Effective Date: July 3, 2025
ACI Worldwide, Inc. ("ACI", "we", "us", or "our") provides electronic payments, bill presentment and payment services for individuals, companies, and organizations around the world. ACI takes the privacy of your Personal Data seriously and is committed to protecting your privacy. This Privacy Policy applies to ACI Worldwide, Inc., its affiliates and subsidiaries, but does not apply to ACI Payments, Inc. ACI Payments, Inc.'s privacy policy may be accessed here.
This Privacy Policy explains what Personal Data ACI collects about you, the circumstances under which we may collect your Personal Data, how we will use and secure your Personal Data, and to whom we may disclose your Personal Data. It also describes the choices and applicable rights you may have with regard to your Personal Data in our possession or control.
We may amend this Privacy Policy at any time. Any amendments to the Privacy Policy will become effective when posted to this site as indicated by the "Effective Date." Your use of ACI website(s) or our products and services following any amendment to the Privacy Policy will be deemed to be your acceptance of it. If we make any material changes we will notify you by email (sent to the e-mail address specified in your My Account) or, at our option, by means of a notice on this Site prior to the change becoming effective.
This Privacy Policy does not apply to websites owned and operated by third parties, even where hyperlinks to those websites may be provided by ACI. We have no access to or control over those third party websites. When visiting those websites, you should review and become familiar with the privacy policies which apply to those third party sites and how those sites address the handling of your Personal Data.
Understanding data privacy and your rights with regard to your Personal Data is important to ACI. The following definitions will apply to the capitalized terms used throughout this Privacy Policy.
Applicable Law means the laws, regulations, or industry standards of a country or region which govern ACI's processing of your Personal Data. For example, if you are a resident of a member state within the European Union the primary law which will apply to ACI's processing of your Personal Data will be the General Data Protection Regulation (the "GDPR").
Personal Data means any information which identifies you or is capable of being used to identify you. As used in this Privacy Policy it shall be synonymous with, and inclusive of, the terms Personal Information, Protected Health Information ("PHI"), or Non-Public Personal Information as those terms are defined by Applicable Law. All general references to Personal Data in this Policy shall be inclusive of Special Categories of Personal Data or Sensitive Personal Data.
Examples of Personal Data include, but are not limited to, your name, address, email address, Social Security or similar government ID number, internet protocol ("IP") address, and financial account numbers.
Special Categories of Personal Data or Sensitive Personal Data means Personal Data which reveal your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union memberships, caste or tribal affiliation, genetic data, biometric data uniquely identifying a natural person, data concerning health or a natural person's sex life or sexual orientation, or data concerning the commission or alleged commission of any offense and any related court proceedings or criminal convictions.
Data Controller or Business means the natural person or legal entity who determines, either individually or jointly with others, the purpose and means of processing for Personal Data. For example, ACI will generally be a Data Controller or Business with regard to the Personal Data of its employees and the Personal Data it collects through its company website(s).
Data Processor or Service Provider means the natural person or legal entity which processes Personal Data on behalf of a Data Controller or Business.
Data Protection Authorities means the relevant governmental authority with jurisdiction over our processing of your Personal Data.
The types of Personal Data we collect, use and store depends on the nature of your relationship with ACI. The Personal Data that ACI may collect about you includes, but is not limited to:
- Your name, mailing address(es), email address(es), and phone number(s)
- Your credit card, debit card, or bank account number(s), expiration date(s), and cardholder or account holder name(s)
- Your Social Security Number (SSN), government ID number, passport number, and/or employer identification number (EIN)
- Other unique identifiers such as your user name(s), account number(s), or password(s)
- Technical data such as geolocation data, IP addresses, and mobile device IDs
- Employment-related information such as resumés, employment history, education information, references and background checks
Personal Data may be collected by ACI directly from you based on your interactions with us, through third parties acting on our behalf, or from our customers with whom you have a direct relationship. For example:
- Directly from you when you access, visit, or interact with ACI's website(s)
- From our customers with whom you do business to complete your financial transactions, such as the financial institution with whom you bank or the merchants with whom you shop
- From third parties with whom we partner or contract to provide our products and services directly to you or to our customers
- Directly from you when you seek employment with us or about you from individuals seeking employment with us (such as employment history, personal and professional references, and emergency contact information)
When we collect your Personal Data, it is collected for specific, explicit, and legitimate purposes and will be processed only to fulfill those purposes. ACI only collects that Personal Data which is adequate, relevant, and limited to what is necessary for us to fulfill those purposes. If ACI intends to use your Personal Data for any new purposes not previously identified to you and which are incompatible with the original purposes, you will be notified of those new purposes before that intended use and, where applicable, provided the means by which you may restrict our use of your Personal Data for those new purposes.
In instances where we collect Personal Data directly from you, you are not required to provide your Personal Data to us. However, if you do not permit the collection of your Personal Data in those circumstances, we may be unable to provide our products or services to you, consider you for employment, or ensure the proper functioning of our website(s), products, or services.
