The personal information we collect about you depends on how you interact with Tyler and the Tyler Platform. Some examples of information we may collect include your name, contact information, information about a device you’re using to access the Tyler Platform (including your geolocation information or IP (Internet Protocol) address), information about how you use the Tyler Platform, and any information you submit to Tyler when we are acting as a data processor for our clients.

We may collect the following information about you, depending on how you interact with Tyler and the Tyler Platform:

• Contact Information. Contact Information includes, for example, first and last names, physical addresses, telephone numbers, and email addresses.
• Contact Records. Contact Records include, for example, records of conversations conducted with our customer service representatives via telephone, email, video, text, and chat, including all such information provided to us in connection with such conversation.
• Demographic Information. Demographic Information includes, for example, information concerning gender, age, race, ethnicity, income, marital status, and employment or educational information.
• Device Information. Device Information includes, for example, your browser version and settings, your device type and settings, and other information, such as your IP address, internet service provider, MAC (Media Access Control) address, mobile device identifier, the name and version of your operating system, referring and exit pages, and the date and time of your visit.
• Geolocation Information. Geolocation Information may be determined by processing IP addresses or other device information, which may depend on your device’s settings for location services.
• Usage Data. Usage Data includes, for example, information about your interactions with the Tyler Platform, including the webpages you visit, links or buttons you click, the search terms you enter, and other similar interactions with the Tyler Platform.
• User Generated Content or “UGC”. UGC includes any information (other than Demographic Information and Contact Information) you choose to provide to Tyler, including, for example, questions, comments, or reviews you submit to Tyler about the Tyler Platform.
• Transactional Data. Transactional Data includes, for example, credit or debit card information and other information about payment, purchases, returns or exchanges.
• Tyler Account Credentials. Tyler Account Credentials include, for example, a username and password used to access a Tyler product or service under a Tyler client’s account.

When we are acting as a data processor for our clients, we may collect information about you directly from you (for example, if you fill out a form on the Tyler Platform, or interact with our customer support personnel via email, chat, or telephone), from third parties we partner with (for example, from our analytics providers), or through cookies or other automated means.

• Directly from You: When we are acting as a data processor on behalf of our clients, we may collect Contact Information, Demographic Information, User Generated Content, Contact Records, Tyler Account Credentials, and Transactional Data directly from you when you provide it to us, including when you: communicate with our customer support representatives (whether by phone, email, video, text, or chat), interact with us at industry conferences; create a Tyler account for use with an online service provided by Tyler to a client; fill out and submit any web forms on the Tyler Platform; or indicate your preferences on the Tyler Platform (e.g., email preferences).
• Automatically from Your Device or Browser: Device Information, Usage Data, and Geolocation Information may be automatically collected from your device or browser whenever you access the Tyler Platform. Our collection of this information may result from our use of cookies and similar technologies, which is explained in more detail below.
• Using Cookies: We may use cookies (small files stored on your device or browser) and other similar technologies to automatically collect information via the Tyler Platform (“first-party cookies”), including Device Information, Usage Data, and Geolocation Information.
  We may also allow third parties to collect Device Information, Usage Data, and Geolocation Information using those third parties’ cookies and similar technologies (“third-party cookies”). Of particular note, we contract with third-party website ​​​​analytics companies, such as Google Analytics and CrazyEgg. The information generated by Google Analytics will be transmitted to and stored by Google and will be subject to Google's privacy policies, which can be viewed here ("Welcome to the Google Privacy Statement"). To learn more about Google's partner services and to learn how to opt out of tracking of analytics by Google, visit ("How Google uses data when you use our partners' sites or apps"). The information generated by CrazyEgg will be transmitted to and stored by CrazyEgg and will be subject to CrazyEgg's privacy policies, which can be viewed by clicking here https://www.crazyegg.com/privacy. To opt-out of tracking by CrazyEgg, click here https://www.crazyegg.com/opt-out.
• From Third Parties:  When we are acting as a data processor on behalf of our clients, we may work with third parties who provide services to us, including, for example, website analytics companies, information technology companies that assist with the operation, security, and functionality of the Tyler Platform. These third parties may collect and process the information listed in the Section titled, “Personal Information We Collect,” on our behalf.  

As part of our provision of services to our clients, we process your personal information in accordance with the purposes determined by our clients.

• To allow you to use and access the Tyler Platform, including for the prevention of fraudulent activity and improved security functionality.
• To monitor and evaluate the performance and functionality of the Tyler Platform, including as part of our analytic practices, or otherwise to maintain or improve the content and services offered through the Tyler Platform.
• To communicate with you, including to respond to requests for information or support of Tyler’s services and the Tyler Platform on behalf of our clients.
• For purposes of our research and development of new Tyler products and services we may offer to our clients.
• To maintain and operate client and end user accounts for the Tyler Platform, including by making certain services Tyler is contractually obligated to make available to registered account users.
• To investigate any suspected misuse of the Tyler Platform; to comply with legal and regulatory requirements and respond to requests from courts or other government bodies; and to protect or defend the rights, property and interests of Tyler, our employees, or the interests of our third-party service providers and partners.

We may share the personal information that we process on behalf of our clients with subprocessors or service providers who help us process your information for the provision of services we are contractually obligated to provide to our clients. We contractually require that our subprocessors comply with the legal obligations we have with respect to your personal information. We may share your information if we believe it’s necessary to comply with law or protect our users or employees.

• Third Parties: We share information with our subprocessors or service providers that assist with the operation of the Tyler Platform and Tyler’s business operations that support tour provision of services to our clients more generally. We share information with third parties only as necessary for the third parties to provide the services to us.  Such third parties have an obligation to protect the information they receive from us or collect on our behalf and may use such information only for the purposes that we allow. Your information may also be collected and processed by other third parties, such as the payment providers you select when you purchase Tyler products or services, and who will process your information independently in accordance with their own privacy notices.
• Data Analytics Providers: As noted above, Tyler partners with third parties to assist with performing business analytics.
• Tyler Affiliates or Successors: We may disclose personal information to and among our Tyler family of affiliated companies. In addition, we may share your information with an entity that succeeds to all or part of Tyler’s business in connection with a sale, reorganization, consolidation, or merger.
• Other Third Parties:  We and our third parties will disclose specific individual information if we or they reasonably believe it is necessary to: (i) comply with applicable law; (ii) protect or defend the rights, property and interests of Tyler, our employees, or the interests of our third party service providers and partners; or (iii) under exigent circumstances, to protect the personal safety of our users and clients, or the public.

When we are acting as a data processor for our clients and we collect or process your personal information, the applicable Tyler client with which you interact, and not Tyler, controls access to your personal information and you should direct any requests related to the personal information collected or processed us to that Tyler client. If we receive a request directly from you as an end user of one of our clients, we will promptly pass on such request to our client.

There are steps you may take to control certain types of information we can collect and process about you. You may be entitled to certain other rights provided by law, depending on your state or country of residency. For more information about these location-specific rights, please see the section titled “Additional Notices” below.

You can control the information we collect and use in the following ways:

• Geolocation Information: You can disable location-based services on your mobile device or web browser by adjusting the settings on your device or browser. This will prevent the Tyler Platform from accessing your Geolocation Information. Note that some Tyler services may not be available if you disable location-based services.
• Cookies: ​​​​You can refuse to accept third-party cookies by following your browser or device’s instructions. If you do not accept cookies, you may experience some inconvenience in your use of the Tyler Platform.
• User Requests: You should direct any request related to your personal information processed by us on behalf of a Tyler client to the applicable Tyler client. If we receive a request from you directly, we will take reasonable measures to facilitate your request, including contacting the applicable Tyler client for which we are acting as a data processor with respect to your personal information. We may be reached using our toll-free number: 1-800-772-2260 Option 7 or by email privacystatement@tylertech.com.

Except with respect to certain Tyler services provided to school and school district clients with whom Tyler has a contract, the Tyler Platform is not directed to persons under the age of sixteen (16), and we do not knowingly collect, request, or use personal information directly from children via the Tyler Platform, or offline.

As noted above, except for services Tyler provides to school and school districts clients with whom Tyler has a contract to use the Tyler Platform, the Tyler Platform is not directed to persons under the age of sixteen (16). We do not knowingly collect, request, or use personal information of children via the Tyler Platform, or offline unless or until a Tyler school or school district customer had provided authorization for a student under the age of sixteen (16) to use the Tyler Platform. If we become aware that a child under 16 has provided us with personal information outside of the provision of the Tyler Platform to a school or school district customer, we will take steps to delete the information as soon as possible. If you believe that your child under the age of 16 has submitted personal information to Tyler, please contact us at privacystatement@tylertech.com.

