• Log data: Our servers automatically record information when you access the Website, the type of browser you are using and its settings, the third party website you visited immediately prior to accessing the Website, the operating system you are using, the domain name of your internet service provider, the search terms you use on the Website, the specific pages of the Website you visit, and the duration of your visits.
• Cookie data: Like many websites, we use "Cookies" to obtain certain types of information when your web browser accesses the Website. "Cookies" are small text files that we transfer to your computer's hard drive or your web browser memory to enable our systems to recognize your browser and to provide convenience and other features to you, such as recognizing you as a frequent user of the Website. We may use "session cookies" (cookies that last until you close your browser) or "persistent cookies" (cookies that last until you or your browser delete them). Examples of the information we collect and analyze from cookies include your activity on the Website, including the URL you come from and go to next (whether this URL is on our site or not).

If the Website contains link through to third party websites, those processes may involve the placement of third party cookies on your machine or device. Please be aware that we do not control these third party websites or any of the content contained on those websites, including the third-party cookies used for these purposes. The inclusion of links to third party websites in no way constitutes an endorsement by us of such websites' content, actions, or policies.

If you are concerned about the storage and use of cookies, you may be able to direct your internet browser to notify you and seek approval whenever a cookie is being sent to your web browser or hard drive. You may also delete a cookie manually from your hard drive through your internet browser or other programs. Please note, however, that some parts of the Website may not function properly or be available to you if you refuse to accept a cookie or choose to disable the acceptance of cookies.

• Experience data: We collect other PI that is voluntarily provided by you from time to time if you respond to surveys, polls or questionnaires, and/or website registration forms. Such PI may include personal preferences, opinions and experiences with our products and services, and may be provided anonymously.

• Analyzing website traffic, which allows us to improve the design and content of the Website
• Legal, regulatory or law enforcement purposes, including compliance with local and national laws (including card brand rules and requests from law enforcement and regulatory authorities); enforcing our legal rights and satisfying our legal obligations, including, without limitation, any reporting or disclosure obligations under applicable law or regulations or subpoena, court order or other judicial or administrative process, or when we believe in good faith that disclosure is legally required or otherwise necessary to protect our rights and property, or the rights, property or safety of others; conducting our own due diligence checks, preventing, detecting and prosecuting fraud or crime or to assist others in doing so; assisting in investigation by third-party vendors, financial organizations or third parties of suspected criminal activity; assessing financial and insurance risks; notifying you about important changes or developments to the Website or our services, recovering debt or in relation to your insolvency, including tracing your whereabouts; identifying and monitoring for fraud; maintaining internal recordkeeping and reporting; preparing and furnishing compilations and analyses as well as other reports of aggregated and anonymized PI; checking your personal or business credit status/profile and identity; and recording and tracking details of your transactions or your customer's transactions
• Evaluating credit risk, including conducting our own due diligence checks; checking your personal or business credit status/profile and identity; recording and tracking details of your transactions or your customer's transactions; maintain internal recordkeeping and reporting; identifying and monitoring for fraud; assessing financial and insurance risks; mitigating PI security, sector or credit risk; and commercial purposes, such as trend analysis and the use of data analytics to obtain learnings and insight around cardholder transaction patterns and usage
• Fraud monitoring, including monitoring merchant or other customer transactions in an effort to detect and prevent fraud; maintaining internal recordkeeping and reporting; preparing and furnishing compilations and analyses as well as other reports of aggregated and anonymized PI; and providing or developing more innovative and effective fraud monitoring services for our merchants or other customers
• Maintaining Security, including conducting our own due diligence checks; administering the Website and services for internal operations, including troubleshooting; keeping the Website and services safe and secure; maintaining internal recordkeeping and reporting; identifying and monitoring for fraud; and mitigating PI security, sector or credit risk
• Marketing, including marketing or market research; performing analysis and comparisons; maintaining internal recordkeeping and reporting; improving and developing our business; providing PI about the Website and services you requested, purchased or which may be of interest to you; providing or developing more innovative and effective services for our partners, merchants or other customers; communicating with you; creating promotional materials, social media site integration and interaction; notifying you about important changes or developments to the Website and services; improving the Website and services, and ensuring content is presented in effective way; allowing you to participate in interactive features of the Website
• Product development, including providing or developing the Website and services to be more innovative, user friendly and effective; maintaining internal recordkeeping and reporting; preparing and furnishing compilations and analyses as well as other reports of aggregated and anonymized PI
• Customer Service/Account Management, including enabling you to contact us; providing training; authorizing and establishing commercial user and merchant accounts; maintain internal recordkeeping and reporting; enabling you to upload and/or store PI; obtaining your views on the Website and services; allowing you to participate in interactive features of the Website; responding to any inquires by you; providing the Website and services to you and your business; subscribing you to our services; registering your use of services where applicable, processing your application for services; and notifying you about important changes or developments to the Website or services
• Operations, including IT, security and analytics services
• Risk Management, including fraud mitigation and management, authentication and acceptance
• Transaction Processing, including compliance monitoring, card brand operations, disputes/chargebacks, capturing payments, settlement, gateway services, pre-paid card processing and program management and authorization