We will use your Personal Data in accordance with the terms of this Privacy Policy as well as any applicable Privacy Notice(s) you may receive in connection with your employment with ACI or the specific products or services we provide directly to you or which our customers provide to you. We will use your Personal Data for the following purposes:
- To provide our products and services to you or to our customers with whom you do business
- To complete financial transactions requested by you or conducted on your behalf
- To protect against and prevent fraud
- To detect and prevent money-laundering, cooperate with criminal investigations, and respond to court orders
- To enforce our rights and initiate or defend legal actions involving ACI
- To market our products and services or those of our partners to you
- To provide customer service to you, personalize our website(s) for you, and otherwise communicate with you
- To conduct our everyday business operations, including to develop, maintain, improve, test, evaluate, and update our products and services
- To fulfill our contractual obligations to you and to our customers
- To comply with all legal requirements applicable to ACI
We do not sell or rent your Personal Data or provide lists of our customers to third parties for their direct marketing purposes.
The security of your Personal Data is important to ACI. When ACI processes your Personal Data, we engage technical and organizational security measures using commercially reasonable industry practices as outlined by Applicable Law, including current industry standards such as those published by the Payment Card Industry Security Standard Council (PCI), International Organization for Standardization (ISO), and National Institute of Standards and Technology (NIST).
The technical and organizational measures ACI implements to protect your Personal Data include, but are not limited to:
- Appropriately encrypting your Personal Data in transit and in storage
- Limiting access to your Personal Data to only those employees with a legitimate need for access to perform their job functions or provide our products and services
- Protecting systems and databases through the use of appropriate access controls, firewalls, and anti-intrusion measures
- Securing ACI premises and offices through the use of on-site security personnel, closed-circuit security cameras, and access controlled entryways
In addition to internal technical and organization security measures such as these, ACI undergoes regular external audits of its security measures by independent auditors. ACI regularly monitors, reviews, and updates its technical and organizational security measures to ensure that its measures are kept current with and appropriately address emerging threats and vulnerabilities.
In the event that your Personal Data is accessed by an unauthorized individual and a misuse of that Personal Data would be likely to result in a risk to your rights and freedoms or in a risk of unauthorized use, we will notify you as required by Applicable Law unless a law enforcement agency believes that such notification may interfere with any applicable criminal investigation.
ACI will retain your Personal Data only as long as it is necessary to provide our products and services to you or our customers, to fulfill the specific lawful purposes we collected it for, to resolve disputes or defend or commence legal actions, to administer and comply with our contractual obligations, and to comply with Applicable Law.
When your Personal Data no longer needs to be retained, and depending on the exact circumstances involved, we will:
- Delete it from our systems in a safe and secure manner
- Return it to our customer or the third party from whom we collected it
- De-personalize it so it may no longer be used to identify you (commonly referred to as "Anonymization")
ACI must disclose Personal Data in order to conduct its everyday business operations and to provide its products and services to you and its customers across the globe. Where it is necessary for ACI to disclose your Personal Data to an authorized third party, we will disclose only the minimum amount of Personal Data necessary to complete the purposes for the disclosure. The third parties to whom ACI discloses your Personal Data are or will be subject to contractual obligations to appropriately protect and secure it, maintain its confidentiality, abide by ACI's instructions for its processing, use it only to fulfill the purpose for its disclosure, and comply with Applicable Law.
We may disclose your Personal Data to our business partners, service providers, suppliers, business consultants, legal advisors, accountants, and other authorized third parties who provide services to ACI or who perform marketing or other functions on our behalf.
In the course of its business operations, it is possible that ACI may be involved in, or be the subject of, various business transactions, including a merger, acquisition, reorganization, or sale of business units or assets. Such transactions may involve the Personal Data collected by ACI and that Personal Data may be disclosed to the other parties involved in those transactions. To the extent that such transactions involve the Personal Data collected by ACI, this Privacy Policy will continue to apply to your Personal Data unless amended by ACI or by the other parties involved in the transaction as may be applicable.
There may be circumstances where ACI is required by Applicable Law to disclose Personal Data to a variety of law enforcement or government agencies. These circumstances may include situations where we suspect fraudulent or criminal activities, are required to cooperate with legal investigations, or must comply with court orders or other legal proceedings. In such circumstances, ACI will take commercially reasonable steps to disclose only the Personal Data that is required to fully comply with Applicable Law. Where applicable and appropriate, ACI may also take necessary legal steps to prevent the disclosure of Personal Data in such circumstances, such as seeking protective orders or requesting to quash or limit legal subpoenas.
ACI recognizes the importance of children's safety and privacy on the Internet. ACI's website(s), products and services are not directed at children. We do not intentionally collect Personal Data from children under the age of 13, nor do we offer content targeted to children under 13.
