SpendTrack Privacy Policy

Last Updated: September 2022

SpendTrack Privacy Policy
Last Updated:

SpendTrack – powered by Fiserv helps businesses efficiently manage their card programs and expenses digitally.

SpendTrack allows:

  • Employees to make payments, view transactions, request a card and submit expense reports
  • Business owners and managers to view employee accounts, open new accounts, manage credit lines, view and approve expense reports and create management reports
  • Real-time card controls, including locking and unlocking a card, establishing spending limits and enabling merchant category restrictions
  • Statement access and payment information
  • Spend breakdowns, by cardholder, department, or pay account
  • Spending control with financial and audit documentation tools
  • Cardholder self-service capabilities

SpendTrack provides the Services to users on behalf of their business’s financial institution (“Your Financial Institution”) as a service provider.  This Privacy Policy, in combination with relevant privacy notices that Your Financial Institution provides to you (e.g., pursuant to financial privacy laws), inform you of the policies and practices regarding the collection, use and disclosure of any personal information that SpendTrack collects from or about users in connection with our website and mobile application (the “Services”).


SpendTrack may collect personal information from you in the following ways:

(a) Personal Information You or Your Financial Institution Provide to Us.

  • SpendTrack may collect personal information from you or your financial institution, such as your first and last name, address, e-mail, telephone number, social security number and employee id when you create an account.
  • SpendTrack will collect the financial and transaction information necessary to provide you with the Services, including account numbers, payment card expiration date, payment card identification, verification numbers, and transaction and payment history.
  • If you provide feedback or contact SpendTrack via email, SpendTrack will collect your name and email address, as well as any other content included in the email, in order to send you a reply.
  • SpendTrack also collects other types of personal information that you provide voluntarily, such as any information requested by SpendTrack if you contact SpendTrack via email regarding support for the Services.

(b) Personal Information Collected from Third Parties. SpendTrack may collect certain information from identity verification services and consumer reporting agencies, including credit bureaus, in order to provide some of our Services.

(c) Personal Information Collected Via Technology. We and our service providers may automatically log information about you, your computer or mobile device, and your interaction over time with our Services, our communications and other online services, such as:

  • Device data, such as your computer’s or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers, language settings, mobile device carrier, radio/network information (e.g., WiFi, LTE, 3G), and general location information such as city, state or geographic area.
  • Online activity data, such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to the Service, navigation paths between pages or screens, information about your activity on a page or screen, access times, and duration of access.
  • Cookies, which are text files that websites store on a visitor‘s device to uniquely identify the visitor’s browser or to store information or settings in the browser for the purpose of helping you navigate between pages efficiently, remembering your preferences, enabling functionality, and helping us understand user activity and patterns.
  • Local storage technologies, like HTML5 and Flash, that provide cookie-equivalent functionality but can store larger amounts of data, including on your device outside of your browser in connection with specific applications.
  • Web beacons, also known as pixel tags or clear GIFs, which are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked.
  • Location Information. If you have enabled location services on your phone and agree to the collection of your location if / when prompted by the Services, SpendTrack will collect your location information when you use the Services; for example, to provide our fraud detection services. If you do not want SpendTrack to collect this information, you may decline the collection of your location when prompted or adjust the location services settings on your device.


(a) General Use. In general, SpendTrack uses your personal information to respond to your requests as submitted through the Services, to provide you the Services you request, and to help serve you better. SpendTrack uses your personal information in the following ways:

  • facilitate the creation of, and secure and maintain your account
  • identify you as a legitimate user in SpendTrack’s system
  • provide improved administration of the Services
  • provide the Services you request
  • improve the quality of experience when you interact with the Services
  • send you administrative e-mail notifications, such as security or support and maintenance advisories
  • research and development, including model building and validation, or improvement, modification and/or enhancement of the Services and/or other products and services and
  • send surveys, offers, and other promotional materials related to the Services.

(b) Compliance and protection. We may use your personal information to:

  • comply with applicable laws, lawful requests and legal process, such as to respond to subpoenas or requests from government authorities
  • protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims)
  • audit our internal processes for compliance with legal and contractual requirements and internal policies
  • enforce the terms and conditions that govern the Service; and
  • prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.

(c) Creation of Non-Identifiable Data. SpendTrack may create de-identified or aggregate information records from personal information by excluding certain information (such as your name) that makes the information personally identifiable to you. SpendTrack may use this information in a form that does not personally identify you to analyze request patterns and usage patterns to enhance SpendTrack’s products and services. SpendTrack reserves the right to use and disclose non-identifiable information to third parties in its discretion.


