Tipalti privacy & data

We act as a data “processor” or “service provider” for our processing performed on behalf of customers under our agreements with them. In some cases, we may act as a data “controller” under certain data protection laws for the same data for specific purposes stated under this Privacy Policy.

Contact information, such as full name, email address, and phone number

Financial information, such as data including VAT ID, Social Security Numbers, TIN or EU Tax Identification Number, bank account number, IBAN, bank routing number or SWIFT code

When you use the Services, we may collect general location information (such as general location inferred from an IP address).

unique device identifiers (e.g. IDFA or Android ID)

We may also track when and how frequently you access or use the Services, including how you engage with or navigate our site or mobile application.

To facilitate, operate, and provide Services to our customers, including determining your initial and continued eligibility to use such Services

To facilitate and optimize our marketing and advertising campaigns, ad management and sales operations, and to manage and deliver advertisements for our products and Services more effectively

To support and enhance our data security measures, including for the purposes of preventing and mitigating the risks of fraud, error or any illegal or prohibited activity

We retain information about you for as long as reasonably necessary to achieve the stated purposes of collection

We and vendors on our behalf manage, store and process information about you in the United States, Canada, Israel, the United Kingdom, the European Union, and other locations as reasonably necessary

Standard Contractual Clauses (“SCCs”) approved by the European Commission

the EU adequacy decision

the Data Privacy Frameworks

If you have any questions about our data retention policy, please contact us by e-mail at privacy@tipalti.com

The right to access personal data held about you.

The right to request that we rectify any personal data we hold that is inaccurate or misleading.

The right to request the erasure/deletion of your personal data.

The right to data portability.

The right to object to or to request restriction of certain processing activities, including for direct marketing.

We do not knowingly “sell” or “share” the personal information of children under 16.