"Cookies" are small packs of data which are placed in your internet browser and used by website operators such as ACI to provide such functionalities as tracking your visits and activity and storing your online log-on information and preferences. ACI uses cookies and similar online tracking technologies for numerous purposes, including:
Storing Your Preferences and Settings. Settings that enable our website to operate correctly or that maintain your preferences over time may be stored on your device. For example, we save preferences, such as language, browser and multimedia player settings, so those do not have to be reset each time you return to the site.
Sign-in and Authentication. When you sign into a website using your personal ACI account, we store a unique ID number, and the time you signed in, in an encrypted cookie on your device. This cookie allows you to move from page to page within the site without having to sign in again on each page.
Security. We use cookies to detect fraud and abuse of our websites and services.
Interest-Based Advertising. ACI uses cookies to collect data about your online activity and identify your interests so that ACI and our advertising partners can provide advertising that is most relevant to you.
Analytics. To provide our products, and improve your user experience on our website, we use cookies and other identifiers to gather usage and performance data.
Most web browsers automatically accept cookies but provide controls that allow you to block or delete them. In most web browsers, you can block or delete cookies by clicking Settings > Privacy > Cookies.
Certain features of ACI products and services depend on cookies. If you choose to disable cookie functionality, you may not be able to sign in or use those features and preferences that are dependent on cookies may be lost.
"Log files" are automatically produced files that contain a detailed record of events occurring from within selected software or operating systems. We may automatically gather, or engage a third party to gather, certain information about our website's traffic and store it in log files. We use Internet Protocol (IP) addresses to analyze trends, execute the websites, track users' activities, and gather broad demographic information for aggregate use.
ACI's corporate headquarters is located in the United States but we have offices and data centers around the world. As a result, the Personal Data ACI collects about you may be transferred across international borders, including outside of the country in which you reside.
Where Personal Data is transferred by ACI across international borders, that Personal Data will be transferred in accordance with Applicable Law, including, but not limited to, through the use of one or more of the following lawful mechanisms where required:
- Adequacy determinations issued by relevant Data Protection Authorities
- Explicit consent from you
- Model Contractual Clauses (also referred to as Standard Contractual Clauses)
- Other lawful grounds set forth in Applicable Law
ACI and its subsidiary ACI Payments (collectively "ACI") complies with the EU-U.S. Data Privacy Framework and related certifications. If there is any conflict between the terms in this Privacy Policy and the Data Privacy Framework Principles, the Principles shall govern.
ACI recognizes and respects your Personal Data rights. The following rights may apply to you, depending on your location:
Confirmation and Access. You may have the right to request that we confirm whether we have collected Personal Data about you and, if we have, to request access to that Personal Data.
Correction. You may have the right to request that we correct and update your Personal Data or otherwise permit you to provide supplementary information to complete your Personal Data where applicable.
Deletion. You may have the right to request that we delete the Personal Data we have collected about you, subject to exceptions under Applicable Law.
Restriction of Processing. You may have the right to restrict our processing of your Personal Data as provided by Applicable Law.
Objection. You may have the right to object at any time to ACI's processing of your Personal Data based on our legitimate interests or any processing we may conduct in the public interest.
Data Portability. You may have the right to receive a copy of the Personal Data you have provided to ACI in a structured, commonly used and machine-readable format.
Automated Decision-Making or Profiling. You may have the right not to be subject to a decision based solely on ACI's automated processing, including profiling, which produces a legal effect or similarly significantly affects you.
You may exercise your Personal Data rights and preferences by contacting us through one of the following methods:
- Submit your request online using the data subject request form
- Contact the ACI Privacy Office by email at mbox-aci-Privacy-DataProtection@aciworldwide.com
- Write to us at: Data Protection Officer, ACI Worldwide, Inc., 6060 Coventry Dr, Elkhorn, NE 68022
- Opt-out from SMS text messages by replying OPT-OUT to any message received
- Opt-out from marketing emails using the unsubscribe link in any email
There is no fee for exercising your Personal Data rights and we will not discriminate against you for doing so. We will respond to your requests within the time frames required under Applicable law.
If you have inquiries or complaints regarding this Privacy Policy, you can contact ACI at:
ACI Worldwide Corp.
Attention: Data Protection Officer
Woking One, 6 Albion House, High Street
Woking, Surrey, GU21 6BG
Email: mbox-aci-privacy-dataprotection@aciworldwide.com
For residents of the European Union, you may file a complaint with your national Data Protection Authority.
For residents of other regions, please refer to the applicable regulatory authorities in your jurisdiction.
If you have any questions or comments related to this Privacy Policy or ACI's processing of your Personal Data, please contact ACI at:
Dan O'Brien
Data Protection Officer
ACI Worldwide, Inc.
Woking One
6 Albion House, High Street
Woking, Surrey GU21 6BG
United Kingdom
Email: mbox-aci-Privacy-DataProtection@aciworldwide.com
Last Updated: July 3, 2025
For prior versions, see Privacy Policy Updates