ISUFCU Privacy Policy

Indiana State University Federal Credit Union Privacy Policy

Rev (06/17)

FACTS	WHAT DOES INDIANA STATE UNIVERSITY FEDERAL CREDIT UNION DO WITH YOUR PERSONAL INFORMATION?
Why?	Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do. Indiana State University Federal Credit Union is committed to providing you with financial products and services to meet your financial goals. We recognize you expect the highest level of confidentiality and privacy regarding your financial and personal information. We are committed to maintaining that level and are required by Federal law to give you this privacy notice. It describes our policies and practices that protect your privacy and enable us to share information to make available competitive financial products and services. If you have any questions after reading it, please contact us at (812) 234-1021 or 1-800-628-1021.
What?	The types of personal information we collect and share depend on the product or service you have with us. This information can include:  Social Security number and income  account balances and payment history  credit history and credit scores When you are no longer our member, we continue to share your information as described in this notice.
How?	All financial companies need to share members’ personal information to run their everyday business. In the section below, we list the reasons financial companies can share their members’ personal information; the reasons Indiana State University Federal Credit Union chooses to share; and whether you can limit this sharing.

Reasons we can share your personal information	Does Indiana State University Federal Credit Union share?	Can you limit this sharing?
For our everyday business purposes— such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus	Yes	No
For our marketing purposes— to offer our products and services to you	Yes	No
For joint marketing with other financial companies	Yes	No
For our affiliates’ everyday business purposes— information about your transactions and experiences	No	We don't share
For our affiliates’ everyday business purposes— information about your creditworthiness	No	We don't share
For our affiliates to market to you	No	We don't share
For nonaffiliates to market to you	No	We don't share

Questions?

Call (812) 234-1021 or toll free (800) 628-1021

What we do
How does Indiana State University Federal Credit Union protect my personal information?	To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings. We maintain physical, electronic, and procedural safeguards to protect this information and we limit access to information to those employees for whom access is appropriate.
How does Indiana State University Federal Credit Union collect my personal information?	We collect your personal information, for example, when you  open an account or deposit money  pay your bills or apply for a loan  use your credit or debit card We also collect your personal information from others, such as credit bureaus and other companies.
Why can’t I limit all sharing?	Federal law gives you the right to limit only  sharing for affiliates’ everyday business purposes—information about your creditworthiness  affiliates from using your information to market to you  sharing for nonaffiliates to market to you State laws and individual companies may give you additional rights to limit sharing.
Definitions
Affiliates	Companies related by common ownership or control. They can be financial and nonfinancial companies.  Indiana State University Federal Credit Union has no affiliates
Nonaffiliates	Companies not related by common ownership or control. They can be financial and nonfinancial companies.  Indiana State University Federal Credit Union does not share with nonaffiliates so they can market to you
Joint marketing	A formal agreement between nonaffiliated financial companies that together market financial products or services to you.  Our joint marketing partners include Insurance Companies

Indiana State University Federal Credit Union Mobile Privacy Policy

General Policy Statement

Indiana State University Federal Credit Union’s Mobile App, Go ISUFCU (the “App”), makes it easy to manage your finances on the go.

The App allows you to:

get real-time balances for your accounts
manage your money
view your transactions
make transfers
pay your bills and manage payees
deposit a check
receive alerts
manage debit cards (in conjunction with CardHub App – powered by Fiserv)

This Privacy Policy, in combination with other relevant privacy notices that we provide to you (e.g., pursuant to financial privacy laws), informs you of the policies and practices regarding the collection, use and disclosure of any personal information that we and our service providers collect from or about users in connection with the App’s website and mobile application (the “Services”).