We use commercially reasonable physical, administrative, and technical safeguards to deter unauthorized access, destruction, use, modification, or disclosure of your personal information, however, we cannot guarantee the security of your personal information.

In addition to using commercially reasonable physical, administrative, and technical safeguards to protect your information, we instruct our employees that information must be handled in accordance with this Privacy Statement, and any misuse of your personal information by employees may be subject to disciplinary action. Although we use these measures to protect your personal information, we cannot guarantee the security of information provided over the internet or stored in our databases.

We will retain your personal information for as long as the Tyler client for which we are providing services directs us to retain it or for the length of time needed to fulfill the purposes outlined in the section above titled, “Why We Process Your Personal Information,” unless a longer retention period is required or permitted by law.

The Tyler Platform may contain links to websites owned and operated by third parties (“Third-Party Sites”). This Privacy Statement does not apply to the privacy and security practices of Third Party Sites and we are not responsible for the privacy and security practices of Third-Party Sites. We encourage you to review the privacy policies of such Third-Party Sites so that you understand how those websites collect, use, and share your information.

Similarly, this Privacy Statement does not cover the privacy and security practices of social media platforms on which Tyler maintains its social media pages. Please review the terms, policies, and settings of those social media platforms if you have questions about how they collect, use, and share your information.

As a resident of California, you have rights under the California Consumer Privacy Act, California Civil Code § 1798.100 et seq., (with any implementing regulations and as may be amended from time to time, “CCPA”) relevant to your Personal Information (as defined under the CCPA), as well as other laws. The rights described herein are subject to exemptions under the CCPA and other limitations under applicable law.

California Consumer Rights Under the CCPA: If your Personal Information is subject to Tyler’s collection, use or processing under the CCPA, you may have certain privacy rights with regard to that information. Such rights may depend on whether Tyler collects, uses, or processes your Personal Information as a “business” or as a “service provider,” as those terms are defined under the CCPA. You may have the right to:

• Request that we provide you access to the following no more than twice in a 12-month period:
  • the categories and specific pieces of Personal Information that we have collected about you;
  • the categories of sources from which the Personal Information is collected;
  • the business or commercial purpose for collecting or sharing your Personal Information;
  • the categories of third parties with whom we share your Personal Information; and
  • the categories of Personal Information that are sold or shared (as defined under the CCPA) and the categories of third parties to whom the Personal Information was sold or shared.
• Request that we delete your Personal Information, subject to exceptions under the CCPA or other applicable law; and
• Request that we not “sell” or share your Personal Information by opting out of the sale or sharing of your Personal Information.
• Request that we limit our use and/or disclosure of your sensitive Personal Information.
• Request that we correct your Personal Information.

California residents also have the right not to receive discriminatory treatment for the exercise of any of the privacy rights conferred by the CCPA, as described in this section. We will not discriminate against you because you have exercised any of your rights under the CCPA.

How to Submit a Request Access to or Deletion of Your Personal Information: If you wish to exercise your right to request access to your Personal Information or deletion of your Personal Information please submit your request please submit your request by completing the web form available here, by calling our toll-free number: 1-800-772-2260, Option 7, or by email: privacystatement@tylertech.com. To ensure we can verify your identity and help us respond to your request please provide us with your full name, email, and home address, and clearly indicate which of the rights you wish to exercise.

We are required to provide you with access to your Personal Information or delete your Personal Information only in response to verifiable consumer requests. We will compare the information you have provided as part of submitting the request to any information we may have in our possession in order to verify your request. We may also contact you to request additional information in relation to your request. The information you provide must match the information we have in our possession. This measure is in place to help ensure that Personal Information is not disclosed to any person who does not have the right to receive it. The information collected through this process will be used only for verification purposes and responding to your request.

Requests made through Agents: Please note that you may authorize an agent to exercise any of these rights. If you use an agent, we will take measures to verify your agent’s authorization to act on your behalf and we may require more information to ensure proper verification of you and your agent’s identity and authorization.

When we are acting as a data processor on behalf of our clients (i) we do not sell your personal information, and (ii) we may share your personal information. We are required to let you know that you have the right to opt out of the sale of your personal information if we ever engage in such activities.

How to opt out of the sharing of your Personal Information: If you wish to exercise your right to request that we opt you out of the sharing of your Personal Information, please submit your request by completing the web form available here or by sending us an email at privacystatement@tylertech.com that includes your full name, email, and home address, and clearly indicates that you wish to exercise your right to opt out of the sharing of your Personal Information. The information collected through this process will be used only for responding to your request. You may exercise your right to opt out of the sharing of your Personal Information by calling our toll-free number: 1-800-772-2260 Option 7.

How to opt in again: If you have opted out of the sharing of your Personal Information, you are welcome to opt back in at any time. To opt in, contact us via email at privacystatement@tylertech.com and clearly request to opt-in to the sharing of your Personal Information.

Categories of Personal Information Shared: In the previous 12 months, Tyler may have shared (as defined under the CCPA) one or more of the categories of Personal Information described in the “Personal Information We Collect” section of the Tyler Privacy Notice - Processor. The Personal Information may have been shared with one or more of the categories of third parties described in the “How We Share Personal Information with Third Parties” section of the Tyler Privacy Notice – Processor.

Categories of Personal Information Disclosed for a Business Purpose: We share Personal Information about you with service providers and third parties for business purposes, such as operational purposes and other purposes related to providing you with the products and services our clients have contracted for us to provide. For more information about the business purposes for which we disclose Personal Information, see the Section titled “How We Share Personal Information with Third Parties” and see the Section titled “Personal Information We Collect” for what types of information may be shared.

Additional California Privacy Rights: Pursuant to California Civil Code § 1798.83, California residents may also ask us to provide them with (i) a list of certain categories of personal information (as defined in section 1798.80(e)) that we have disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year, and (ii) the identity of those third parties. California residents may make one request per calendar year.

To make this request, you may contact us at privacystatement@tylertech.com. In your request, please include a subject line that states “CA Shine the Light Request,” state that you are a California resident, and provide a current California address for our response.

As a resident of Virginia, you have rights under the Virginia Consumer Data Privacy Act, Va. Code Ann. § 59.1-571 et seq., (with any implementing regulations and as may be amended from time to time, “VCDPA”) relevant to your Personal Data (as defined under the VCDPA). The rights described herein are subject to exemptions under the VCDPA and other limitations under applicable law.

Virginia Consumer Rights Under the VCDPA: If your Personal Data is subject to the VCDPA, you may have certain privacy rights with regard to that information. You may have the right to:

• Request that we confirm whether we are processing your Personal Data, and provide you access to your Personal Data;
• Request that we correct inaccuracies in your Personal Data;
• Request that we delete your Personal Data;
• Request that we provide you with your Personal Data in a portable and, to the extent technically feasible, readily usable format; you may make this request no more than two times per calendar year; and
• Opt-out of our processing of your Personal Data for purposes of (i) targeted advertising, (ii) the sale of your Personal Data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects that concern you.

Submitting Requests to Exercise Your Rights under the VCDPA. If you wish to exercise any of your rights under the VCDPA, please submit your request by completing the web form available here, or by calling our toll-free number: 1-800-772-2260, Option 7, or by sending us an email at privacystatement@tylertech.com that includes your full name, email address, and home address, and clearly indicates which right or rights under the VCDPA you wish to exercise. The information collected through this process will be used only for responding to your request.

In order for us to comply with your request to exercise your rights, we may need to verify your identity. To do so, we will compare the information you provide as part of submitting the request to any information we may have in our possession. We may also contact you to request additional information in relation to your request. The information you provide must match the information we have in our possession. This measure is in place to help ensure that Personal Data is not disclosed to, or deleted or altered by, any person who does not have the right to do so. The information collected through this process will be used only for verification purposes and to respond to your request.

Appealing Tyler’s Declination to Take Action on a Consumer Request. If Tyler declines to take action in response to your request to exercise your rights under the VCDPA, you may appeal that decision by completing the web form available here, or by calling our toll-free number: 1-800-772-2260, Option 7, or by sending us an email at privacystatement@tylertech.com clearly indicating that you would like to appeal Tyler’s decision. If your appeal is denied, you may contact the Virginia Attorney General at https://www.oag.state.va.us/contact-us/contact-info.

