YODLEE IS COMMITTED TO SAFEGUARDING YOUR PRIVACY
Last Updated: November 13, 2017
This Privacy Notice applies to Envestnet Yodlee’s (Yodlee’s) direct-to-consumer services and websites– collectively called the Yodlee Services
These sites are owned and operated by Yodlee, Inc. (“Yodlee”). This Privacy Notice sets forth Yodlee’s commitment to you to protect the privacy of your personal information that is collected through the Yodlee Services. The Yodlee Services have participated in industry certified audits and assessments to help promote the principles of disclosure and informed consent on the Internet. Because Yodlee wants to demonstrate its commitment to your privacy, we have agreed to disclose our information practices as they apply to the Yodlee Services and have our privacy and security practices reviewed for compliance by these recognized experts.
Frequently Asked Questions
In order to use the Yodlee Services, Yodlee requires you to create a Yodlee username and password. During registration you are required to give contact information such as name, address, and email address. Specifically, Yodlee collects the following categories of personal information about you through the Yodlee Services:
WHAT CATEGORIES OF PERSONAL INFORMATION DO THE YODLEE SERVICES COLLECT?
A. Registration Information: When you register for the Yodlee Services, you will be asked for basic registration information, such as a username and password that you choose, name, address, demographic information (such as age and income), and an e-mail address for Yodlee Customer Service. Additional information may be required to utilize value-added features of the Yodlee Services, such as Auto-Registration and Password Reset, or to access specific third party Internet services using the Yodlee Services. This information may include your passwords and user names for the third party web sites and Internet services. We will use this information for providing the services you requested and accessing the web sites you select on your behalf, so that we can present the requested information to you, but such information is not required to register for the Yodlee Services.
B. Information on Your Use of the Yodlee Services: As with most online businesses, Yodlee logs information about your access and use of the Yodlee Services web sites, including (i) your transactions conducted on the Yodlee Services web sites, including the use of Internet cookies (discussed below), (ii) the IP addresses from which you came to the site, and (iii) your communications with the Yodlee Services and web sites.
C. Information from Third Party Web Sites: In order to display information to you through the Yodlee Services, the Services must collect, on your behalf, your account and other personal information from third party web sites and Internet services that you register on the Yodlee Services. For example, if you register your credit card account through the Yodlee Services, the Service will collect the transactional and payment information regarding your credit card account to display it to you on that Yodlee Service’s web site.
D. Information from Yodlee Services’ Partners: Yodlee may arrange for one or more services on the Yodlee Services web sites to be provided to you in whole or in part by a third party partner. For example, Yodlee may arrange for a third party partner to provide electronic funds transfer services to you on the Yodlee Services web sites. The services of these third party partners are governed by their privacy policies, not the Yodlee Services Privacy Notice. This third party partner may share information with Yodlee on your transactions with them, for display on the Yodlee Services web sites and for purposes permissible under this Privacy Notice.
E. Information from Security, Fraud and Risk Service providers: Yodlee may arrange for one or more service providers to provide background information on you if you are performing financial transactions on the Yodlee Services web sites. Such providers may include federal authorities and watch list providers (e.g., OFAC) and may also include third party audit services that will protect Yodlee and you from account takeovers, phishing, and other schemes designed to fraudulently use your account.
WHAT CATEGORIES OF MY PERSONAL INFORMATION GATHERED THROUGH THE YODLEE SERVICES DOES YODLEE DISCLOSE?
Your personal information will not be sold, shared, rented or traded with any affiliated or unaffiliated third parties, except (i) to provide you with the Yodlee Services , (ii) pursuant to joint marketing arrangements described below, or (iii) as required or permitted by law. For example, in order to provide you with the Yodlee Services, Yodlee may disclose your username and passwords to third party web sites, such as web sites operated by a credit card company or a bank, in order to obtain the information that you requested be aggregated and displayed through the Yodlee Services. When you register for the Yodlee Services, you are deemed to authorize disclosures by Yodlee to provide the Yodlee Services. Yodlee may disclose registration information and information on your use of the Yodlee Services (excluding information regarding transactions on your aggregated accounts) to companies that perform marketing services on our behalf, or to other financial institutions with whom Yodlee offers you products and services pursuant to joint marketing agreements. For example, Yodlee may share your personal information with a nonaffiliated third party to offer you a new service on the Yodlee Services web sites that is provided jointly by Yodlee and an unaffiliated company. Yodlee reserves the right to disclose your personal information as required by law and when we believe that disclosure is necessary to protect our rights and/or comply with a judicial proceeding, court order, or legal process served on Yodlee. If Yodlee is involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice on our web site of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information. Yodlee does present an opt-out option during registration for users who do not wish to share their information for joint marketing purposes as described in the prior paragraph. The user may change the opt-out choice at any time by selecting Edit Personal Profile. Yodlee reserves the right to share aggregated information with third parties in which case personal information about you will never be disclosed.
