California Privacy Policy

Last Updated: March 13th, 2026

1. Important Scope: Who This California Privacy Notice Covers and Does Not Cover

This California privacy notice (“California Privacy Notice”) describes how we collect, use, secure, and share information when you visit www.jackhenry.com and our other business-to-business (“B2B”) websites (collectively, the “Website”) and explains your California privacy rights and how to exercise them. This California Privacy Notice applies only to “Consumers” as defined by the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

Website Visitors and B2B Contacts: This California Privacy Notice DOES apply to information collected through the Website and marketing communications. In those instances, Jack Henry acts as a Business.

Customers of Financial Institutions: If you are a customer of a bank or credit union that uses Jack Henry software, please refer to your financial institution’s privacy policy. This California Privacy Notice DOES NOT apply to such information. In those instances, Jack Henry acts as a Service Provider, and your financial institution is the Business.

Note: When we act as a Service Provider for your financial institution, we CANNOT process your data rights requests. Because your data is held by your financial institution, only that institution can fulfill your data rights request. Please contact the financial institution where your account is maintained.

2. Notice at Collection: Personal Information We Collect

This California Privacy Notice is our Notice at Collection. In the preceding twelve (12) months, we may have collected the following categories of personal information from the sources listed below:

Category	Examples	Collected From	Purpose of Collection
Professional Information	Job title, employer name, industry	Web Forms Messages	B2B Sales Verification Marketing & Sales
Internet or Similar Network Activity	Browsing history on our Website, search history	Cookies and pixels	Website Analytics
Geolocation Data	General/IP-based physical location or movements	Cookies and pixels	Website Analytics

Disclosure Table

Category	Collected?	Shared for Business Purpose?	Sold/Shared for Ads
Identifiers	Yes	Yes	No
Commercial Info	Yes	Yes	No
Professional Info	Yes	Yes	No
Internet Activity or Similar Network Activity	Yes	Yes	No
Geolocation	Yes	Yes	No
Sensitive Personal Information	No	No	No

Retention: For each category of personal information we collect, we retain the personal information described above only for as long as it is reasonably necessary to fulfill the business purposes for which it was collected.

3. Personal Information We Do Not Collect

Category	Examples?
Protected classification characteristics under California or federal law	Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression), sexual orientation, pregnancy or childbirth and related medical conditions, veteran or military status, genetic information
Commercial	Records of personal property, products or services purchased, obtained or considered, or other purchasing or consuming histories or tendencies
Biometric	Genetic, physiological, behavioral, and biological characteristics, such as fingerprints, voiceprints, keystroke patterns, exercise data
Sensory data	Audio, electronic, visual, thermal, olfactory, or similar
Non-public education information	Education records directly related to a student maintained by an educational institution, such as grades, transcripts, class lists, or disciplinary records
Non-public employment information	Current or past job history or performance evaluations
Inferences drawn from other personal information	Profile reflection your preferences, characters, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes

4. “Selling” and “Sharing” of Personal Information

We may share information in the following contexts:

Service Providers: With third-party service providers who host our Website, send emails, analyze data on our behalf, or provide other services to us (e.g., CRM providers, cloud hosting). These parties are contractually bound to keep information confidential.
Affiliates: With Jack Henry subsidiaries or affiliates for internal business administration.
Legal Requirements: If required by law, subpoena, or to protect the safety and rights of Jack Henry or others.
Business Transfers: In connection with a merger, acquisition, or sale of assets.

If you sign up to receive SMS messages from Jack Henry in our role as a Business (i.e., when you receive SMS messages from us on our own behalf and not on the behalf of our customers), we do not share, sell, or rent your information collected through the SMS program with third parties for the third party’s own use.

We do not offer financial incentives or price differences related to the collection, retention, or sale of personal information.

5. Children’s Privacy

We do not knowingly collect, sell, or share the personal information of consumers under 16 years of age. If we discover such personal information, we will delete it immediately.

6. Your California Rights

If you are a California resident covered by this California Privacy Notice, you have the following rights for personal information collected starting January 1, 2022, and going forward:

Right to Know & Access

You may request that we disclose:

The specific pieces of personal information we have collected about you.
The categories of sources from which we collected it.
The business purpose for collecting or sharing it.

Right to Delete

You may request that we delete personal information we have collected from you, subject to certain exceptions (e.g., if we are legally required to keep your personal information for regulatory reporting).

Right to Correct

You may request that we correct inaccurate personal information we maintain about you.

Right to Limit Use of Sensitive Personal Information

We do not collect or use sensitive personal information.

Right to Opt-Out of Selling/Sharing

You have the right to opt out of any selling or sharing of personal information.

Right to Non-Discrimination

We will not retaliate or discriminate against you for exercising your privacy rights.

7. How to Exercise Your Rights

If you are a California resident, when Jack Henry acts as a Business (i.e., regarding the information covered by this California Privacy Notice, you may submit a request to exercise your rights directly to Jack Henry through the following verified channels:

Email: jhaprivacypolicy@jackhenry.com
Phone: 1-800-299-4001, M – F, 7 a.m. – 7 p.m. Central

Response Timing and Verification

Timing: We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period.
Verification: We must verify your identity before processing your request, and we will match the identifying information you provide (e.g., name, email) against the information currently in our systems and/or request secondary confirmation using the contact information you provide. If you are an authorized agent, we will require signed written proof of your authorization. If we deny your request, you may appeal the decision by contacting us at the email above with the subject line “Privacy Appeal” within 30 days of the decision.

Note: When we act as a Service Provider for your financial institution, we CANNOT process your data rights requests. Because your data is held by your financial institution, only that institution can fulfill your data rights request. Please contact the financial institution where your account is maintained.

8. Accessibility

If you need this notice in an alternative format, please contact us at:

Email: jhaprivacypolicy@jackhenry.com
Phone: 1-800-299-4001, M – F, 7 a.m. – 7 p.m. Central

9. Security

We use industry-standard physical, technical, and administrative safeguards (such as encryption and firewalls) to protect your personal information. However, no method of transmitting personal information over the internet is completely secure.