Privacy policy December 2019

Archived: July 27, 2021

This is an archived version of a previous Privacy Policy.

Update information

The following updates were made in this version:

Information required under the California Consumer Privacy Act (“CCPA”) was added.

ACI Worldwide provides electronic payments, bill presentment, and payment services for organizations around the world. ACI Worldwide takes the privacy of your personal information very seriously and is committed to protecting your privacy. ACI, and its entities covered by the Privacy Shield certification (Official Payments Corporation and Retail Decisions, Inc.), are committed to gaining and maintaining your trust by following a core set of principles:

Transparency: ACI provides clear notice of privacy practices through a privacy statement so you can make informed decisions about data collection and use.
Lawful processing: ACI processes your personal information in a fair and lawful manner.
Choice: If you choose to share personal information with us, ACI will identify any options you have for controlling the use of this information at the time it is collected. You are also given the opportunity to opt out of email or text messages by following the instructions contained in any such message.
Access: ACI allows you to request access, request to update your personal information or request that personal information you have provided through ACI’s products and services be disabled or forgotten.
Security: ACI protects the data you entrust to ACI through strong security and encryption. ACI limits access to personal information and do not store personal information longer than is necessary.
Accountability: ACI responds to user inquiries, participates in industry programs, and has adopted privacy practices that are consistent with applicable country, state, and local data protection laws

Privacy statement

This Privacy Statement explains what personal data ACI Worldwide (“ACI” or “we” or “us”) collects from you, through our interactions with you and through our website, products or services, and how we use it. It also describes your choices regarding use, access and correction of your personal information.

Your privacy is important to us. To protect your privacy, we provide this Privacy Statement explaining our information practices and the choices you can make about the way your information is collected and used. Please read this Privacy Statement carefully to understand what we do and the choices you can make.

To facilitate our operations, we may transfer, store and process your personal information in jurisdictions other than where you live, including in the United States. Laws in these countries may differ from the laws applicable to your country of residence. For instance, if you are a European Economic Area (EEA) data subject and your personal information is shared with our affiliates, partners, or third-party service providers acting on our behalf outside of the EEA, then it is done so pursuant to necessary means to ensure an adequate level of protection.

ACI adheres to the principles of the EU-U.S. and Swiss-U.S. Privacy Shield frameworks. ACI is committed to subjecting all personal data received from European Union (EU) member countries and Switzerland, respectively, in reliance on the Privacy Shield Framework, to the Framework’s applicable Principles. To learn more about the Privacy Shield Frameworks, visit the U.S. Department of Commerce’s Privacy Shield List at https://www.privacyshield.gov/list.

ACI is responsible for the processing of personal data it receives, under the Privacy Shield Framework, and subsequently transfers to a third party acting as an agent on ACI’s behalf. ACI complies with the Privacy Shield Principles for all onward transfers of personal data from the EU and Switzerland, including the onward transfer liability provisions.

With respect to personal data received or transferred pursuant to the Privacy Shield Frameworks, ACI is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, ACI may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

To provide the services and to reduce the risk of fraud, ACI may ask you for personal information. This Privacy Statement describes the personal information we collect from you, and how we use that information. We will use your personal information only in accordance with the terms of this Privacy Statement. We will not sell or rent your personal information or provide a list of our customers to third parties. However, there are limited circumstances in which some of your information will be shared with third parties under strict restrictions, so it is important for you to review the details of this Privacy Statement. This Privacy Statement applies to all services that are offered by ACI and to personal information that we maintain about current and former customers.

Your access to and use of our web sites are subject to this Privacy Statement and any other Terms of Use or policies posted by us. If you have questions or concerns regarding this Privacy Statement, you should contact us by submitting this request form.

Collection and use of your personal information

What types of information do we collect, use and store?