We do not sell your Personal Data or process your Personal Data for targeted advertising; however, we are required to let you know that you have the right to opt-out of the sale or processing of your Personal Data if we ever engage in such activity.

Nevada residents may direct a business that operates a website not to sell certain personal information (e.g., social security numbers; driver’s license numbers or other identification numbers; or account numbers in combination with the required access code or password) that the business has collected. Although Tyler does not sell your personal information, you have the legal right to opt out of the sale of your personal information, even if your information is not currently being sold. For additional information about your rights, please contact us at privacystatement@tylertech.com.

We may, from time to time, process “personal data” of people who reside in the European Union, Iceland, Liechtenstein, Norway (European Economic Area or “EEA”), or the United Kingdom, which processing may be subject to the European Union’s General Data Protection Regulation (also called the “GDPR”) or the United Kingdom General Data Protection Regulation (also called the “UK-GDPR”)(hereinafter referred to as the “GDPR”). “Personal data” is defined in the GDPR and the UK-GDPR as “any information related to an identified or identifiable natural person,” and, for purposes of this Privacy Statement, references to “personal data” in this section include the categories of information set forth in the section titled “Tyler as a Processor,” if applicable.

We will only process your personal data to the extent applicable law allows us to do so. We only process your personal data at the direction of the Tyler client for which we are contractually obligated to provide services.

If you are a resident of the EU, EEA, or the United Kingdom, you have certain rights under applicable law, including the right to:

• Request that the Tyler client for which we are providing services provide you access to the personal data that we maintain about you;
• Request the Tyler client for which we are providing services to correct, revise, or update any of the personal data we maintain about you;
• Request that the Tyler client for which we are providing services erase the personal data we maintain about you;
• Object to the processing of your personal data on the basis that the processing has a disproportionately detrimental impact on your interests, rights, and freedoms;
• Request that the client for which we are providing services restrict our processing activities related to your personal data;
• Withdraw your consent to the client for which we are providing services of our processing of your data at any time;
• Request to have your personal data reproduced in a structured, commonly used, and machine-readable format, whether or not such request relates to the transmission of the personal data to another party.

Note: Any requests to exercise your rights that you send directly to us will be forwarded to the client for which we are processing your personal data before we can initiate any action with respect to your request. We may be contacted by sending us an email at gdpr@tylertech.com and writing “GDPR Request” in the subject line. You may also write to us at the postal address provided in the section of the Privacy Notice titled “Contact Us.”

Finally, you have the right to raise a concern about our collection and processing of your personal data with your local supervisory authority, available here (EU/EAA) or here (UK) and you may do so without prejudice to any other rights you may have.

We may, from time to time, process “personal information” of people who reside in Canada, which processing may be subject to the Personal Information Protection and Electronic Documents Act (“PIPEDA”).

Consent to Collect and Process. We only collect and process your personal information when we have a lawful basis for doing so. This lawful basis includes when you provide us with express consent, when consent is implied, or when we have a legal or contractual obligation to collect or process the information. By using the Tyler Platform or by providing us with your personal information by other means covered by this Privacy Statement, you have impliedly consented to our collection, use and disclosure of your personal information as explained in this Privacy Statement.

Submitting Requests to Withdraw Consent, or to Access, Correct, or Delete Your Personal Data. You may request to see, correct, or delete the personal information that we hold about you, or request to change or withdraw your consent to our collection and processing of your personal information. If you wish to request access to your personal information, or request that we correct or delete your personal information, or to change or withdraw your consent to our collection or processing of your personal information, please submit your request by completing the web form available here, or by calling our toll-free number: 1-800-772-2260, Option 7, or by sending us an email at privacystatement@tylertech.com that includes your full name, email address, and home address, and clearly indicates you are changing or withdrawing your consent to our processing, or you are requesting access to, or correction or deletion of, your personal information pursuant to PIPEDA. The information collected through this process will be used only for responding to your request. Please note that your right to access, correct, or delete the personal information that we hold about you is not absolute. There are instances where applicable law or regulatory requirements allow or require us to refuse your request. In addition, the personal information may have been destroyed, erased, or made anonymous in accordance with our record retention obligations and practices.

In the event that we cannot provide you with access to, or rectification or deletion of your personal information, we will endeavor to inform you of the reasons why, subject to any legal or regulatory restrictions.

Data Transfers. We may transfer the personal information we collect about you to countries other than the country in which the information was originally collected. Those countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your information to other countries, we will protect that information as described in this Privacy Statement.

We may, from time to time, process “personal data” of people who reside in Brazil, which processing may be subject to the Brazilian General Data Protection Law (“LGPD”).

Lawful Basis for Collection and Processing. We only collect and process your personal data when we have a lawful basis for doing so. This lawful basis includes when you provide us with express consent, when consent is implied, or when we have a legal or contractual obligation to collect or process your personal data. By using the Tyler Platform or by providing us with your personal data by other means covered by this Privacy Statement, you have impliedly consented to our collection, use and disclosure of your personal data as explained in this Privacy Statement.

Individual Rights under the LGPD: If your personal data is subject to the LGPD, you may have certain privacy rights with regard to that information; however, these rights are not absolute and are subject to certain limitations provided by law. You may have the right to:

• Request that we confirm whether we are holding, processing, or disclosing your personal data;
• Request access to your personal data;
• Request that we correct incomplete, inaccurate, or out-of-date personal data;
• Request that we anonymize, block, or delete unnecessary or excessive personal data or personal data processed in noncompliance with the provisions of the LGPD;
• Request that we delete personal data collected with your consent, unless there is another legal basis for our processing of such personal data;
• Request that we transfer your personal data to another product or service provider;
• Request information about how we have used your personal date and the third-party entities with which we have shared your personal data;
• Request information regarding the possibility of denying your consent to our processing of your personal data and about the consequences of such denial; and
• Request to revoke your consent to our collection of your personal data subject to legal or contractual restrictions and reasonable notice, however, our processing of your personal data provided pursuant to your previously expressed consent remains valid unless you request deletion of such personal data.

Submitting Requests to Exercise Your Rights under the LGPD. Subject to commercial and industrial secrets, you or your legal representative may submit a request to exercise your rights under the LGPD at any time by completing the web form available here, or by calling our toll-free number: 1-800-772-2260, Option 7, or by sending us an email at privacystatement@tylertech.com that includes your full name, email address, and home address, and clearly indicates which right or rights under the LGPD you wish to exercise. The information collected through this process will be used only for responding to your request. You may also use any of the above methods to submit to our Chief Privacy Officer complaints or inquiries about our personal data collection and processing policies and practices.

We may, from time to time, process “personal data” of people who reside in the Bahamas, which processing may be subject to the Bahamas Data Protection (Privacy of Personal Information) Act (“DPA”).

Individual Rights under the DPA: If your personal data is subject to the DPA, you may have certain privacy rights with regard to that information; however, these rights are not absolute and are subject to certain limitations provided by law. You may have the right to:

• Request that we confirm whether we are holding your personal data;
• Request that we provide you with a copy of your personal data (including, if necessary, an explanation of any such data that is expressed in terms that are not intelligible to the average person);
• Request that we correct personal data that is inaccurate or not up to date;
• Request that we delete your personal data, to the extent such data was collected unlawfully or unfairly in the circumstances; and
• Request that we cease using your personal data for the purpose of direct marketing and delete your personal data that was used for such purpose.

Submitting Requests to Exercise Your Rights under the DPA. You may submit a request to exercise your rights under the DPA at any time by completing the web form available here, or by calling our toll-free number: 1-800-772-2260, Option 7, or by sending us an email at privacystatement@tylertech.com that includes your full name, email address, and home address, and clearly indicates which right or rights under the DPA you wish to exercise. The information collected through this process will be used only for responding to your request.

We may, from time to time, process “personal information” of people who reside in the Philippines, which processing may be subject to the Philippines Data Privacy Act of 2012 (with implementing rules and regulations, the “DPA”).

Lawful Basis for Collection and Processing. We only collect and process your personal information when we have a lawful basis for doing so. This lawful basis includes when you provide us with consent, when we have a legal or contractual obligation to collect or process the information, or when necessary to fulfill a compelling legitimate interest in a manner that does not outweigh your rights and freedoms.

