Check Digit - Payment Card Issuing, Processing, and Software Management.

Privacy Policy

Last updated April 2024

This Privacy Policy explains how Check Digit, LLC (“Check Digit”, “we”, “us”, or “our”) may collect and use the data you provide to us when you visit checkdigit.com or other websites or web pages hosted or operated by Check Digit (collectively, the “Sites”), or use Check Digit products, services, sandboxes, content, or similar, and the collection, use, storage, and sharing of information collected by us, either directly or through or on behalf of any of our business customers or their clients or end users, as the same may be updated, expanded, or enhanced from time to time (collectively, the “Services”). Our Sites and Services are intended for use only by United States residents, while located in the United States. If you are located in a country other than the United States, you are hereby notified that you may not access our Sites or use the Services from or through those Sites.

PLEASE READ THIS PRIVACY POLICY CLOSELY. By visiting one or more of the Sites, using the Services, and/or providing personal information to Check Digit, you agree that we may collect, use, store, and share your Personal Information as described in this Privacy Policy. We reserve the right to update or modify this Privacy Policy at any time and from time to time without prior notice. Please review this Privacy Policy periodically, and especially before You provide any information. This Privacy Policy was made effective on the date indicated above. BY USING THE SERVICES, YOU AGREE TO BE BOUND BY THE MOST RECENT VERSION OF THE PRIVACY POLICY.

IF YOU ARE A CALIFORNIA RESIDENT, PLEASE SEE THE “NOTICE TO CALIFORNIA RESIDENTS” SECTION BELOW. IF YOU ARE A NEVADA RESIDENT, PLEASE SEE THE “NOTICE TO NEVADA RESIDENTS” SECTION BELOW.

We collect Personal Information and Aggregate Information. “Personal Information” refers to information that can be used to identify an individual, and “Aggregate Information” refers to information that does not allow for such identification (e.g., aggregated demographic information, areas visited on a Site, duration of page views, what browser was used to access a Site, and similar information). The collection, use and storage of Personal Information is described in this Privacy Policy. The collection of Aggregate Information is also described in this Privacy Policy. Because Aggregate Information does not personally identify who it pertains to, it is our policy that such information may be used and/or shared by us for any purpose. We may remove identifiers from Personal Information to make it anonymous and thereafter will treat and use such information as Aggregate Information.

If you are a client or an end user of one of our business customers, Check Digit processes Personal Information on behalf of the business customer. Our processing of such Personal Information is governed by our agreement with that business customer. You acknowledge and agree that a business customer may require you to share personal information as a condition to you using the service being provided by us. This Privacy Policy also describes in further detail how we process personal information on behalf of our business customers. To the extent Check Digit shares Personal Information with our business customers as this Privacy Policy describes, this Privacy Policy does not apply to the business customers’ subsequent use of that information.

TYPE OF INFORMATION WE COLLECT

We collect information from you when you use the Services, contact or interact with us, and/or voluntarily provide us with your information in connection with using the Services.

Business information may include:

Business name
Employer Identification Number (EIN)
Business address
Business bank account

Personal Information may include:

Individual name
Individual address
Individual date of birth
Social Security Number (SSN)
Telephone number
Email address
Job title
Date of birth for an individual with administrator authorization
Username and password
Communication record (name, email, phone/webinar recording, survey response, chat history) for any customer care inquiry

Cookies, web beacons, tracking pixels and other technologies. We may use both session cookies (which expire once you close your web browser) and persistent cookies (which stay on your computer or device until you delete them) to provide you with a more personal and interactive experience on our website or when using our services. We may also use cookies or other tracking technologies provided by third-party analytics companies, such as Google Analytics, to collect information such as how often users visit the website, what pages they visit and for how long, what other sites they used prior to coming to the website, and other engagement data (including how you interact with our emails). We use this information to evaluate and improve our services.

Information collected by our servers, such as the referring/exit pages, your browser type, domain name, date/time stamp for your visit and your Internet Protocol (IP) address (a number that is automatically assigned to your computer or device when you use the Internet). We use this information to analyze trends, administer our services, monitor for fraudulent activities using fraud management tools, and better tailor the Services to different users’ needs.

WHERE WE STORE INFORMATION

Check Digit is located and based in the United States of America. The provision of the Services, and processing and use of the information you provide to us, is done in the United States. Upon providing us with Personal Information, and/or by accessing and using a Site or the Services, you consent to the processing, transfer, and storage of such information on, in, and to our servers located within the United States.

HOW WE USE YOUR INFORMATION

Service delivery:

Facilitate the creation of, and secure and maintain authorized user accounts
Identify legitimate users of the Services
Provide improved administration of the Services
Provide the Services
Respond to inquiries or provide support for the Services
Protect against fraud or ensure the security of our systems or the Services
Improve the quality of experience when using the Services
Track activity and diagnose issues with the Sites or the Services
Send administrative email notifications, such as security or support and maintenance advisories
With respect to client or end user information, for any purposes at the direction of our business customer

Creation of anonymous data: To continuously improve our technology, we may anonymize Personal Information and use that data to train our algorithms and data models, test and improve how existing Services look and function, develop enhancements and new capabilities and features, and for other business purposes.