The types of personal information we collect, use and store depend on the product or service you have with us. This may include the following information collected from you and your transactions with us or our customers with whom you have a direct relationship:

Your name, mailing address, city, state, zip code, email address, phone number and IP address
Your bill payment (including payment amount and designated payee)
Your credit or debit card or bank account numbers, expiration date, and cardholder or account holder name
Social Security Number (SSN), passport number, and/or employer identification number (EIN)
Unique identifier such as user name, account number, and password
Technical data such as IP address

We also collect aggregate information which does not identify you.

This information can be collected directly from you or through our customers with whom you have a direct relationship, such as a merchant or financial institution. We must collect information about you to create the account or to facilitate the processing of your payment transaction. Since certain information is required if you choose to register or make a payment transaction, you agree to provide accurate and complete information when providing personal information. Except as otherwise provided below under the heading “How do we use your information?”, when you supply information about yourself for a specific purpose, we use that information only for the specified purpose and to manage internal operations and security. In general, you can visit our web site without telling us who you are or revealing any personal information about yourself. However, some portions of our web site are accessible only to users who have registered with us.

At times we may ask you for contact information or conduct online surveys to better understand your needs, to provide you with enhanced services, and to help you use the services more effectively. If you participate on our online surveys, we will request certain personal information such as name, email address, and demographic information such as zip code. Participation in these surveys or contests is completely voluntary and you therefore have a choice whether or not to disclose this information. We will not share the personal information you provide through a survey with other third parties unless we give you prior notice and choice.

We also display personal testimonials of satisfied customers on our site in addition to other endorsements. With your consent, we may post your testimonial along with your name. If you wish to update or delete your testimonial, you can contact us by submitting this request form.

How do we use your information?

Internal Uses

We will only use your personal information:

1) in the performance of a contract;
2) when processing the personal information is in ACI’s legitimate interest, and that interest is not outweighed by your own interests;
3) when obligated by law or it is in the public interest; or
4) when you have given consent.

We use the information we collect about you for everyday internal business purposes to provide our services, process your transactions, maintain your account(s), and provide customer service. We provide access to personal information of our customers only to those employees who require it as part of their job to provide our services, process customer payments, and provide customer service.

We may use your personal information for marketing products and services from ACI or those of our partners. Those services may include contacting you via email or direct mail about opportunities related to our products or services, as well as to perform marketing analytics. You may exercise the choice to discontinue receipt of these opportunities at any time by submitting this request form.

As part of our fraud prevention product and service offerings, merchants, and financial institution clients with whom you have a direct relationship may elect to utilize auto-decision functionality. For instance, if a card transaction was initiated in a country in which you are not visiting or do not reside, the transaction may be declined. Automated decisions utilize the information only when it is required in connection with a contract or required by law. You may contact the merchant or financial institution with whom you have a direct relationship or contact our Data Protection Officer for more information on the auto decision process.

Disclosure to Third Parties

ACI shares certain personal information to run our everyday business. ACI does not sell or rent any of your personal information. ACI will not share any of your personal information with third parties except in the circumstances described below or with your permission.

We may share your personal information with our business partners, service vendors, suppliers, or other authorized third-party contractors who provide services or perform marketing or other functions on our behalf to provide a requested service or transaction. We will only provide these third parties with the minimum amount of personal information necessary to complete the requested service or transaction. We will require that these third parties keep your personal information confidential and not use your personal information except for the limited purpose of completing the requested service or transaction.

We disclose personal information with third parties that we believe is appropriate to cooperate within investigations of suspected fraud or other illegal activity. This would include situations involving potential threats to the physical safety of any person, or to conduct investigations of violations of ACI’s Terms of Use, or as otherwise required by law.

We will disclose your personal information when we are obliged by law to do so or when we suspect fraudulent or criminal activities. A variety of federal, state, and local laws or government regulations may require us to disclose nonpublic personal information about you to respond to court orders or legal investigations. In these instances, we will make commercially reasonable efforts to release only the information required by law, subpoena, legal process, or court order.

We may also disclose your personal information when otherwise permitted by applicable privacy laws when disclosure is needed to enforce our rights arising out of any agreement, transaction, or relationship with you.