Individual Rights under the DPA: If your personal information is subject to the DPA, you may have certain privacy rights with regard to that information; however, these rights are not absolute and are subject to certain limitations provided by law. You may have the right to:

• Request that we confirm whether we have, are, or will be processing your personal information;
• Request that we provide you with information about any automated processing of your personal information for purposes of profiling or any processing of your personal information for purposes of direct marketing;
• Request that we provide you with access to your personal information, including:
  • The content of your personal information that we have processed;
  • The sources from which we obtained your personal information;
  • The manner by which your personal information was processed;
  • The reasons for our disclosure of your personal information to third parties, and the names and addresses of such third-party recipients;
  • Information about any automated processes applied to your personal information, to the extent such automated processes will or are likely to be used as the sole basis for any decision that could significantly affect you;
  • The date when your personal information was last accessed and modified; and
  • To the extent Tyler is the processor of your personal information, the designation, name or identity and address of the controller of such personal information;
• Request that we correct personal information that is inaccurate or not up to date;
• Request that we provide you with a copy of your personal information in an electronic or structured format that is commonly used and allows for further use of such personal information by you;
• Request that we suspend, withdraw, or order the blocking, removal, or destruction of your personal information upon discovery and substantial proof that such personal information is incomplete, outdated, false, unlawfully obtained, used for unauthorized purposes or is no longer necessary for the purposes for which it was collected;
• Object to the processing of your personal information (including for purposes of direct marketing, automated processing, or profiling) or request to withdraw your consent for our collection or processing of your personal information; and
• Be indemnified for any damages sustained due to our processing of inaccurate, incomplete, outdated, false, or unlawfully obtained, or if we have processed your personal information without proper authorization.

Submitting Requests to Exercise Your Rights under the DPA. You may submit a request to exercise your rights under the DPA at any time by completing the web form available here, or by calling our toll-free number: 1-800-772-2260, Option 7, or by sending us an email at privacystatement@tylertech.com that includes your full name, email address, and home address, and clearly indicates which right or rights under the DPA you wish to exercise. The information collected through this process will be used only for responding to your request.

Philippines National Privacy Commission. You may file a complaint about our personal data collection and processing policies and practices with the Philippines National Privacy Commission (“NPC”) by following the NPC’s instructions, available here.

We may, from time to time, process “personal information” of people who reside in Australia, which processing may be subject to Australia’s Privacy Act of 1988 (the “Act”).

Individual Rights under the Act: If your personal information is subject to the Act, you may have certain privacy rights with regard to that information; however, these rights are not absolute and are subject to certain limitations provided by law. You may have the right to:

• Request access to your personal information;
• Request that we correct inaccurate, out-of-date, or irrelevant personal information that we hold; and
• Request that we opt you out of our direct-marketing communications.

Submitting Requests to Exercise Your Rights under the Act. You may submit a request to exercise your rights under the Act at any time by completing the web form available here, or by calling our toll-free number: 1-800-772-2260, Option 7, or by sending us an email at privacystatement@tylertech.com that includes your full name, email address, and home address, and clearly indicates which right or rights under the Act you wish to exercise. The information collected through this process will be used only for responding to your request. You may also use any of the above methods to submit to our Chief Privacy Officer complaints or inquiries about our personal data collection and processing policies and practices. We will consider and respond to any such complaints or inquiries promptly, and otherwise in accordance with applicable laws.

Overseas Recipients of Your Personal Information. We may transfer the personal information we collect about you to countries other than the country in which the information was originally collected. Those countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your information to other countries, we will protect that information as described in this Privacy Statement.

Consequences Associated with Not Providing Personal Information. You may not be able to use or access some products or services through the Tyler Platform if you fail to provide, or if you request deletion or removal of, certain Personal Information.

We may, from time to time, process “personal information” of people who reside in Bermuda, which processing may be subject to the Bermuda Personal Information Protection Act (“PIPA”).

Individual Rights under the PIPA: If your personal information is subject to PIPA, you may have certain privacy rights with regard to that information; however, these rights are not absolute and are subject to certain limitations provided by law. You may have the right to:

• Request access to your personal information, including information regarding the purposes for which the personal information has been and is being used, and the names or types of persons to whom such information has been or is being disclosed;
• Request that we correct personal information that is inaccurate or incomplete;
• Request that we opt you out of the processing of your personal information for the purposes of advertising, marketing, or public relations;
• Request that we opt you out of the processing of your personal information where the use of such personal information is causing or is likely to cause substantial damage or substantial distress to you or to another individual;
• Request that we erase or destroy your personal information that is no longer relevant for the purposes of its use; and
• Request a copy of, or access to, your personal information.

Submitting Requests to Exercise Your Rights under the PIPA. You may submit a request to exercise your rights under the DPA at any time by completing the web form available here, or by calling our toll-free number: 1-800-772-2260, Option 7, or by sending us an email at privacystatement@tylertech.com that includes your full name, email address, and home address, and clearly indicates which right or rights under the DPA you wish to exercise. The information collected through this process will be used only for responding to your request.

We may, from time to time, process “personal data” of people who reside in Mexico, which processing may be subject to the Federal Law on the Protection of Personal Data held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares) (together with implementing regulations, the “Law”).

Individual Rights under the Law: If your personal data is subject to the Law, you may have certain privacy rights with regard to that information; however, these rights are not absolute and are subject to certain limitations provided by law. You may have the right to:

• Request access to your personal data that we hold;
• Request that we correct inaccurate or incomplete personal data;
• Request that we cancel your personal data; and
• Object to our processing of your personal data;

Submitting Requests to Exercise Your Rights under the Law. You, or your legal representative may submit a request to exercise your rights under the Law at any time by completing the web form available here, or by calling our toll-free number: 1-800-772-2260, Option 7, or by sending us an email at privacystatement@tylertech.com that includes your full name, email address, and home address, a clear and precise description of the personal data with regard to which you seek to exercise any of the abovementioned rights, and clearly indicate which right or rights under the Law you wish to exercise. If you are requesting Tyler correct your personal data, please indicate the change to be made, and provide documentation supporting such change. You may also be required to provide documents establishing your identity or, where appropriate, documents that establish the authority of your legal representative, and any other item or document that facilitates locating your personal data. The information collected through this process will be used only for responding to your request.

Data Transfers. We may transfer the personal information we collect about you to countries other than the country in which the information was originally collected. Those countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your information to other countries, we will protect that information as described in this Privacy Statement.

The personal information we collect about you depends on how you interact with Tyler and the Tyler Platform. Some examples of information we may collect include your name, contact information, information about a device you are using to access the Tyler Platform (including your geolocation information or IP (Internet Protocol) address), information about how you use the Tyler Platform, and any information you submit to Tyler.

We may collect the following information about you, depending on how you interact with Tyler and the Tyler Platform:

• Biometric Information. Biometric Information includes, for example, fingerprint scans. Select mobile applications may take fingerprint scans to enable a faster login process.
• Contact Information. Contact Information includes, for example, first and last names, addresses, telephone numbers, and email addresses.
• Contact Records. Contact Records include, for example, records of conversations conducted with our customer support representatives via telephone, email, video, text, and chat, including all such information provided to us in connection with such conversations.
• Demographic Information. Demographic Information includes, for example, information concerning gender, age, race, ethnicity, income, marital status, and employment or educational information.
• Device Information. Device Information includes, for example, your browser version and settings, your device type and settings, and other information, such as your IP address, internet service provider, Media Access Control (MAC) address, mobile device identifier, the name and version of your operating system, referring and exit pages, and the date and time of your visit. Other device data, such as contact lists and camera and microphone data, may be collected if you use certain features of mobile applications to record audio and videos, take photos, scan documents, or enable in-app sharing with contacts in your contact list.
• Employment-related Information. Employment-related Information includes any information related to an employee, contractor, or prospective employee’s relationship with Tyler, including, for example, information about your educational background, employment history, résumé, and other information relating to a job search or application relevant for the recruitment or hiring process, as well as administration of employment benefits.
• Geolocation Information. Geolocation Information may be determined by processing IP addresses or other device information, which may depend on your device’s settings for location services.
• Preferences. Preferences include, for example, your email preferences and Tyler products or services you have indicated you may be interested in.
• Usage Data. Usage Data includes, for example, information about your interactions with the Tyler Platform, including the webpages you visit, links, or buttons you click, the search terms you enter, and other similar interactions with the Tyler Platform.
• User Generated Content or “UGC”. UGC includes any information (other than Demographic Information and Contact Information) you choose to provide to Tyler, including, for example, questions, comments, or reviews you submit to Tyler about the Tyler Platform.
• Transactional Data. Transactional Data includes, for example, credit or debit card information and other information about payment, purchases, or refunds.
• Tyler Account Credentials. Tyler Account Credentials include, for example, a username and password.

