Salucro Subprocessors

CONFIDENTIAL INFORMATION. Revised 05/24/2024.

The subprocessors listed below may be utilized in the provision of services by Salucro pursuant to Salucro’s provision of services to a client.

Whether a Subprocessor listed below in fact processes controller data depends on the services elected by the client. Contact your account manager for confirmation of processors utilized. Further, the amount and type of data disclosed to a Subprocessor may be further restricted by the features, functions, and requests elected by a client.

Salucro’s provision of services includes the following Personal Data:

Payment transaction information (which may include payor name, address, account number, and dates);
Contact information (which may include address, email address, phone number);
User information (which may include usernames and email addresses);
Consumer information (including name, balances, and patient account number); and
Other data (which may include navigational data (including website usage information), email data, usage metadata, and other electronic data submitted, stored, sent, or received by Authorized Users or end users (e.g., patients).

Subprocessor	Services Provided	Platform Service	Personal Data Applicable to Data Subject
Microsoft	Data Storage	Service Operation	All information created by or disclosed to Salucro by a data subject or client except cardholder data
Amazon Web Services	Data Storage	Service Operation	All information created by or disclosed to Salucro by a data subject or client
TeamSupport	Chat Support Software	Service Operation	Customer support chat information, such as name, account number, address, and other information shared by consumers or users
Salesforce	Customer Support Software	Service Operation	All information created by or disclosed to Salucro by a data subject or client except cardholder data
Salucro Software Development Pvt. Ltd.	Technical Customer Support, Password Resets	Service Operation	All information created by or disclosed to Salucro by a data subject or client except cardholder data and patient statement data

Payment Processing and Related Services

Subprocessor	Services Provided	Platform Service	Personal Data Applicable to Data Subject
CardConnect	P2PE and Payment Gateway	Payment Processing	Cardholder and banking information, including, without limitation, card numbers, bank account numbers, name, address, phone number
	Payment Gateway Service	Payment Processing	Cardholder and banking information, including, without limitation, card numbers, bank account numbers, name, address, phone number, e-mail address.
	Tokenization	Payment Processing	Selected by Customer, but can include data such as account numbers, name, billing address, shipping address, phone number, e-mail address, etc.
	Payer Authentication	Payment Processing	Banking Information
FreedomPay	P2PE and Payment Gateway	Payment Processing	Cardholder and banking information, including, without limitation, card numbers, bank account numbers, name, address, phone number
	Payment Gateway Service	Payment Processing	Cardholder and banking information, including, without limitation, card numbers, bank account numbers, name, address, phone number, e-mail address.
	Tokenization	Payment Processing	Selected by Customer, but can include data such as account numbers, name, billing address, shipping address, phone number, e-mail address, etc.
	Payer Authentication	Payment Processing	Banking Information

Optional Platform Features and Services

Subprocessor	Services Provided	Platform Service	Personal Data Applicable to Data Subject
Infinicept	Merchant Underwriting and Boarding	Service Operation	Contact information and user information (including client employee information such as names, social security numbers, addresses, dates of birth)
8x8	Telephone Technologies	Call Routing and Voice Messaging	Storage of voice mail; call contact information
Plum	IVR Technology	IVR Feature Only	Payment transaction information (which may include payor name, phone number, payment amounts, payment information)
Twilio	SMS Technology	SMS Feature Only	Contact Information
MailMyStatements	Print and Mail Statements	Statement Feature Only	Consumer information, other data, contact information (including all patient statement data)
hCaptcha	Bot and Fraud Detection/Management	Standalone Patient Portal Only	IP Address of the User, Web Browser User Agent

Independent Controllers of Client Data (Not Subprocessors of Salucro)

Fifth Third/Worldpay: Salucro’s payment processing financial institution partners used for direct processing and settlement to clients. See the Worldpay Privacy Notice here. Refer to this notice frequently and subscribe to changes of this notice to stay aware of its terms.

PayPal: Provider of PayPal and Venmo payment types. Refer to the PayPal Privacy Statement here. Refer to this notice frequently and subscribe to changes of this notice to stay aware of its terms.