THE TYPES OF INFORMATION WE COLLECT IN THE APP

Through your use of the Services, we may collect personal information from you in the following ways:

Personal Information You Provide to Us.
- We may collect personal information from you, such as your first and last name, address, e-mail, telephone number, social security number, your user ID and your password when you create an account.
- We will collect the financial and transaction information necessary to provide you with the Services, including account numbers, payment card expiration date, payment card identification, verification numbers, and transaction and payment history.
- If you provide feedback or contact us via email, we will collect your name and email address, as well as any other content included in the email, in order to send you a reply.
- We also collect other types of personal information that you provide voluntarily, such as any information requested by us if you contact us via email regarding support for the Services.
- Device images/videos may be accessed when you deposit a check or use a QR code to make peer to peer payments using apps such as Zelle, Venmo, or other peer to peer payment functionality. Device contacts may be accessed when you make peer to peer payments.
Personal Information Collected from Third Parties. We may collect certain information from identity verification services and consumer reporting agencies, including credit bureaus, in order to provide some of our Services.
Personal Information Collected Via Technology. We and our service providers may automatically log information about you, your computer or mobile device, and your interaction over time with our Services, our communications, and other online services, such as:

Device data, such as your computer’s or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers, language settings, mobile device carrier, radio/network information (e.g., Wi-Fi, LTE, 3G), and general location information such as city, state or geographic area.
Online activity data, such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to the Service, navigation paths between pages or screens, information about your activity on a page or screen, access times, and duration of access.
Cookies, which are text files that websites store on a visitor’s device to uniquely identify the visitor’s browser or to store information or settings in the browser for the purpose of helping you navigate between pages efficiently, remembering your preferences, enabling functionality, and helping us understand user activity and patterns.
Local storage technologies, like HTML5 and Flash, that provide cookie-equivalent functionality but can store larger amounts of data, including on your device outside of your browser in connection with specific applications.
Web beacons, also known as pixel tags or clear GIFs, which are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked.
Location Information. If you have enabled location services on your phone and agree to the collection of your location when prompted by the Services, we will collect location data when you use the Services even when the App is closed or not in use; for example, to provide our fraud detection services. If you do not want us to collect this information, you may decline the collection of your location when prompted or adjust the location services settings on your device.

HOW WE USE YOUR INFORMATION COLLECTED IN THE APP

General Use. In general, we use your personal information collected through your use of the Services to respond to your requests as submitted through the Services, to provide you the Services you request, and to help serve you better. We use your personal information, in connection with the App, in the following ways:
- facilitate the creation of, and secure and maintain your account;
- identify you as a legitimate user in our system;
- provide improved administration of the Services;
- provide the Services you request;
- improve the quality of experience when you interact with the Services;
- send you administrative e-mail notifications, such as security or support and maintenance advisories; and
- send surveys, offers, and other promotional materials related to the Services.
Compliance and protection. We may use your personal information to:
- comply with applicable laws, lawful requests and legal process, such as to respond to subpoenas or requests from government authorities;
- protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims);
- audit our internal processes for compliance with legal and contractual requirements and internal policies;
- enforce the terms and conditions that govern the Service; and
- prevent, identify, investigate, and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.
Creation of Non-Identifiable Data. The App may create de-identified information records from personal information by excluding certain information (such as your name) that makes the information personally identifiable to you. We may use this information in a form that does not personally identify you to analyze request patterns and usage patterns to enhance our products and services. We reserve the right to use and disclose non-identifiable information to third parties in our discretion.

DISCLOSURE OF YOUR PERSONAL INFORMATION

We disclose your personal information collected through your use of the Services as described below.

In Accordance with Our Other Privacy Notices. Other than as described in this Privacy Policy in connection with the App, this Privacy Policy does not apply to the processing of your information by us or third parties with whom we share information.
Third Party Service Providers. We may share your personal information with third party or affiliated service providers that perform services for or on behalf of us in providing the App, for the purposes described in this Privacy Policy, including: to provide you with the Services; to conduct quality assurance testing; to facilitate the creation of accounts; to optimize the performance of the Services; to provide technical support; and/or to provide other services to the App.
Authorities and Others. Regardless of any choices you make regarding your personal information, the App may disclose your personal information to law enforcement, government authorities, and private parties, for the compliance and protection services described above.