We share required information with your agent or a legal representative such as the holder of a power of attorney that you grant or a guardian appointed for you.

We share aggregated statistical or demographic data from specified accounts with our business partners or for public relations and marketing purposes. For example, we may reveal the percentage of payments with a credit card versus a checking account. It is important to note, however, that this aggregated information is not tied to any personal information that can identify you.

As with any other business, it is possible that in the future ACI could merge with or be acquired by another company. If such an acquisition occurs, the replacement company would have access to personal information maintained by ACI. This will include customer and personal account information, but it will continue to be bound by this Privacy Statement unless and until it is amended. You will be notified via prominent notice on our sites on any such change in ownership or control of your personal information.

We make disclosures to third party partners as permitted by federal or state law. If you have registered with our service and indicated you want to receive communications from us, ACI may contract with third parties for marketing products and services of ACI or those of our partners. ACI may also disclose personal information to financial service providers with which it has joint marketing agreements. These are formal agreements between unaffiliated third parties that are combined with market products or services to you. ACI will require such third parties to maintain the confidentiality of your personal information.

When you provide personal information to us, we may continue to store and maintain that information for as long as necessary. If you want us to stop storing your personal information, you may request that we do so by submitting this request form.

Access and Changes to Personal Information (PI)
You have the right to amend or update inaccurate or incomplete personal information, request deletion of your personal information, or request that we no longer use it. Upon request, ACI will provide you with information about whether we hold any of your personal information. If you have submitted incorrect personal information through our sites and would like to revise this information or if you would like to request access to your personal information, please contact us by submitting this request form. Please do not send us your personal information (PI) via email. We will respond to your request to access within a reasonable timeframe in compliance with the law.

We will retain your information for as long as your account is active or as needed to provide you with services. In addition, we will maintain and use your information for as long as necessary to comply with our legal obligations, resolve disputes, and administer our agreements.

If you want to cancel your account or request that we no longer use your information to provide you with any services, contact us by submitting this request form.

Use of cookies

ACI uses cookies and similar technologies for several purposes, depending on the product, including:

Storing your Preferences and Settings. Settings that enable our website to operate correctly or that maintain your preferences over time may be stored on your device. For example, we save preferences, such as language, browser, and multimedia player settings, so those do not have to be reset each time you return to the site. If you opt-out of interest-based advertising, we store your opt-out preference in a cookie on your device.
Sign-in and Authentication. When you sign into a website using your personal ACI account, we store a unique ID number, and the time you signed in, in an encrypted cookie on your device. This cookie allows you to move from page to page within the site without having to sign in again on each page. You can also save your sign-in information so you do not have to sign in each time you return to the site.
Security. We use cookies to detect fraud and abuse of our websites and services.
Social Media. Some of our websites include code snippets provided by social media companies that can sense if you are already logged into a given social media account so you can easily share ACI content with other social media users via that account. These code snippets read cookies set previously by social media company web content while you are logged in and browsing such content on those social media sites.
Interest-Based Advertising. ACI uses cookies to collect data about your online activity and identify your interests so that we can provide advertising that is most relevant to you. You can opt out of receiving interest-based advertising from ACI as described in the Preferences and opting-out section of this privacy statement.
Analytics. To provide our products, and improve your user experience on our website, we use cookies and other identifiers to gather usage and performance data. For example, we use cookies to count the number of unique visitors to a web page or service and to develop other statistics about the operations of our products. This includes cookies from ACI and third-party analytics providers.
Performance. ACI uses cookies for load balancing to ensure that websites remain up and running.

How to Control Cookies
Most web browsers automatically accept cookies but provide controls that allow you to block or delete them. For example, in most modern browsers, you can block or delete cookies by clicking Settings > Privacy > Cookies. Instructions for blocking or deleting cookies in other browsers may be available in each browser’s privacy or help documentation.

Certain features of ACI products depend on cookies. Please be aware that if you choose to block cookies, you may not be able to sign in or use those features, and preferences that are dependent on cookies may be lost. If you choose to delete cookies, settings and preferences controlled by those cookies, including advertising preferences, will be deleted and may need to be recreated.