SpendTrack discloses your personal information as described below.

(a) At the direction of Your Financial Institution or business, SpendTrack may share your information with Your Financial Institution, your business, or with third parties. Other than as described in this Privacy Policy in connection with the Services and your consent for SpendTrack to use and share your data for the above purposes, this Privacy Policy does not apply to the processing of your information by Your Financial Institution, business or third parties with whom SpendTrack shares information.

(b) Third Party Service Providers. SpendTrack may share your personal information with third party or affiliated service providers that perform services for or on behalf of SpendTrack, for the purposes described in this Privacy Policy, including: to provide you with the Services; to conduct quality assurance testing; to facilitate the creation of accounts; to optimize the performance of the Services; to provide technical support; and/or to provide other services to SpendTrack.

(c) In furtherance of Fiserv or SpendTrack’s use of your information and your business’s information as described above (example - to assist the provision of improved services or for analysis of business activity).

(d) Corporate Restructuring. SpendTrack may share some or all your personal information in connection with or during negotiation of any merger, financing, acquisition or dissolution transaction involving the sale, transfer, divestiture, or disclosure of all or a portion of SpendTrack’s business or assets. In the event of an insolvency, bankruptcy, or receivership, personal information may also be transferred as a business asset. If SpendTrack’s company, business or assets is acquired by another company, that company will possess the personal information collected by SpendTrack and the company will assume the rights and obligations regarding your personal information as described in this Privacy Policy.

(e) Authorities and Others. Regardless of any choices you make regarding your personal information, SpendTrack may disclose your personal information to law enforcement, government authorities, and private parties, and in accordance with applicable law, for the compliance and protection services described above.


The Services may contain links to third party websites. When you click on a link to any other website or location, you will leave the Services and go to another site and another entity may collect personal and/or anonymous information from you. SpendTrack’s provision of a link to any other website or location is for your convenience and does not signify SpendTrack’s endorsement of such other website or location or its contents. SpendTrack has no control over, does not review, and cannot be responsible for, these outside websites or their content. Please be aware that the terms of this Privacy Policy do not apply to these outside websites. We encourage you to read the privacy policy of every website you visit.


You have several choices regarding use of information on the Services.

(a) How We Respond to Do Not Track Signals. Some web browsers transmit “do not track” signals to the websites and other online services with which your web browser communicates. There is currently no standard that governs what, if anything, websites should do when they receive these signals. SpendTrack currently does not take action in response to these signals. If and when a standard is established, SpendTrack may revise its policy on responding to these signals.

(b) Access, Update, or Correct Your Information.  You can access, update or correct your information by changing preferences in your account. For additional requests, please contact Your Financial Institution on whose behalf we are providing the Services to you. 

(c) Opting Out of Email or SMS Communications. If you have signed-up to receive email marketing communications from us, you can unsubscribe any time by clicking the "unsubscribe" link included at the bottom of the email or other electronic communication. Alternatively, you can opt out of receiving marketing communications by contacting us at the contact information under "Contact Us" below. If you provide your phone number through the Services, SpendTrack may send you notifications by SMS, such as provide a fraud alert. You may opt out of SMS communications by unlinking your mobile phone number through the Services.

(d) Opting Out of Location Tracking. If you initially consented to the collection of geo-location information through the Services, you can subsequently stop the collection of this information at any time by changing the preferences on your mobile device. Please note, however, that if you withdraw consent to SpendTrack collection of location information, you may no longer be able to use some features of the Services.


We implement reasonable administrative, technical and physical measures in an effort to safeguard the information in our custody and control against theft, loss and unauthorized access, use, modification and disclosure. Nevertheless, transmission via the internet is not completely secure and we cannot guarantee the security of your information.


The Services are not directed towards children, and we do not intentionally gather personal information from children under the age of 13.


We reserve the right to modify this Privacy Policy at any time. We encourage you to periodically review this page for the latest information on our privacy practices. If we make material changes to this Privacy Policy , we will notify you by updating the date of this Privacy Policy and posting it on our website and in app stores where our mobile applications covered by this Privacy Policy are available for download. We may (and, where required by law, will) also provide notification of changes in another way that we believe is reasonably likely to reach you, such as via e-mail (if you have an account where we have your contact information) or another manner through our website or mobile applications.


If you have any questions or complaints about this Privacy Policy or SpendTrack’s data collection or processing practices, or if you want to report any security violations to SpendTrack, please contact SpendTrack by email at: dpo@fiserv.com; or by mail at:

Fiserv, Inc.
255 Fiserv Drive
Brookfield, WI 53045
PO Box 979
Brookfield, WI 53008-0979