Compliance, fraud prevention and safety: We may use Personal Information and/or disclose it to law enforcement, government authorities, and private parties as we believe necessary or appropriate to: (1) protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims); (2) audit our internal processes for compliance with legal and contractual requirements; (3) enforce the terms and conditions that govern our services; and (4) protect, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity, including without limitation cyber-attacks, cyber-bullying or stalking, and identity theft.

HOW WE SHARE YOUR INFORMATION

We may share Personal Information:

At the direction of our business customers, if you are a client or an end user of one of our business customers.
With service providers that perform services on our behalf or help us operate our services (such as customer support, hosting, analytics, email delivery, marketing, and database management services). These service providers may use your information only as directed or authorized by us and in a manner consistent with this Privacy Policy and are prohibited from using or disclosing your information for any other purpose.
At your direction, if you provide Personal Information directly to us in connection with the Services or affirmatively opt in to specific features or functionality, we may share your Personal Information with the relevant business customer or service providers.
In the context of a business transfer, we may sell, transfer or otherwise share some or all of our business or assets, including information, in connection with a business transaction (or potential business transaction) such as a corporate divestiture, merger, consolidation, acquisition, reorganization or sale of assets, or in the event of bankruptcy or dissolution.
To comply with the law: we may be required to disclose your information to comply with applicable local, state, federal, or international laws or regulations, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities or court orders, or for the compliance, fraud prevention, and safety reasons described in this Privacy Policy.

CONFIDENTIALITY AND SECURITY

We take the privacy and security of Personal Information and business information seriously. We implement administrative, technical and physical measures in an effort to safeguard the information in our custody and control against theft, loss and unauthorized access, use, modification, and disclosure. Nevertheless, transmission via the internet is not completely secure or error free, and we cannot guarantee the security of your information. Authorized users are responsible for establishing unique credentials to access their authorized accounts. All authorized users are responsible for any actions on their accounts that result from access to the accounts with users’ valid credentials, except where the user, or the business customer, notified Check Digit at support@checkdigit.com that the credentials have been compromised. WE ASSUME NO LIABILITY FOR DISCLOSURE OF YOUR INFORMATION DUE TO TRANSMISSION ERRORS, THIRD-PARTY ACCESS, OR CAUSES BEYOND OUR CONTROL.

RETENTION

We retain Personal Information in accordance with all applicable laws and for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for fraud prevention purposes. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because Personal Information has been stored in backup archives), then we will securely store such Personal Information and isolate it from any further access or use until deletion is possible.

INDEMNIFICATION

You are solely responsible for maintaining the confidentiality of your authorized users’ username(s), password(s), account(s), and all activities occurring under your account(s). You hereby agree to indemnify, defend, and hold Check Digit and each of our officers, directors, manages, members, equity holders, employees, contractors, agents, representatives, and other authorized users, and each of the foregoing’s heirs, authorized representatives, successors, and assigns (collectively the "Indemnified Parties") harmless from and against any and all losses, damages, liabilities, and costs (including without limitation reasonable attorneys’ fees and costs) incurred in connection with any claim arising out of any breach by you or your authorized users of this Privacy Policy. You agree to use your best efforts to cooperate with us in the defense of any claim. We reserve the right, at our own expense, to employ separate counsel and assume the exclusive defense and control of any matter otherwise subject to indemnification by you.

LINKS TO OTHER SITES

Our Sites may contain links to third party websites, including without limitation to our business customers’ or their clients’ sites. When you click on a link to any other website or location, you will leave our Site and go to another site and another entity may collect personal and/or anonymous information from you. The provision of a link to any other website or location is for your convenience and does not signify our endorsement of such other website or location or its contents. We have no control over, does not review, and cannot be responsible for, these outside websites or their content. Please be aware that the terms of this Privacy Policy do not apply to these outside websites. We encourage you to read the privacy policy of every website you visit.

PRIVACY CHOICES

Depending on your state of residence, you may have some or all of the following rights: Right of access. An individual may have the right to request copies of the Personal Information that we hold about you and to receive additional information from us about how your Personal Information is used. Right of erasure. In certain circumstances, an individual may have the right to require us (or any parties with whom we have shared such information) to delete the Personal Information that we hold (for example, if it is no longer necessary for the purposes for which it was originally collected or to comply with applicable law). Right to object to or opt-out of processing. An individual may have the right to request that we stop processing Personal Information or that we restrict processing of Personal Information in certain circumstances. Right of portability. An individual may have a right to obtain and reuse Personal Information for their own purposes or across different services, including to provide or port that information to another provider. Right to correction. An individual may have the right to require us to correct any inaccurate or incomplete Personal Information.

We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact us using the contact information below. We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing. Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain in reasonable detail the reasons we cannot comply with a request, if applicable.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

CHILDREN

The Services are not directed at children under the age of 18, and our Terms of Service do not allow children under 18 years of age to use our services. If we learn that we have collected information of a child under the age of 18, we will delete it. We encourage parents with concerns to contact us at support@checkdigit.com.