Opting Out of Analytics Services
You can opt out of data collection or use by some third-party analytics providers by clicking the following links:

AppsFlyer: www.appsflyer.com/optout
Flurry Analytics: https://aim.yahoo.com/aim/us/en/optout/
Google Analytics: tools.google.com/dlpage/gaoptout (requires you to install a browser add-on)
Kissmetrics: kissmetrics.com/user-privacy
Mixpanel: mixpanel.com/optout
Nielsen: www.nielsen-online.com/corp.jsp?section=leg_prs&nav=1#Optoutchoices
Omniture (Adobe): www.d1.sc.omtrdc.net/optout.html
Visible Measures: www.visiblemeasures.com/viewer-settings-opt-out
WebTrends: ondemand.webtrends.com/support/optout.asp

Log files

Like many websites, we may automatically gather, or engage a third party to gather, certain data about our site’s traffic and store it in log files. For this purpose, we use Internet Protocol (IP) addresses to analyze trends, execute the web sites, track our users’ activities, and gather broad demographic information for aggregate use. We may combine this automatically collected log information with other information we collect about you. We do this to improve the services we offer you, to improve marketing, analytics, or site functionality.

Local storage

We use Local Storage, such as HTML5, to store content information and preferences. Third parties with whom we partner to provide certain features on our website or to display advertising based upon your web browsing activity also use HTML5 to collect and store information. Various browsers may offer their own management tools for removing HTML5.

Preferences and opting-out

You may inform ACI of your preferences concerning the use of your information by “opting-out” of the following practices by submitting this request form.

If you permitted ACI to contract with third-party marketing partners working on behalf of ACI for to products or services to you and no longer want to enable ACI to do so, you can “opt-out” of our sharing your information with third-party partners for marketing purposes.

If you requested but no longer want ACI to inform you of upcoming payment obligations, notify you of a scheduled or successfully completed Auto Payment, or notify you of new or additional services offered by us from which you may benefit, you can “opt-out” from receiving this information.

If you receive commercial email from ACI and you do not want to receive any unsolicited commercial emails in the future, you can “opt-out” from receiving commercial email from ACI by using the unsubscribe link found in the emails or by submitting this request form.

ACI does not disclose private email communications that are transmitted using ACI services except as described in this Privacy Statement and as required to provide requested services or to reply to your email. In the ordinary course of our business, we may use the contact information you provide us to confirm a payment transaction and/or to alert you concerning any problems we may experience in attempting to process your payment

If you registered with a service on our sites to “opt-in”, you may receive information about new or additional services, other notifications, or information from ACI or our partners.

With your permission, we may also contact you to remind you of an upcoming payment commitment (e.g., a quarterly tax payment which is due), notify you of a scheduled or successfully completed Auto Payment, or inform you of new or additional services offered by us which may be beneficial to you. You may also contact ACI as noted above in the “Opt-Out” section if you no longer want to receive such information or other notifications.

SMS text messaging

For certain applications, we can send an SMS text message for payment confirmation and other messages to your mobile phone number. Once you provide us with your mobile phone number (message and data rates may apply), you will receive a text message from us to complete the setup process. By replying to the text message, you will be confirmed in writing that you have agreed to receive text messages containing information such as payment confirmations, bill reminders, and other relevant messages, including information to inform you of new or additional services offered by us from which you may benefit. Message frequency depends upon your payment activity and other information such as your geographic location that we may use to send you messages relevant to our services available in your area.

To opt-out at any time, respond to the text with OPT-OUT. If you cancel, we will send you a text message to confirm we have processed your cancellation. When you opt-out of receiving text messages, it does not affect the other services which are provided on our websites. For additional assistance, submit this request form.

Text messaging is not available in all areas. Not all mobile phones have SMS text capability.

Children

ACI recognizes the importance of children’s safety and privacy on the Internet. For this reason and to comply with certain laws, we do not intentionally collect personal, individually identifiable information from children under the age of 13, nor do we offer content targeted to children under 13.