We may collect information about you directly from you (for example, if you fill out a form on the Tyler Platform, or interact with our customer support personnel via email, chat, or telephone), from third parties we partner with (for example, from our analytics or marketing service providers), or through cookies, or other automated means.

• Directly from You: We may collect Contact Information, Demographic Information, User Generated Content, Contact Records, Employment-related Information, Tyler Account Credentials, Transactional Data, and Preferences directly from you when you provide it to us, including when you: communicate with our customer support representatives (whether by phone, email, video, text, or chat), interact with us at industry conferences; create a Tyler account; fill out and submit any web forms on the Tyler Platform; indicate your preferences on the Tyler Platform (e.g., email preferences); or apply for a job at Tyler.
• Automatically from Your Device or Browser: Device Information, Usage Data, and Geolocation Information may be automatically collected from your device or browser whenever you access the Tyler Platform. Our collection of this information may include by our use of cookies and similar technologies, which is explained in more detail below.
• Using Cookies: We may use cookies (small files stored on your device or browser) and other similar technologies to automatically collect information via the Tyler Platform (“first-party cookies”), including Device Information, Usage Data, and Geolocation Information.
  We may also allow third parties to collect Device Information, Usage Data, and Geolocation Information using those third parties’ cookies and similar technologies (“third-party cookies”). Of particular note, we contract with third-party website ​​​​analytics companies, such as Google Analytics and CrazyEgg. The information generated by Google Analytics will be transmitted to and stored by Google and will be subject to Google's privacy policies, which can be viewed here ("Welcome to the Google Privacy Statement"). To learn more about Google's partner services and to learn how to opt out of tracking of analytics by Google, visit ("How Google uses data when you use our partners' sites or apps"). The information generated by CrazyEgg will be transmitted to and stored by CrazyEgg and will be subject to CrazyEgg's privacy policies, which can be viewed by clicking here https://www.crazyegg.com/privacy. To opt-out of tracking by CrazyEgg, click here https://www.crazyegg.com/opt-out.
• From Third Parties:  We work with third parties who provide services to us, including, for example, website analytics companies, information technology companies that assist with the operation, security, and functionality of the Tyler Platform. These third parties may collect and process the information described in the section titled “Personal Information We Collect,” on our behalf. Tyler may also collect data about you from third parties. As is common for businesses that market products to other organizations, we may obtain your work Contact Information from third party data suppliers or joint marketing partners to contact you with marketing and other informational communications. We may also obtain your information from publicly available sources and social networking sites, like LinkedIn or your organization’s website. 

We use the information that we collect for various purposes, such as to communicate with you and help you learn about and use the Tyler Platform, to help us evaluate and improve the Tyler Platform, and to help ensure the Tyler Platform remains safe and secure.

• To allow you to use and access the Tyler Platform, including for the prevention of fraudulent activity and improved security functionality.
• To monitor and evaluate the performance and functionality of the Tyler Platform, including as part of our analytic practices, or otherwise to maintain or improve the content and services offered through the Tyler Platform.
• To communicate with you, including to respond to requests for information or support of Tyler’s services and the Tyler Platform.
• For purposes of our research, development, and promotion of new Tyler products and services.
• For purposes of advertising and marketing our products and services online, via email and direct mail, and/or using other communication channels, including through partnerships with social media platforms and internet search engines.
• To better predict content and marketing offers that may interest you, and to provide you with personalized content and offers.
• To maintain and operate Tyler accounts, including by making certain services available to registered account users.
• To process applications for employment at Tyler.
• To investigate any suspected misuse of the Tyler Platform; to comply with legal and regulatory requirements and respond to requests from courts or other government bodies; and to protect or defend the rights, property and interests of Tyler, our employees, or the interests of our third-party service providers and partners.

We share the personal information that we collect only in specific, limited situations. For example, we may share your information with our service providers or business partners who help us analyze and process your information or help us with our marketing and advertising efforts, or we may share your information if we believe it’s necessary to comply with law or protect our users or employees.

• Third Parties: We share information with our third parties that assist with the operation of the Tyler Platform and Tyler’s business operations more generally. We share information with such third parties only as necessary for the third parties to provide the services to us.   Such third parties have a contractual obligation to protect the information they receive from us or collect on our behalf and may use such information only for the purposes that we allow. Your information may also be collected and processed by other third parties, such as the payment providers you select when you purchase Tyler products or services, or event or conference business sponsors or attendees and who will process your information independently in accordance with their own privacy notices.
• Marketing Agencies and Data Analytics Providers: As noted above, Tyler partners with third parties to assist with the advertising and marketing of our business and performing business analytics.
• Tyler Affiliates or Successors: We may disclose personal information to and among our Tyler family of affiliated companies. In addition, we may share your information with an entity that succeeds to all or part of Tyler’s business in connection with a sale, reorganization, consolidation, or merger.
• Other Third Parties:  We and our third parties will disclose specific individual information if we or they reasonably believe it is necessary to: (i) comply with applicable law; (ii) protect or defend the rights, property and interests of Tyler, our employees, or the interests of our third party service providers and partners; or (iii) under exigent circumstances, to protect the personal safety of our users and customers, or the public.

We want you to feel comfortable with how we collect, use, and share your personal information. Here are the steps you can take to make sure your information is up to date, to control certain types of information we can collect about you, to request that we delete or restrict our use or sharing of your information, and to request we share with you the information we maintain about you. You may be entitled to certain other rights provided by law, depending on your state or country of residency. For more information about these location-specific rights, please see the section titled “Additional Notices” below.

You can control the information we collect and use in the following ways:

• Geolocation Information: You can disable location-based services on your mobile device or web browser by adjusting the settings on your device or browser. This will prevent the Tyler Platform from accessing your Geolocation Information. Note that some Tyler services may not be available if you disable location-based services.
• Emails: You can unsubscribe or opt out from our marketing emails by clicking the “unsubscribe” link in the footer of any such email.
• Tyler Accounts: You can keep your contact information accurate and up to date by logging into your Tyler account on the Tyler Platform. ​If you wish to cancel your account, please contact us privacystatement@tylertech.com.
• Cookies: You can refuse to accept third-party cookies by following your browser or device’s instructions. If you do not accept cookies, you may experience some inconvenience in your use of the Tyler Platform.
• User Requests: You can contact us at any time using our toll free number: 1-800-772-2260, Option 7or by email: privacystatement@tylertech.com to request we do any of the following: (i) erase or delete all or some of your personal information; (ii) change, update, or correct your personal information; (iii) restrict how we use all or some of your personal information; (iv) access your personal information and, where applicable and feasible, request to receive that personal information in a commonly used electronic format (or ask for this information to be provided in that format to a third party); or (v) disclose what personal information we collect, use, or disclose. You may also request that we stop sharing your personal information with third parties for certain purposes by contacting us at the above phone number or email address. We will consider and respond to any such requests promptly, and otherwise in accordance with applicable laws.

Except in limited circumstances as part of a specific educational opportunity program Tyler operates called the Maine App Challenge, the Tyler Platform is not directed to persons under the age of sixteen (16), and we do not knowingly collect, request, or use personal information of children without parental permission.

As noted above, except in very limited circumstances, the Tyler Platform is not directed to persons under the age of sixteen (16), and we do not knowingly collect, request, or use personal information of children via the Tyler Platform, or offline. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete the information as soon as possible. If you believe that your child under the age of 16 has submitted personal information to Tyler, please contact us at privacystatement@tylertech.com.

We use commercially reasonable physical, administrative, and technical safeguards to deter unauthorized access, destruction, use, modification, or disclosure of your personal information, however, we cannot guarantee the security of your personal information.

In addition to using commercially reasonable physical, administrative, and technical safeguards to protect your information, we instruct our employees that information must be handled in accordance with this Privacy Statement, and any misuse of your personal information by employees may be subject to disciplinary action. Although we use these measures to protect your personal information, we cannot guarantee the security of information provided over the internet or stored in our databases. Your transmissions are, therefore, at your own risk. You can help protect your information by selecting strong, unique passwords for your Tyler Account Credentials and any associated email addresses.

We will retain your personal information for the length of time needed to fulfill the purposes outlined in the section above titled, “Why We Use Your Personal Information,” unless a longer retention period is required or permitted by law, is necessary for compliance with a legal obligation, is for the establishment, exercise and defense of a legal claim, or you request that we delete your personal data and we honor such request.