• Legal or regulatory purposes, including when required or permitted to do so by law or regulations, including for tax purposes or to comply with financial services regulations; in the course of litigation; when following requests from governmental or public authorities; and when we believe in good faith that disclosure is legally required or otherwise necessary to protect our rights and property, or the rights, property or safety of others
• Business purposes, including improving and developing our business, business partners, suppliers and sub-contractors for the performance of any contract we may enter into with them or you, transferring PI and/or assets in the event of a merger, acquisition, sale, bankruptcy filing, or other corporate restructuring (if we or substantially all of our assets are acquired by a third party, in which case PI held by it about its customers will be one of the transferred assets); and if we sell or buy any business or assets, in which case we may disclose your PI to the prospective seller or buyer of such business or assets
• Commercial purposes, we collect information from official records, such as tax records, driving records, criminal and civil court records that are generally publicly available that may be shared with third parties.

Suppliers who assist us with the provision of its services, including fulfilling or processing application forms, processing payments; managing credit, security, sector and fraud risk, market research and survey activities

• Email communications, including use your email address to respond to your questions or comments, and we may save your questions or comments for future reference. We may email you when you inquire about our business or our family of companies or our products and services or when you consent to being contacted by email for a particular purpose. For security reasons, we do not recommend that you send personal PI, such as passwords, social security numbers, or bank account PI, to us by email
• Transfer of Assets, including the sale or purchase of all or substantially of our assets as we continue to develop our business, or if any bankruptcy or reorganization proceeding is brought by or against us, PI will be transferred to and used by an acquiring entity or third party.

To the extent we are deemed to "sell" your non-public personal information (as the term "sell" is defined under law, such as the California Consumer Privacy Act), you have the right to opt-out of that "sale" on a going-forward basis at any time. "Third parties" with whom we have shared PI in the last 12 months, and may share with in the future, may include, but not be limited to, service providers, governmental authorities, buyer in the event of a sale, contractors, third parties who market their products and services to the individual, subsidiaries and affiliates, and in some cases with customers (like schools and landlords).

Notwithstanding anything herein to the contrary, we reserve the right to disclose any PI about you if we are required to do so by law, with respect to copyright and other intellectual property infringement claims, or if we believe that such action is necessary to fulfill a government request; conform with the requirements of the law or legal process; protect or defend our legal rights or property, the Website, or other members of our family of companies; or in an emergency to protect the health and safety of the users of the Website or the general public

You may request, up to twice in a 12-month period, the following information about the PI we have collected about you during the past 12 months, the categories and specific pieces of PI we have collected about you, the categories of sources from which we collected the PI, the business or commercial purpose for which we collected the PI, the categories of third parties with whom we shared the PI, the categories of PI about you that we disclosed for a business purpose, and the categories of third parties to whom we disclosed that information for a business purpose. Subject to certain limitations under applicable law, you may request that we delete the PI we have collected. To submit a request to exercise any of the rights described above, you may contact us by emailing compliance@payroc.com. We may need to verify your identity before responding to your request, such as verifying that the email address from which you send the request matches your email address that we have on file. Authentication based on a government-issued and valid identification document may be required.

• Cookies and Automatic Data Collection Technologies. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. However, if you disable or refuse cookies, please note that some parts of the Website may become inaccessible or not function properly. If you do not want Google Analytics to be used in your browser, Google Analytics provides an op-out tool which can be found here. You can opt-out of Adobe Analytics by using Adobe's opt-out browser add-on at http://www.adobe.com/privacy/opt-out.html. In some cases, you may be able to set your browser or email program to not download web beacons.
• California Shine the Light Law. California's "Shine the Light" law (Civil Code Section § 1798.83) permits users of our website that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. At this time, we do not engage in this type of disclosure.
• Nevada Residents. Nevada residents have the right to opt out of the sale of certain "covered information" collected by operators of websites or online services. We do not sell covered information, as "sale" is defined by such law, and have no plans to sell this information.