WILL I BE CONTACTED IF I REGISTER FOR THE YODLEE SERVICES?
Yodlee will occasionally contact users by electronic mail to send information or inform them of new features, or to request participation in market surveys. Out of respect for your privacy, we present the option to not receive these types of communications through an opt-out option when signing up for the Yodlee Services. This choice can be changed at any time by selecting Edit Personal Profile. You may also opt-out of these communications by following the unsubscribe instructions included in these emails or by contacting us at email@example.com. However, in order to ensure the quality of the Yodlee Services, Yodlee will send you strictly service-related announcements on rare occasions when it is necessary to do so. These include a “Welcome Notice” to confirm new membership, “notifications” of password changes or “account lockouts” and other “customer satisfaction” and “customer service” issues. Generally, you may not opt-out of these communications, which are not promotional in nature. If you do not wish to receive them, you have the option to deactivate your account.
DO THE YODLEE SERVICES USE TRACKING TECHNOLOGIES?
We and our partners, affiliates, or analytics or service providers, use tracking technologies such as cookies, beacons, tags, and scripts, to analyze trends, administer the websites, track users’ movements around the websites, and gather demographic information about our user base as a whole. We may receive reports based on the use of these technologies from these companies on an individual or aggregated basis.
Clear Gifs (Web Beacons/Web Bugs)
Our third party service provider employs a software technology called clear gifs (a.k.a. Web Beacons/Web Bugs), that help us better manage content on our site by informing us what content is effective. Clear gifs are tiny graphics with a unique identifier, similar in function to cookies, and are used to track the online movements of web users. In contrast to cookies, which are stored on a user’s computer hard drive, clear gifs are embedded invisibly on web pages and are about the size of the period at the end of this sentence. We do not tie the information gathered by clear gifs to our customers’ personal information.
We gather certain information automatically and store it in log files. This information may include internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data. We do not link this automatically collected data to other information we collect about you.
We and our third party partners use Local Storage (HTML5) to provide certain features on our website, to display advertising based on your web browsing activities, and/or to store content information and preferences. Various browsers may offer their own management tools for removing HTML5.
HOW IS MY PERSONAL INFORMATION PROTECTED AND SECURED?
At Yodlee, our number one focus is customer trust. The security of your personal information is important to us. We understand the need for our customers’ personal data to be completely secure and private, and we have designed and deployed (as a part of the Yodlee Services) a state-of-the-art system to protect our customer’s’ personal information. Yodlee maintains physical, electronic, and procedural safeguards that comply with federal standards to guard your personal information held by Yodlee relative to the Yodlee Services. When you enter personally identifiable information on our registration page, we encrypt that information using at least 128-bit secure socket layer technology (SSL). The Yodlee Services databases are physically protected at a secure, third party site and are monitored by security personnel twenty-four hours a day. Only authorized personnel can access the data center, and they must submit to multiple forms of identification including biometric authentication. If you have any questions about the security of your personal information, you can contact us at firstname.lastname@example.org.
WHAT IF I NEED TO CHANGE THE PERSONAL INFORMATION I PREVIOUSLY DISCLOSED?
Upon request Yodlee will provide you with information about whether we hold, or process on behalf of a third party, any of your personal information. To request this information please go to the My Profile section menu option.
The Yodlee Services sites include a user profile update form for reviewing or updating personal information provided. If your personal information provided to Yodlee changes, or if you no longer desire our service, you may correct or delete it by logging into your Yodlee Services and selecting the appropriate choice in Edit Personal Profile. If you are unable to change this information through the user profile form provided, you can use our Submit Service Request Feature to request the change or by emailing us at email@example.com. We will respond to your request within thirty (30) days. In the Edit Personal Profile section you may also review and update personal information needed for accessing other sites. We do not currently provide an interface for changing access information (such as passwords) for third party sites via the Yodlee Services. In addition, you cannot update or change personal information that is retrieved by the Yodlee Services from third party web sites and Internet services for display on the Yodlee Services websites. To change this access information and other personal information from third party websites, you will need to follow the procedures set forth by the third party web sites themselves.
DOES THIS PRIVACY NOTICE APPLY TO THIRD PARTY WEBSITES ACCESSED THROUGH THE YODLEE SERVICES?
No. This Privacy Notice only applies to information collected on www.yodlee.com and Yodlee’s direct-to-consumer services and websites (i.e. the Yodlee Services).
It does not apply to services or sites that are accessed through the Yodlee Services. Our website includes links to other websites whose privacy practices may differ from those of Yodlee. Yodlee acts as your personal agent, communicating between you and the web sites you use. Yodlee does not accept responsibility for the actions and policies of third party web sites you access, either with regard to the personal information you have provided to them, or which you authorize Yodlee to give to them for accessing their web sites, or which they obtain through your use of their web sites directly and/or through the Yodlee Services. If you submit personal information to any of those sites, your information is governed by their privacy policies. You should be careful to review any privacy policies posted on those web sites before signing up with or using them. Yodlee does not accept responsibility for the services provided to you by these third party web sites.