NOTICE TO CALIFORNIA RESIDENTS

We are providing this supplemental privacy notice to Consumers in California, pursuant to the California Consumer Privacy Act of 2018 (“CCPA”). This section does not apply to our business customers’ clients or their end users. Those parties should submit their requests to the relevant business customer and Check Digit will cooperate with the business customer pursuant to our agreement.

We do not sell Personal Information in the traditional sense. As we explain in this Privacy Policy, we use cookies and other tracking technologies to analyze website and application traffic and use. To limit use of cookies and other tracking technologies, please review the instructions provided in the Online Tracking Opt Out Guide.

The CCPA grants California residents the following rights. Information: You can request information about how we used and shared your personal information through the Services during the past 12 months. Access: You can request a copy of the personal information that we maintain about you. Deletion: You can ask to delete the personal information that we maintain about you. Opt-out of sale of your personal information: We do not sell Personal Information. We do offer instructions on how to limit online tracking in the Online Tracking Opt Out Guide.

Please note that the CCPA limits these rights by, for example, prohibiting businesses from providing certain sensitive information in response to an access request and limiting the circumstances in which they must comply with a deletion request.

You are entitled to exercise the rights described above free from discrimination.

We describe the sources through which we collect personal information and the types of personal information collected above. We describe the purposes for which we use and share this information above.

Here is how you can submit requests: To request access to or deletion of personal information collected via your use of our website or applications, please email us at support@checkdigit.com. To learn how to limit tracking, please see the Online Tracking Opt Out Guide. To verify your identity prior to responding to your requests, we may ask you to confirm information that we have on file about you or your interactions with us. Where we ask for additional personal information to verify your identity, we will only use it to verify your identity or your authority to make the request on behalf of another consumer. Authorized agents: California residents can empower an “authorized agent” to submit requests on their behalf.

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not: Deny you goods or services. Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties. Provide you a different level or quality of goods or services. Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

NOTICE TO NEVADA RESIDENTS

Senate Bill No. 220 (May 29, 2019) amends Chapter 603A of the Nevada Revised Statutes to permit a Nevada consumer to direct an operator of an Internet website or online service to refrain from making any sale of any covered information the operator has collected or will collect about that consumer. You may submit a request pursuant to this directive by emailing us at support@checkdigit.com. To verify your identity prior to responding to your requests, we may ask you to confirm information that we have on file about you or your interactions with us. Where we ask for additional personal information to verify your identity, we will only use it to verify your identity or your authority to make the request on behalf of another consumer.

PRIVACY POLICY UPDATES

As noted above, this Privacy Policy is subject to occasional revision. Check Digit will notify you of any material changes in its collection, use, or disclosure of your Personal Information by posting a notice on our website. Any material changes to this Privacy Policy will be effective thirty (30) calendar days following notice of the changes on our website. These changes will be effective immediately for new users of the Services. If you object to any such changes, you must notify Check Digit prior to the effective date of such changes that you wish to deactivate your account. Continued use of the Services following notice of any such changes shall indicate your acknowledgement and acceptance of such changes.

CONTACT CHECK DIGIT

If you have any questions or complaints about this Privacy Policy or Check Digit’s data collection or processing practices, or if you want to report any security violations to us, please contact us by email at: support@checkdigit.com Or by mail at: Check Digit LLC 27 West 24th Street, Suite 402 New York, NY 10010

ONLINE TRACKING OPT OUT GUIDE

Like many companies online, we may use services provided by Google, Facebook, Twitter and other companies that use tracking technology. These services rely on tracking technologies – such as cookies and web beacons – to collect directly from your device information about your browsing activities, your interactions with websites, and the device you are using to connect to the internet. There are a number of ways to opt out of having your online activity and device data collected through these services, which we have summarized below:

Blocking cookies in your browser: Most browsers let you remove or reject cookies, including cookies used for interest-based advertising. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. For more information about cookies, including how to see what cookies have been set on your device and how to manage and delete them, visit: www.allaboutcookies.org. Blocking advertising ID use in your mobile settings: Your mobile device settings may provide functionality to limit use of the advertising ID associated with your mobile device for interest-based advertising purposes. Using privacy plug-ins or browsers: You can block our websites from setting cookies used for interest-based ads by using a browser with privacy features, like Brave, or installing browser plugins like Privacy Badger, Ghostery, or uBlock Origin, and configuring them to block third party cookies/trackers. You can also opt-out of Google Analytics by downloading and installing the browser plug-in available at: https://tools.google.com/dlpage/gaoptout. Platform opt-outs: The following advertisers offer opt-out features that let you opt-out of use of your information for interest-based advertising: Google: adssettings.google.com Facebook: www.facebook.com/about/ads Twitter: twitter.com/settings/personalization Advertising industry opt-out tools: You can also use these opt-out options to limit use of your information for interest-based advertising by participating companies: Digital Advertising Alliance for Websites: optout.aboutads.info Digital Advertising Alliance for Mobile Apps: www.youradchoices.com/appchoices Network Advertising Initiative: optout.networkadvertising.org/?c=1

Note that because these opt-out mechanisms are specific to the device or browser on which they are exercised, so you will need to opt out on every browser and device that you use.