Security

The security of your information is very important to us. We take commercially reasonable precautions consistent with applicable regulatory requirements and applicable published security standards to protect the personal information submitted to us. However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your personal information, we cannot guarantee absolute security. When doing business with others such as advertisers to whom you can link from our site, you should consider the separate security and privacy policies of those other sites. When you enter personal information (such as a credit card number), we encrypt the transmission of that information by using best industry practices as outlined by the Payment Card Industry Data Security Standard (PCI DSS).

If your sensitive personal information is accessed by an unauthorized individual and the misuse of your information is reasonably possible, we will notify you of the unauthorized access unless a law enforcement agency believes that such notification may interfere with a criminal investigation. The notification of such an event may be given to you by email or writing at our sole discretion.

If you have any questions about security on our web sites, please contact:

Brad Mullman
Chief Privacy Officer / Data Protection Officer
ACI Worldwide
3520 Kraft Road, Suite 300
Naples, FL 34105
Email: [email protected]

Our web sites include social media features and widgets (“features”), such as the Facebook Like and Share buttons. They also have interactive mini-programs. These features may collect your IP address and the page(s) you visit on our sites. In addition, they may set a cookie to enable the features to function properly. The features are either hosted by a third party or hosted directly on our web sites. Your interactions with these features are controlled by the Privacy Statement of the company providing it.

Links to other sites

Our web sites may provide a link to other third-party web sites. Please note that these third-party web sites are outside of our control and are not covered by this Privacy Statement. We encourage you to be aware when you leave our sites and to read the privacy policies of every web site that collects personal information. In addition, the companies operating these third-party sites may use cookies. We have no access to or control over these cookies. This Privacy Statement applies only to information collected by our web sites.

Revisions to privacy statement

We may amend this Privacy Statement from time-to-time, and at any time. If we make updates to this statement, we will update the Privacy Statement with the changes and revise the “Publish Date” posted at the top of this Privacy Statement. Any updates to the Privacy Statement become effective when we post the updates to our site. If we make any material changes we will notify you by email (sent to the e-mail address specified in your My Account) or, at our option, by using a notice on this Site before the change becoming effective. Your use of the site following the update to the Privacy Statement means that you accept the terms and conditions of the updated Privacy Statement.

User acceptance of privacy statement

By using our websites, you accept and consent to the terms and conditions of this Privacy Statement, and you agree to reread this Privacy Statement from time to time to stay informed of changes that may occur. If you do not agree to this Privacy Statement, we ask that you do not use our sites. ACI encourages you to periodically review the Privacy Statement for changes. Your continued use of the ACI web site following the posting of changes to these terms will mean that you accept those changes.

Other important information

US – State Privacy Laws: We will comply with state privacy laws to the extent they apply to ACI services.

California residents: In accordance with California law, we will not share information we collect about you with companies outside of ACI except as required or permitted by law. For example, we may share information to service your accounts, complete requested transactions, or to provide rewards or benefits to which you are entitled.

Effective January 1, 2020, California law grants you: (i) the right to know what personal information a Business has collected, disclosed, or sold about you; (ii) the right to have any personal information a Business collected from you deleted; and (iii) the right to request that a Business not sell your personal information.

ACI operates as both a Service Provider to others as well as a Business on its own behalf as those terms are defined by Cal. Civ. Code §1798.140(c).

In the prior 12-months, ACI collected the following categories of personal information about California Residents as a “Business”:

Identifiers such as your name, mailing address, email address, Internet Protocol address, Social Security number, or other similar identifiers.
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) such as your name, Social Security number, mailing address, telephone number, bank account number, credit card number, or debit card number.
Commercial information such as records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Internet or other similar network activity such as browsing history, search history, and information on consumer interaction with our websites.
Geolocation data such as physical location or movements.