WHO CAN I CONTACT IF I HAVE ANY QUESTIONS REGARDING MY PRIVACY?
This Privacy Notice covers solely the online information practices of the Yodlee Services. You can contact Yodlee for any questions or suggestions you have at Yodlee Customer Care.
The online information practices relating to services provided or enabled by Yodlee on other sites are covered by the respective privacy notice of such other sites and/or services.
HOW LONG DOES YODLEE RETAIN MY PERSONAL INFORMATION?
In connection with your use of the Yodlee Services, Yodlee will collect and retain your personal information, both the information you provide directly and the information we obtain from third party sites, for as long as you are an active user of that Yodlee Service. Should you decide to cancel the Yodlee Service, we will discontinue the collection of information from third party sites on your behalf. We reserve the right to retain the information collected up to the date of your cancellation of the Yodlee Service. This data will always be maintained under the same security and privacy controls that are in place for active Yodlee Services users. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
HOW IS PERSONAL INFORMATION ON FORMER USERS OF THE YODLEE SERVICES TREATED?
The terms of this Privacy Notice will apply to personal information of former users of the Yodlee Services.
HOW WILL I BE INFORMED OF CHANGES TO THE PRIVACY NOTICE OR RECEIVE FUTURE DISCLOSURES OF THIS PRIVACY NOTICE?
We reserve the right at our discretion to make changes to this Privacy Notice. If we decide to change our Privacy Notice, we will post those changes to this Privacy Notice, the Yodlee Services home page, and other places we deem appropriate so that you are aware of what information we collect, how we use it and under what circumstances, if any we disclose it. We reserve the right to modify this Privacy Notice at any time, so please review it frequently. If we make material changes to this notice, we will notify you here, by email, or by means of notice on the Yodlee Services home pages prior to the change becoming effective. You may review updates to our Terms and Privacy Notice at any time via links on our site. You agree to accept electronic communications and/or postings of an annual or revised Privacy Notice on the Yodlee Services web sites, and that such electronic communications or postings constitute notice to you of the Privacy Notice.
HOW WILL DISPUTES REGARDING THE PRIVACY NOTICE BE HANDLED?
If you have a problem or dispute with Yodlee regarding this Privacy Notice or the treatment of your personal information, this problem or dispute will be subject to both this Privacy Notice and the Terms governing the Yodlee Services in general.
We display personal testimonials and other endorsements of satisfied customers on our site. With your consent, we may post your testimonial along with your name. If you wish to update or delete your testimonial, you can contact us at firstname.lastname@example.org.
If you use the Yodlee Forum, you should be aware that any personal information you submit there can be read, collected, or used by other users of the forum and could be used to send you unsolicited messages. To request removal of your personal information from our forum, contact us at email@example.com. In some cases, we may not be able to remove your personal information, in which case we will let you know if we are unable to do so and why.
Social Media Features and Widgets
Our web site includes social media features, such as the Facebook Like button and widgets, such as the Share button or interactive mini-programs that run on our site. These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our site. Your interactions with these features are governed by the privacy notice of the company providing it.
Yodlee Careers Section
When you apply for a job on Yodlee.com, you are asked for certain personal information such as your name, email address and phone number. We use this information to contact you regarding the job in which you have expressed interest. You are given the opportunity to submit a resume to the site to apply for a job, that resume is only viewable by authorized Yodlee employee’s in order to contact you regarding the job for which you have applied. We do not share any of the personal information that you provide within the application with any third party for their promotional purposes.
The Yodlee Company’s privacy practices, described in this Privacy Notice, comply with the APEC Cross Border Privacy Rules System. The APEC CBPR system provides a framework for organizations to ensure protection of personal information transferred among participating APEC economies. More information about the APEC framework can be found here.
EU-U.S. Privacy Shield and Swiss-U.S. Privacy Shield
Yodlee participates in and has certified its compliance with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework. We are committed to subjecting all personal data received from European Union (EU) member countries and Switzerland, respectively, in reliance on each Privacy Shield Framework, to the Framework’s applicable Principles. To learn more about the Privacy Shield Frameworks, and to view our certification, visit the U.S. Department of Commerce’s Privacy Shield List. [https://www.privacyshield.gov]
Yodlee is responsible for the processing of personal data it receives, under each Privacy Shield Framework, and subsequently transfers to a third party acting as an agent on its behalf. Yodlee complies with the Privacy Shield Principles for all onward transfers of personal data from the EU and Switzerland, including the onward transfer liability provisions.
With respect to personal data received or transferred pursuant to the Privacy Shield Frameworks, Yodlee is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.
Under certain conditions, more fully described on the Privacy Shield website [https://www.privacyshield.gov/article?id=How-to-Submit-a-Complaint], you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.