The Tyler Platform may contain links to websites owned and operated by third parties (“Third Party Sites”). This Privacy Statement does not apply to the privacy and security practices of Third-Party Sites, and we are not responsible for the privacy and security practices of Third-Party Sites. We encourage you to review the privacy policies of such Third-Party Sites so that you understand how those websites collect, use, and share your information.

Similarly, this Privacy Statement does not cover the privacy and security practices of social media platforms on which Tyler maintains its social media pages. Please review the terms, policies, and settings of those social media platforms if you have questions about how they collect, use, and share your information.

As a resident of California, you have rights under the California Consumer Privacy Act, California Civil Code § 1798.100 et seq., (with any implementing regulations and as may be amended from time to time, “CCPA”) relevant to your Personal Information (as defined under the CCPA), as well as other laws. The rights described herein are subject to exemptions under the CCPA and other limitations under applicable law.

California Consumer Rights Under the CCPA: If your Personal Information is subject to the CCPA, you may have certain privacy rights with regard to that information. You may have the right to:

• Request that we provide you access to the following no more than twice in a 12-month period:
  • the categories and specific pieces of Personal Information that we have collected about you;
  • the categories of sources from which the Personal Information is collected;
  • the business or commercial purpose for collecting or sharing your Personal Information;
  • the categories of third parties with whom we share your Personal Information; and
  • the categories of Personal Information that are sold or shared (as defined under the CCPA) and the categories of third parties to whom the Personal Information was sold or shared.
• Request that we delete your Personal Information, subject to exceptions under the CCPA or other applicable law; and
• Request that we not “sell” or share your Personal Information by opting out of the sale or sharing of your Personal Information.
• Request that we limit our use and/or disclosure of your sensitive Personal Information.
• Request that we correct your Personal Information.

California residents also have the right not to receive discriminatory treatment for the exercise of any of the privacy rights conferred by the CCPA, as described in this section. We will not discriminate against you because you have exercised any of your rights under the CCPA.

How to Submit a Request to Access or Delete Your Personal Information: If you wish to exercise your right to request access to your Personal Information or deletion of your Personal Information please submit your request by completing the web form available here, by calling our toll free number: 1-800-772-2260 Option 7, or by email: privacystatement@tylertech.com. To ensure we can verify your identity and help us respond to your request please provide us with your full name, email, and home address, and clearly indicate which of the rights you wish to exercise.

We are required to provide you with access to your Personal Information or delete your Personal Information only in response to verifiable consumer requests. We will compare the information you have provided as part of submitting the request to any information we may have in our possession in order to verify your request. We may also contact you to request additional information in relation to your request. The information you provide must match the information we have in our possession. This measure is in place to help ensure that Personal Information is not disclosed to any person who does not have the right to receive it. The information collected through this process will be used only for verification purposes and responding to your request.

Requests made through Agents: Please note that you may authorize an agent to exercise any of these rights. If you use an agent, we will take measures to verify your agent’s authorization to act on your behalf and we may require more information to ensure proper verification of you and your agent’s identity and authorization.

We may sell or share your personal information. We are required to let you know that you have the right to opt-out of the sale or sharing of your Personal Information.

How to opt out of the sale and/or sharing of your Personal Information: If you wish to exercise your right to request that we opt you out of the sale and/or sharing of your Personal Information, please submit your request by completing the web form available here or by sending us an email at privacystatement@tylertech.com that includes your full name, email, and home address, and clearly indicates that you wish to exercise your right to opt out of the sale and/or sharing of your Personal Information. The information collected through this process will be used only for responding to your request. You may exercise your right to opt out of the sale and/or sharing of your Personal Information by calling our toll-free number: 1-800-772-2260 Option 7.

How to opt in again: If you have opted out of the sale and/or sharing of your Personal Information, you are welcome to opt back in at any time. To opt in, contact us via email at privacystatement@tylertech.com and clearly request to opt-in to the sale and/or sharing of your Personal Information.

Categories of Personal Information Sold: In the previous 12 months, Tyler may have sold (as defined under the CCPA) one or more of the categories of Personal Information described in the “Personal Information We Collect” section of the Tyler Privacy Notice – Controller. The Personal Information may have been sold to one or more of the categories of third parties described in the “How We Share Your Personal Information With Third Parties” section of the Tyler Privacy Notice - Controller.

Categories of Personal Information Shared: In the previous 12 months, Tyler may have shared (as defined under the CCPA) one or more of the categories of Personal Information described in the “Personal Information We Collect” section of the Tyler Privacy Notice - Controller . The Personal Information may have been shared with one or more of the categories of third parties described in the “How We Share Your Personal Information with Third Parties” section of the Tyler Privacy Notice – Controller.

Categories of Personal Information Disclosed for a Business Purpose: We share Personal Information about you with service providers and third parties for business purposes, such as operational purposes and other purposes related to providing you with the products and services you seek from us. For more information about the business purposes for which we disclose Personal Information, see “How We Share Personal Information with Third Parties” section of the Tyler Privacy Statement – Controller and see the “Personal Information We Collect” section for what types of information may be shared.

Notice of Financial Incentives: We may offer discounts, coupons, and similar benefits (each, a “financial incentive”) to individuals who, for example, sign up to receive our marketing emails or create a Tyler account. When you participate in a financial incentive, we may collect Personal Information from you, such as your Contact Information, Demographic Information, Employment-related Information, Preferences, and Transactional Data. You can opt into a financial incentive by following the sign-up or participation instructions provided, and you have the ability to opt out of the financial incentive, or our subsequent use of your Personal Information in connection with a financial incentive, at any time by contacting us at privacystatement@tylertech.com.  In some cases, we may provide additional terms and conditions for a financial incentive, which we will present to you when you sign up. The value of the offer or discount presented to you is reasonably related to the value of your Personal Information.

Additional California Privacy Rights: Pursuant to California Civil Code § 1798.83, California residents may also ask us to provide them with (i) a list of certain categories of personal information (as defined in section 1798.80(e)) that we have disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year, and (ii) the identity of those third parties. California residents may make one request per calendar year.

To make this request, you may contact us at privacystatement@tylertech.com. In your request, please include a subject line that states “CA Shine the Light Request,” state that you are a California resident, and provide a current California address for our response.

As a resident of Virginia, you have rights under the Virginia Consumer Data Privacy Act, Va. Code Ann. § 59.1-571 et seq., (with any implementing regulations and as may be amended from time to time, “VCDPA”) relevant to your Personal Data (as defined under the VCDPA). The rights described herein are subject to exemptions under the VCDPA and other limitations under applicable law.

Virginia Consumer Rights Under the VCDPA: If your Personal Data is subject to the VCDPA, you may have certain privacy rights with regard to that information. You may have the right to:

• Request that we confirm whether we are processing your Personal Data, and provide you access to your Personal Data;
• Request that we correct inaccuracies in your Personal Data;
• Request that we delete your Personal Data;
• Request that we provide you with your Personal Data in a portable and, to the extent technically feasible, readily usable format; you may make this request no more than two times per calendar year; and
• Opt out of our processing of your Personal Data for purposes of (i) targeted advertising, (ii) the sale of your Personal Data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects that concern you.

Submitting Requests to Exercise Your Rights under the VCDPA. If you wish to exercise any of your rights under the VCDPA, please submit your request by completing the web form available here, or by calling our toll-free number: 1-800-772-2260 Option 7, or by sending us an email at privacystatement@tylertech.com that includes your full name, email address, and home address, and clearly indicates which right or rights under the VCDPA you wish to exercise. The information collected through this process will be used only for responding to your request.

In order for us to comply with your request to exercise your rights, we may need to verify your identity. To do so, we will compare the information you provide as part of submitting the request to any information we may have in our possession. We may also contact you to request additional information in relation to your request. The information you provide must match the information we have in our possession. This measure is in place to help ensure that Personal Data is not disclosed to, or deleted or altered by, any person who does not have the right to do so. The information collected through this process will be used only for verification purposes and responding to your request.

Appealing Tyler’s Declination to Take Action on a Consumer Request. If Tyler declines to take action in response to your request to exercise your rights under the VCDPA, you may appeal that decision by completing the web form available here, or by calling our toll-free number: 1-800-772-2260 Option 7, or by sending us an email at privacystatement@tylertech.com, clearly indicating that you would like to appeal Tyler’s decision. If your appeal is denied, you may contact the Virginia Attorney General at https://www.oag.state.va.us/contact-us/contact-info.

How to opt out of the sale of your Personal Data and the processing of your Personal Data for targeted advertising: If you wish to exercise your right to request that we opt you out of the sale of your Personal Data or processing of your Personal Data for targeting advertising, please submit your request by completing the web form available here, sending us an email at privacystatement@tylertech.com. Please help us by providing us with your full name, email, and home address, and clearly indicate that you wish to exercise your right to opt out of the sale of your Personal Information. The information collected through this process will be used only for responding to your request. You may also exercise your right to opt out of the sale of your Personal Information by calling our toll-free number: 1-800-772-2260 Option 7.

Nevada residents may direct a business that operates a website not to sell certain personal information (e.g., social security numbers; driver’s license numbers or other identification numbers; or account numbers in combination with the required access code or password) that the business has collected. You have the legal right to opt out of the sale of your personal information, even if your information is not currently being sold. For additional information about your rights, please contact us at privacystatement@tylertech.com.

Although Tyler does not have a corporate presence in the EU, EEA, or UK, we may, from time to time, process “personal data” of people who reside in the European Union, the European Economic Area (EEA), or the United Kingdom, which processing may be subject to the European Union’s General Data Protection Regulation (also called the “GDPR”) or the United Kingdom General Data Protection Regulation (also called the “UK-GDPR”), both hereinafter referred to as “GDPR”. “Personal data” is defined in the GDPR as “any information related to an identified or identifiable natural person,” and, for purposes of this Privacy Statement, references to “personal data” in this section include the categories of information set forth in the “Personal Information We Collect” section of the Tyler Privacy Statement - Controller, if applicable.

Legal Basis for Processing. We will only process your personal data if a sufficient basis for processing has been established. Those bases include:

• Consent: When you consent to the processing of your data for a specific purpose.
• Performance of a contract: processing your data is necessary for the performance of a contract to which you are a party.
• Legal obligation: when the processing of your data is necessary for our compliance with a legal obligation.
• Vital interests of individuals: when the processing is necessary to protect your vital interests or those of another natural person.
• Public interest: when the processing is necessary for a public interest.
• Legitimate interest: where processing is necessary for our own legitimate interests so long as those do not outweigh your interests or fundamental rights and freedoms.

Purposes for which we process data. Please see the sections titled “Why we use your Personal Information.”

Recipients of your personal data. Third parties which process your personal data on our behalf only do so in accordance with contractual obligations that instruct the processor on how to process your data to meet our obligations as the controller.

Transfers of your data outside the EU, EEA or United Kingdom and suitable safeguards. Because Tyler is a United States based organization and the United States has not received a finding of “adequacy” from the European Union or the United Kingdom under article 45 of the GDPR, Tyler only transfers your data to the United States with either your consent or our own compelling legitimate interest, in reliance on derogations for specific situations as set forth in article 49 of the GDPR, or in accordance with standard contractual clauses that impose contractual data protection requirements which the supervisory authority has deemed sufficient according to Article 46 of the GDPR.

Your rights with respect to your data. If you are a resident of the EU, EEA, or the United Kingdom, you have certain rights under applicable law, including the right to:

• Request that we provide you access to the personal data that we maintain about you;
• Request to correct, revise, or update any of the personal data we maintain about you;
• Request that we erase the personal data we maintain about you;
• Object to our processing of your personal data on the basis that the processing has a disproportionately detrimental impact on your interests, rights, and freedoms;
• Request that we restrict our processing activities related to your personal data;
• Withdraw your consent to our processing of your data at any time, however, such a withdrawal will not affect the lawfulness of our processing based on your consent prior to the withdrawal. Please note that where we rely on your consent in order to process your personal data and you then withdraw that consent, it may affect our provision of services to you, and may mean that we are unable to provide our services (either in part or in full) to you;
• Request to have your personal data reproduced in a structured, commonly used, and machine-readable format, whether or not such request relates to the transmission of the personal data to another party; and
• ​​​​​Require us to stop sending you marketing communications.
• Note: We are obligated to verify the identity of each individual when they request to exercise one or more of their rights under the GDPR. We will respond to all requests without undue delay, but not later the time frame required by the GDPR. If the request to exercise one of your rights is not manifestly unfounded or unduly excessive and we can verify your identity, we will acknowledge your request.

Our contact details. Residents of the EU, Iceland, Liechtenstein, Norway, or the United Kingdom may initiate any of the above requests, objections, or requirements by sending us an email at privacystatement@tylertech.com and writing “GDPR Request” in the subject line. You may also write to us at the postal address provided in the “Contact Us” section of the Tyler Privacy Statement – Controller .

Filing a complaint with the supervisory authority. You have the right to raise a concern about our collection and processing of your personal data with your local supervisory authority, available here (EU/EAA) or here (UK) and you may do so without prejudice to any other rights you may have.

We may, from time to time, process “personal information” of people who reside in Canada, which processing may be subject to the Personal Information Protection and Electronic Documents Act (“PIPEDA”).

Consent to Collect and Process. We only collect and process your personal information when we have a lawful basis for doing so. This lawful basis includes when you provide us with express consent, when consent is implied, or when we have a legal or contractual obligation to collect or process the information. By using the Tyler Platform or by providing us with your personal information by other means covered by this Privacy Statement, you have impliedly consented to our collection, use and disclosure of your personal information as explained in this Privacy Statement.

Submitting Requests to Withdraw Consent, or to Access, Correct, or Delete Your Personal Data. You may request to see, correct, or delete the personal information that we hold about you, or request to change or withdraw your consent to our collection and processing of your personal information. If you wish to request access to your personal information, or request that we correct or delete your personal information, or to change or withdraw your consent to our collection or processing of your personal information, please submit your request by completing the web form available here, or by calling our toll-free number: 1-800-772-2260 Option 7, or by sending us an email at privacystatement@tylertech.com that includes your full name, email address, and home address, and clearly indicates you are changing or withdrawing your consent to our processing, or you are requesting access to, or correction or deletion of, your personal information pursuant to PIPEDA. The information collected through this process will be used only for responding to your request. Please note that your right to access, correct, or delete the personal information that we hold about you is not absolute. There are instances where applicable law or regulatory requirements allow or require us to refuse your request. In addition, the personal information may have been destroyed, erased, or made anonymous in accordance with our record retention obligations and practices.

In the event that we cannot provide you with access to, or rectification or deletion of your personal information, we will endeavor to inform you of the reasons why, subject to any legal or regulatory restrictions.

Data Transfers. We may transfer the personal information we collect about you to countries other than the country in which the information was originally collected. Those countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your information to other countries, we will protect that information as described in this Privacy Statement.

We may, from time to time, process “personal data” of people who reside in Brazil, which processing may be subject to the Brazilian General Data Protection Law (“LGPD”).

Lawful Basis for Collection and Processing. We only collect and process your personal data when we have a lawful basis for doing so. This lawful basis includes when you provide us with express consent, when consent is implied, or when we have a legal or contractual obligation to collect or process your personal data. By using the Tyler Platform or by providing us with your personal data by other means covered by this Privacy Statement, you have impliedly consented to our collection, use and disclosure of your personal data as explained in this Privacy Statement.

Individual Rights under the LGPD: If your personal data is subject to the LGPD, you may have certain privacy rights with regard to that information; however, these rights are not absolute and are subject to certain limitations provided by law. You may have the right to:

• Request that we confirm whether we are holding, processing, or disclosing your personal data;
• Request access to your personal data;
• Request that we correct incomplete, inaccurate, or out-of-date personal data;
• Request that we anonymize, block, or delete unnecessary or excessive personal data or personal data processed in noncompliance with the provisions of the LGPD;
• Request that we delete personal data collected with your consent, unless there is another legal basis for our processing of such personal data;
• Request that we transfer your personal data to another product or service provider;
• Request information about how we have used your personal date and the third-party entities with which we have shared your personal data;
• Request information regarding the possibility of denying your consent to our processing of your personal data and about the consequences of such denial; and
• Request to revoke your consent to our collection of your personal data subject to legal or contractual restrictions and reasonable notice, however, our processing of your personal data provided pursuant to your previously expressed consent remains valid unless you request deletion of such personal data.

Submitting Requests to Exercise Your Rights under the LGPD. Subject to commercial and industrial secrets, you or your legal representative may submit a request to exercise your rights under the LGPD at any time by completing the web form available here, or by calling our toll-free number: 1-800-772-2260 Option 7, or by sending us an email at privacystatement@tylertech.com that includes your full name, email address, and home address, and clearly indicates which right or rights under the LGPD you wish to exercise. The information collected through this process will be used only for responding to your request. You may also use any of the above methods to submit to our Chief Privacy Officer complaints or inquiries about our personal data collection and processing policies and practices.