We collect each of these categories of personal information directly from you or directly from our customers with whom you have a direct relationship, such as the merchant(s) you shop with or your financial institution(s). We collect these categories of personal information for our own internal business purposes to provide our products and services, to complete financial transactions requested or authorized by you, and, where applicable, to maintain your account(s).

We disclose these categories of personal information to our business partners, service vendors, suppliers, authorized third-party contractors who provide services on our behalf, and others as described in this Privacy Statement.

ACI does not sell the personal information of consumers and did not sell the personal information of any California Resident in the prior 12-months. In the prior 12-months, ACI has disclosed the following categories of personal information for its own business or commercial purposes as a “Business”:

Identifiers such as your name, mailing address, email address, Internet Protocol address, Social Security number, or other similar identifiers.
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) such as your name, Social Security number, mailing address, telephone number, bank account number, credit card number, or debit card number.
Commercial information such as records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Internet or other similar network activity such as browsing history, search history, and information on consumer interaction with our websites.
Geolocation data such as physical location or movements.

You have the right to request that we disclose to you:

i. The categories of personal information we have collected about you as a Business;
ii. The categories of sources from which we have collected your personal information as a Business;
iii. The business or commercial purpose for our collection of your personal information as a Business;
iv. The categories of third parties with whom we share your personal information as a Business;
v The specific pieces of personal information we have collected about you as a Business;
vi. If we have sold your personal information or disclosed your personal information for a business purpose:
a. The categories of personal information that we sold about you along with the categories of third parties to whom it was sold;
b. The categories of personal information that we disclosed about you for our business purposes.

You may request access to your personal information twice in any 12-month time-period, measured from the date your first request is received by us. If you submit a request to access your personal information more than twice in any 12-months, we will either: (i) proceed with honoring your request; or (ii) deny your request in writing.

You may also ask us to delete any personal information that we have collected from you. If you request that your personal information be deleted, we will delete all personal information we have collected from you and, as applicable, instruct our service providers to do the same unless we are legally permitted or required to retain it. You may request that we delete any personal information we have collected from you at any time.

There is no fee for exercising your rights. We will not discriminate against you for exercising any of your rights. If you exercise your rights, you will be asked to verify your identity. We will verify your identity using the personal information we have already collected about you. Any additional information you provide to us to verify your identity in connection with the submission of your request will not be used for any other purpose and will be deleted once your identity has been verified. You may exercise your rights by submitting this request form, emailing us at [email protected], or calling 1-800-485-0804. You may also designate an authorized agent to exercise these rights on your behalf by providing them with your written permission to do so and registering them with the California Secretary of State.

Nevada residents: Nevada law requires us to disclose that you may elect to be placed on our internal do-not-call list by calling us at 1-800-487-4567 or by submitting this request form. For further information, contact the Nevada Attorney General’s office at 555 E. Washington Ave., Suite 3900, Las Vegas, NV 89101; by phone at 702-486-3132; or by email at [email protected].

ACI does not sell the personal information of consumers. Nevada law gives Nevada residents the right to request that their personal information not be sold at any time, regardless of our current business practice. If you are a Nevada resident and wish to exercise this right, please submit your request by submitting a request form.

Texas residents: If you have a complaint, first contact ACI at 1-800-487-4567 or submit this request form. If you still have an unresolved complaint, please direct your complaint to the Texas Department of Banking: 2601 North Lamar Boulevard, Austin, TX 78705-4294; 1-877-276-5554 (toll-free); http://www.dob.texas.gov/

Vermont residents: In accordance with Vermont law, we will not share information we collect about you with companies outside of ACI except as required or permitted by law. For example, we may share information to service your accounts, complete requested transactions, or to provide rewards or benefits to which you are entitled.

EU: If you are located in the European Union, you have the right to lodge a complaint with your national data authority. Contact information can be found here: Data Authority Contact Information.

If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third-party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request. Under certain conditions, more fully described on the Privacy Shield website at https://www.privacyshield.gov/article?id=How-to-Submit-a-Complaint, you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.

Contact us

If you have any questions or comments related to this Privacy Statement, please write to us at the following address or email: