Under the California “Shine the Light” law, California residents may opt out of our disclosure of Personal Data to third parties for their direct marketing purposes. You may choose to opt out of the sharing of your Personal Data with third parties for marketing purposes. To make such a request you should send (a) an email to email@example.com with the subject heading “California Privacy Rights,” or (b) a letter to us at the address listed in the “How to Contact Us.” In your request, please attest to the fact that you are a California resident and provide a current California address for our response. Please be aware that not all information sharing is covered by the California privacy rights requirements and only information on covered sharing will be included in our response. We reserve our right not to respond to requests submitted to addresses other than the addresses specified in this paragraph.
Use of Email
How to Contact Us
Send e-mail to: firstname.lastname@example.org
Send mail to our address:
13024 Ballantyne Corporate Place
Charlotte, NC 28277
Privacy Notice to California Residents
What We Collect
During the last twelve (12) months, we have collected the following categories of Personal Data from consumers depending on how a consumer uses our services.
|Category||Type of Identifiers We Collect|
|A. Identifiers||First and last name, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account number for bills you review or pay|
|B. Personal Data categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))||Name, signature, Social Security number, address, telephone number, bank account number, credit card number, debit card number, medical or health insurance information|
|C. Commercial information||Bill payment history, utility services consumption information|
|D. Internet or another similar network activity||Information on a consumer’s interaction with a website, application, or advertisement|
|E. Audio, electronic, visual, thermal, olfactory, or similar information||Audio recordings|
How We Use Information We Collect
We use your Personal Data in ways that are compatible with the purposes for which it was collected or authorized by you and in certain cases only as permitted by your biller, including for the following purposes:
|Category||The Purpose for Collection|
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
C. Commercial Information
E. Audio, electronic, visual, thermal, olfactory, or similar information
D. Internet or another similar network activity
Information We Share
In the preceding twelve (12) months, we have disclosed the following categories of Personal Data for one or more business purposes:
- California Customer Records Personal Data categories
- Commercial information
- Internet or other network activity information
We disclose your Personal Data for a business purpose to the following categories of third parties:
- Our customers
- Our affiliates
- Commercial providers
- Trusted business partners
- Third parties to whom you, your agents or biller authorize us to disclose your Personal Data in connection with the services we provide to you or to your biller
Sale of Personal Data
In the preceding twelve (12) months, we have not sold any Personal Data.
Rights Specific to California Residents
Under the California Consumer Privacy Act, California residents have specific rights regarding their Personal Data. This section explains how California residents can exercise those rights and describes Californians’ rights.
- Exercising Your Rights
If you are a California resident who chooses to exercise your rights, you can:
- Submit a request via email to email@example.com, or
- Call (800) 420-1663 to submit your request.
- Our Response to Your Request
Upon receiving your request, we will confirm receipt of your request by email or if you are registered in our customer portal, we may do so by a message directed to you in the portal. To help protect your privacy and maintain security, we may take steps to verify your identity before granting you access to the information. In some instances, such as a request to delete Personal Data, we may first separately confirm that you would like for us to in fact delete your Personal Data before acting on your request.
We will respond to your request within forty-five (45) days. If we require more time, we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option.
In some cases our ability to uphold these rights for you may depend upon our obligations to process Personal Data for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, listed below, or because processing is necessary to deliver the services you have requested. Where this is the case, we will inform you of specific details in response to your request.
- Californians’ Rights With Respect to Personal Data
Below we further outline specific rights which California residents may have under the California Consumer Privacy Act.
- Right to Access Your Data. You have the right to request that we disclose certain information to you about our collection and use of your Personal Data over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:
- The categories of Personal Data we collected about you.
- The categories of sources for the Personal Data we collected about you.
- Our business or commercial purpose for collecting that Personal Data.
- The specific pieces of Personal Data we collected about you.
- The categories of third parties with whom we share that Personal Data.
- The specific pieces of Personal Data we’ve disclosed for a business or commercial purpose, identifying the Personal Data categories that each category of recipient obtained about you.
Any disclosures we provide will only cover the 12-month period preceding the receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable.
- Right to Data Portability. You have the right to a “portable” copy of your Personal Data that you have submitted to us. Generally, this means you have a right to request that we move, copy or transmit your Personal Data stored on our servers / IT environment to another service provider’s servers / IT environment.
- Right to Delete Your Data. You have the right to request that we delete any of your Personal Data that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your Personal Data from our records, unless an exception applies.
We may deny your deletion request if retaining the information is necessary for us or our service providers to:
- Complete the transaction for which we collected the Personal Data, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you;
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities;
- Debug products to identify and repair errors that impair existing intended functionality;
- Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law;
- Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.);
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent;
- Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us;
- Comply with a legal obligation; or
- Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
- Right to Non-Discrimination for the Exercise of Your Privacy Rights. You have the right to not receive discriminatory treatment by us for exercising your privacy rights conferred by the California Consumer Privacy Act.
Privacy Notice to European Residents
- The right of access. You have the right to request a copy of your Personal Data which we hold about you.
- The right of correction: You have the right to request correction or changes of your Personal Data if it is found to be inaccurate or out of date.
- The right to be forgotten: You have the right to request us, at any time, to delete your Personal Data from our servers and to erase your Personal Data when it is no longer necessary for us to retain such data. Note, however, that deletion of your Personal Data will likely impact your ability to use our services.
- The right to object (opt-out): You have the right to opt out of certain uses of your Personal Data, such as direct marketing, at any time.
- The right to data portability: You have the right to a “portable” copy of your Personal Data that you have submitted to us. Generally, this means your right to request that we move, copy or transmit your Personal Data stored on our servers / IT environment to another service provider’s servers / IT environment.
- The right to refuse to be subjected to automated decision making, including profiling: You have the right not to be subject to a decision and insist on human intervention if the decision is based on automated processing and produces a legal effect or a similarly significant effect on you.
- The right to lodge a complaint with a supervisory authority.
You may also have the right to make a GDPR complaint to the relevant Supervisory Authority. A list of Supervisory Authorities is available here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.
To exercise your rights, please submit your request to firstname.lastname@example.org or by using the contact information provided below and we will consider your request in accordance with applicable law. For your protection, we may need to verify your identity before responding to your request, such as verifying that the email address from which you send the request matches your email address that we have on file. If we no longer need to process Personal Data about you in order to provide our Services or our Site, we will not maintain, acquire or process additional information in order to identify you for the purpose of responding to your request. In some cases our ability to uphold these rights for you may depend upon our obligations to process Personal Data for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the Services you have requested. Where this is the case, we will inform you of specific details in response to your request. We endeavor to respond to a verifiable consumer request within 30 days of its receipt consistent with applicable law. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
- Paymentus Partner Information. We collect information about individuals within our Paymentus Partners organization (“Partner Information”). Partner Information may include information related to the Partner’s account, name, work e-mail address, work phone number, job title or similar kinds of information. We use Partner Information to support the Partner account, maintain our business relationship with the Partner, respond to Partner inquiries, or perform accounting functions. Paymentus Partners may update personal information and password by logging into the Paymentus Platform and updating their account. Paymentus Partners may contact Paymentus support in order to delete their Personal Data. In some cases, we may not be able to delete Partner Information, and in such cases we will tell you why.
- Information About Our Partners’ Contacts. We collect information about any contacts, such as employees, customers, and others, that may be uploaded into the Paymentus Platform (“Information about our Partners’ Contacts”). Information about our Partner’s Contacts may include name, e-mail address, phone number, job title, or similar kinds of information. We use Information About Our Partner’s Contacts for the purposes of providing Services to such contacts. Paymentus Partners may update or delete Information about their contacts in the Paymentus Platform. Paymentus Partners may also contact Paymentus support in order to update and delete such information. In some cases, we may not be able to delete such information, and in such cases we will tell you why.
- Archival Information. We collect communications information for archival purposes on behalf of, and as directed by, our Paymentus Partners. This information may include emails, texts, websites, social media messages or posts, and other forms of data or electronic communications (“Archival Information”). Archival Information includes data about our Paymentus Partners and the third parties they correspond with. We do not control or monitor the information our Paymentus Partners collect and store through our services, or their privacy practices or policies. It is our Partner’s obligation to obtain all necessary consents and to comply with all applicable laws with respect to the Partner’s communications and use of our services. Our Partner’s privacy policies or practices apply to Archival Information, the purposes for which the Partner collects Archival Information, how the Partner may use Archival Information and what choices the individual may have with respect to Archival Information. Individuals must contact the applicable Partner in order to correct, amend, or delete their information, or to opt out of any collection, uses or disclosure of their information by our Partner.
- Automatically Collected Information. We collect information automatically about how our Paymentus Partners use our services (“Automatically Collected Information”). We do this via data collection technologies such as cookies, web beacons, GIFs or other tracking technologies. We collect this information in order to monitor, support and improve our services or to provide Paymentus Partners with certain customized features. We may use Automatically Collected Information to tell us how our Paymentus Partners use our services, to improve our services or develop new products, services or features. We may combine this information with other information we collect.
Powered by Paymentus – The most effective way to pay.