We may, from time to time, process “personal data” of people who reside in the Bahamas, which processing may be subject to the Bahamas Data Protection (Privacy of Personal Information) Act (“DPA”).

Individual Rights under the DPA: If your personal data is subject to the DPA, you may have certain privacy rights with regard to that information; however, these rights are not absolute and are subject to certain limitations provided by law. You may have the right to:

• Request that we confirm whether we are holding your personal data;
• Request that we provide you with a copy of your personal data (including, if necessary, an explanation of any such data that is expressed in terms that are not intelligible to the average person);
• Request that we correct personal data that is inaccurate or not up-to-date;
• Request that we delete your personal data, to the extent such data was collected unlawfully or unfairly in the circumstances; and
• Request that we cease using your personal data for the purpose of direct marketing, and delete your personal data that was used for such purpose.

Submitting Requests to Exercise Your Rights under the DPA. You may submit a request to exercise your rights under the DPA at any time by completing the web form available here, or by calling our toll-free number: 1-800-772-2260 Option 7, or by sending us an email at privacystatement@tylertech.com that includes your full name, email address, and home address, and clearly indicates which right or rights under the DPA you wish to exercise. The information collected through this process will be used only for responding to your request.

We may, from time to time, process “personal information” of people who reside in the Philippines, which processing may be subject to the Philippines Data Privacy Act of 2012 (with implementing rules and regulations, the “DPA”).

Lawful Basis for Collection and Processing. We only collect and process your personal information when we have a lawful basis for doing so. This lawful basis includes when you provide us with consent, when we have a legal or contractual obligation to collect or process the information, or when necessary to fulfill a compelling legitimate interest in a manner that does not outweigh your rights and freedoms.

Individual Rights under the DPA. If your personal information is subject to the DPA, you may have certain privacy rights with regard to that information; however, these rights are not absolute and are subject to certain limitations provided by law. You may have the right to:

• Request that we confirm whether we have, are, or will be processing your personal information;
• Request that we provide you with information about any automated processing of your personal information for purposes of profiling or any processing of your personal information for purposes of direct marketing;
• Request that we provide you with access to your personal information, including:
  • The content of your personal information that we have processed;
  • The sources from which we obtained your personal information;
  • The manner by which your personal information was processed;
  • The reasons for our disclosure of your personal information to third parties, and the names and addresses of such third-party recipients;
  • Information about any automated processes applied to your personal information, to the extent such automated processes will or are likely to be used as the sole basis for any decision that could significantly affect you;
  • The date when your personal information was last accessed and modified; and
  • To the extent Tyler is the processor of your personal information, the designation, name or identity and address of the controller of such personal information;
• Request that we correct personal information that is inaccurate or not up-to-date;
• Request that we provide you with a copy of your personal information in an electronic or structured format that is commonly used and allows for further use of such personal information by you;
• Request that we suspend, withdraw, or order the blocking, removal, or destruction of your personal information upon discovery and substantial proof that such personal information is incomplete, outdated, false, unlawfully obtained, used for unauthorized purposes or is no longer necessary for the purposes for which it was collected;
• Object to the processing of your personal information (including for purposes of direct marketing, automated processing, or profiling) or request to withdraw your consent for our collection or processing of your personal information; and
• Be indemnified for any damages sustained due to our processing of inaccurate, incomplete, outdated, false, or unlawfully obtained, or if we have processed your personal information without proper authorization.

Submitting Requests to Exercise Your Rights under the DPA. You may submit a request to exercise your rights under the DPA at any time by completing the web form available here, or by calling our toll-free number: 1-800-772-2260 Option 7, or by sending us an email at privacystatement@tylertech.com that includes your full name, email address, and home address, and clearly indicates which right or rights under the DPA you wish to exercise. The information collected through this process will be used only for responding to your request.

Philippines National Privacy Commission. You may file a complaint about our personal data collection and processing policies and practices with the Philippines National Privacy Commission (“NPC”) by following the NPC’s instructions, available here.

We may, from time to time, process “personal information” of people who reside in Australia, which processing may be subject to Australia’s Privacy Act of 1988 (the “Act”).

Individual Rights under the Act: If your personal information is subject to the Act, you may have certain privacy rights with regard to that information; however, these rights are not absolute and are subject to certain limitations provided by law. You may have the right to:

• Request access to your personal information;
• Request that we correct inaccurate, out-of-date, or irrelevant personal information that we hold; and
• Request that we opt you out of our direct-marketing communications.

Submitting Requests to Exercise Your Rights under the Act. You may submit a request to exercise your rights under the Act at any time by completing the web form available here, or by calling our toll-free number: 1-800-772-2260 Option 7, or by sending us an email at privacystatement@tylertech.com that includes your full name, email address, and home address, and clearly indicates which right or rights under the Act you wish to exercise. The information collected through this process will be used only for responding to your request. You may also use any of the above methods to submit to our Chief Privacy Officer complaints or inquiries about our personal data collection and processing policies and practices. We will consider and respond to any such complaints or inquiries promptly, and otherwise in accordance with applicable laws.

Overseas Recipients of Your Personal Information. We may transfer the personal information we collect about you to countries other than the country in which the information was originally collected. Those countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your information to other countries, we will protect that information as described in this Privacy Statement.

Applicable Law Requiring Collection of Personal Information. In most cases you are not required by law to provide Personal Information to Tyler. You are required to provide certain Personal Information to enable us to provide you with certain of our services or products, or in the event you are applying for a job with Tyler. Your Personal Information is being collected by Tyler under the Privacy Act of 1988 (cth) to assist you in your use of the Tyler Platform.

Consequences Associated with Not Providing Personal Information. Your choice to block cookies may result in some inconvenience in your use of the Tyler Platform.

We may, from time to time, process “personal information” of people who reside in Bermuda, which processing may be subject to the Bermuda Personal Information Protection Act (“PIPA”).

Individual Rights under the DPA: If your personal information is subject to PIPA, you may have certain privacy rights with regard to that information; however, these rights are not absolute and are subject to certain limitations provided by law. You may have the right to:

• Request access to your personal information, including information regarding the purposes for which the personal information has been and is being used, and the names or types of persons to whom such information has been or is being disclosed;
• Request that we correct personal information that is inaccurate or incomplete;
• Request that we opt you out of the processing of your personal information for the purposes of advertising, marketing, or public relations;
• Request that we opt you out of the processing of your personal information where the use of such personal information is causing or is likely to cause substantial damage or substantial distress to you or to another individual;
• Request that we erase or destroy your personal information that is no longer relevant for the purposes of its use; and
• Request a copy of, or access to, your personal information.

Submitting Requests to Exercise Your Rights under the DPA. You may submit a request to exercise your rights under the DPA at any time by completing the web form available here, or by calling our toll-free number: 1-800-772-2260 Option 7; or by sending us an email at privacystatement@tylertech.com that includes your full name, email address, and home address, and clearly indicates which right or rights under the DPA you wish to exercise. The information collected through this process will be used only for responding to your request.

We may, from time to time, process “personal data” of people who reside in Mexico, which processing may be subject to the Federal Law on the Protection of Personal Data held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares) (together with implementing regulations, the “Law”).

Individual Rights under the Law: If your personal data is subject to the Law, you may have certain privacy rights with regard to that information; however, these rights are not absolute and are subject to certain limitations provided by law. You may have the right to:

• Request access to your personal data that we hold;
• Request that we correct inaccurate or incomplete personal data;
• Request that we cancel your personal data; and
• Object to our processing of your personal data;

Submitting Requests to Exercise Your Rights under the Law. You, or your legal representative may submit a request to exercise your rights under the Law at any time by completing the web form available here, or by calling our toll-free number: 1-800-772-2260 Option 7; or by sending us an email at privacystatement@tylertech.com that includes your full name, email address, and home address, a clear and precise description of the personal data with regard to which you seek to exercise any of the abovementioned rights, and clearly indicate which right or rights under the Law you wish to exercise. If you are requesting Tyler correct your personal data, please indicate the change to be made, and provide documentation supporting such change. You may also be required to provide documents establishing your identity or, where appropriate, documents that establish the authority of your legal representative, and any other item or document that facilitates locating your personal data. The information collected through this process will be used only for responding to your request.

Data Transfers. We may transfer the personal information we collect about you to countries other than the country in which the information was originally collected. Those countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your information to other countries, we will protect that information as described in this Privacy Statement.