LINKS TO OTHER SITES

The App may contain links to third party websites. When you click on a link to any other website or location, you will leave the App and go to another site and another entity may collect personal and/or anonymous information from you. The App’s provision of a link to any other website or location is for your convenience and does not signify our endorsement of such other website or location or its contents. We have no control over, do not review, and cannot be responsible for, these outside websites or their content. Your decision to click on and visit these linked outside websites is at your own risk. Please be aware that the terms of this Privacy Policy do not apply to these outside websites. We encourage you to read the privacy policy of every website you visit.

YOUR CHOICES REGARDING YOUR INFORMATION

You have several choices regarding use of information on the Services.

How We Respond to Do Not Track Signals. Some web browsers transmit “do not track” signals to the websites and other online services with which your web browser communicates. There is currently no standard that governs what, if anything, websites should do when they receive these signals. We currently do not take action in response to these signals. If you enable such a setting it will not prevent the collection of information about your online activities over time and across third party websites when you use the Services. If and when a standard is established, we may revise its policy on responding to these signals.
Access, Update, or Correct Your Information. You can access, update, or correct your information by changing preferences in your account. For additional requests, please contact us.
Opting Out of Email or SMS Communications. If you have signed-up to receive our email marketing communications, you can unsubscribe any time by clicking the "unsubscribe" link included at the bottom of the email or other electronic communication. Alternatively, you can opt out of receiving marketing communications by contacting us at the contact information under "Contact Us" below. If you provide your phone number through the Services, we may send you notifications by SMS, such as provide a fraud alert. You may opt out of SMS communications by unlinking your mobile phone number through the Services.
Opting Out of Location Tracking. If you initially consented to the collection of geo-location information through the Services, you can subsequently stop the collection of this information at any time by changing the preferences on your mobile device. Please note, however, that if you withdraw consent to our collection of location information, you may no longer be able to use some features of the App.

SAFEGUARDS AND RETENTION

We implement reasonable administrative, technical, and physical measures in an effort to safeguard the information in our custody and control against theft, loss and unauthorized access, use, modification and disclosure. Nevertheless, transmission via the internet is not completely secure and we cannot guarantee the security of your information.

A NOTE ABOUT CHILDREN

The Services are not directed towards individuals under the age of 18, and we do not, through the App, intentionally gather personal information about visitors who are under the age of 18. If a child under 18 submits personal information to us through the App and we learn that the personal information is the information of a child under 18, we will attempt to delete the information as soon as possible.

The Children’s Online Privacy Protection Act of 1998 (“COPPA”) restricts the collection, use, or disclosure of Personal Information from and about children under the age of 13 on the internet. In general, the Services are not directed to children under the age of 13 and we request that children under the age of 13 not provide Personal Information through the Services. We do not knowingly collect information from children under 13 without parental consent. We may collect information on domain names, dates and times of visits, and number of page views. This information contains no Personal Information and will only be used to continue to improve the overall value of our Services. Please visit the Federal Trade Commission website www.ftc.gov for more information about COPPA.

PRIVACY POLICY UPDATES

This Privacy Policy is subject to occasional revision. We will notify you of any material changes in its collection, use, or disclosure of your personal information by posting a notice on the Services. Any material changes to this Privacy Policy will be effective thirty (30) calendar days following notice of the changes to the Services. These changes will be effective immediately for new users of the Services. If you object to any such changes, you must notify us prior to the effective date of such changes that you wish to deactivate your account. Continued use of the Services following notice of any such changes shall indicate your acknowledgement of such changes.

CONTACT US

If you have any questions about this Mobile Privacy Policy, the App’s data collection or processing practices, or if you want to report any security concerns regarding the App, please contact the credit union by email at info@isucreditunion.com or by mail at 444 N 3^rd Street, Terre Haute, IN 47807.