We may, from time to time, process “personal information” of people who reside in Australia, which processing may be subject to Australia’s Privacy Act of 1988 (the “Act”).

Individual Rights under the Act: If your personal information is subject to the Act, you may have certain privacy rights with regard to that information; however, these rights are not absolute and are subject to certain limitations provided by law. You may have the right to:

• Request access to your personal information;
• Request that we correct inaccurate, out-of-date, or irrelevant personal information that we hold; and
• Request that we opt you out of our direct-marketing communications.

Submitting Requests to Exercise Your Rights under the Act. You may submit a request to exercise your rights under the Act at any time by completing the web form available here or by calling our toll-free number: 1-800-257-7254, Option 4, or by sending us an email at privacy@tylertech.com that includes your full name, email address, and home address, and clearly indicates which right or rights under the Act you wish to exercise. The information collected through this process will be used only for responding to your request. You may also use any of the above methods to submit to our Privacy Team complaints or inquiries about our personal data collection and processing policies and practices. We will consider and respond to any such complaints or inquiries promptly, and otherwise in accordance with applicable laws.

Overseas Recipients of Your Personal Information. We may transfer the personal information we collect about you to countries other than the country in which the information was originally collected. Those countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your information to other countries, we will protect that information as described in this Privacy Statement.

Applicable Law Requiring Collection of Personal Information. In most cases, you are not required by law to provide Personal Information to Tyler. You are required to provide certain Personal Information to enable us to provide you with certain of our services or products, or in the event you are applying for a job with Tyler. Your Personal Information is being collected by Tyler under the Privacy Act of 1988 to assist you in your use of the Tyler Platform.

Consequences Associated with Not Providing Personal Information. Your choice to block cookies may result in some inconvenience in your use of the Tyler Platform.

We may, from time to time, process “personal data” of people who reside in the Bahamas, which processing may be subject to the Bahamas Data Protection (Privacy of Personal Information) Act (“DPA”).

Individual Rights under the DPA: If your personal data is subject to the DPA, you may have certain privacy rights with regard to that information; however, these rights are not absolute and are subject to certain limitations provided by law. You may have the right to:

• Request that we confirm whether we are holding your personal data;
• Request that we provide you with a copy of your personal data (including, if necessary, an explanation of any such data that is expressed in terms that are not intelligible to the average person);
• Request that we correct personal data that is inaccurate or not up-to-date;
• Request that we delete your personal data, to the extent such data was collected unlawfully or unfairly in the circumstances; and
• Request that we cease using your personal data for the purpose of direct marketing, and delete your personal data that was used for such purpose.

Submitting Requests to Exercise Your Rights under the DPA. You may submit a request to exercise your rights under the DPA at any time by completing the web form available here or by calling our toll-free number: 1-800-257-7254, Option 4, or by sending us an email at privacy@tylertech.com that includes your full name, email address, and home address, and clearly indicates which right or rights under the DPA you wish to exercise. The information collected through this process will be used only for responding to your request.

We may, from time to time, process “personal information” of people who reside in Bermuda, which processing may be subject to the Bermuda Personal Information Protection Act (“PIPA”).

Individual Rights under the DPA: If your personal information is subject to PIPA, you may have certain privacy rights with regard to that information; however, these rights are not absolute and are subject to certain limitations provided by law. You may have the right to:

• Request access to your personal information, including information regarding the purposes for which the personal information has been and is being used, and the names or types of persons to whom such information has been or is being disclosed;
• Request that we correct personal information that is inaccurate or incomplete;
• Request that we opt you out of the processing of your personal information for the purposes of advertising, marketing, or public relations;
• Request that we opt you out of the processing of your personal information where the use of such personal information is causing or is likely to cause substantial damage or substantial distress to you or to another individual;
• Request that we erase or destroy your personal information that is no longer relevant for the purposes of its use; and
• Request a copy of, or access to, your personal information.

Submitting Requests to Exercise Your Rights under the DPA. You may submit a request to exercise your rights under the DPA at any time by completing the web form available here or by calling our toll-free number: 1-800-257-7254, Option 4, or by sending us an email at privacy@tylertech.com that includes your full name, email address, and home address, and clearly indicates which right or rights under the DPA you wish to exercise. The information collected through this process will be used only for responding to your request.

We may, from time to time, process “personal data” of people who reside in Brazil, which processing may be subject to the Brazilian General Data Protection Law (“LGPD”).

Lawful Basis for Collection and Processing. We only collect and process your personal data when we have a lawful basis for doing so. This lawful basis includes when you provide us with express consent, when consent is implied, or when we have a legal or contractual obligation to collect or process your personal data. By using the Tyler Platform or by providing us with your personal data by other means covered by this Privacy Statement, you have impliedly consented to our collection, use and disclosure of your personal data as explained in this Privacy Statement.

Individual Rights under the LGPD: If your personal data is subject to the LGPD, you may have certain privacy rights with regard to that information; however, these rights are not absolute and are subject to certain limitations provided by law. You may have the right to:

• Request that we confirm whether we are holding, processing, or disclosing your personal data;
• Request access to your personal data;
• Request that we correct incomplete, inaccurate, or out-of-date personal data;
• Request that we anonymize, block, or delete unnecessary or excessive personal data or personal data processed in noncompliance with the provisions of the LGPD;
• Request that we delete personal data collected with your consent, unless there is another legal basis for our processing of such personal data;
• Request that we transfer your personal data to another product or service provider;
• Request information about how we have used your personal data and the third-party entities with which we have shared your personal data;
• Request information regarding the possibility of denying your consent to our processing of your personal data and about the consequences of such denial; and
• Request to revoke your consent to our collection of your personal data subject to legal or contractual restrictions and reasonable notice, however, our processing of your personal data provided pursuant to your previously expressed consent remains valid unless you request deletion of such personal data.

Submitting Requests to Exercise Your Rights under the LGPD. Subject to commercial and industrial secrets, you or your legal representative may submit a request to exercise your rights under the LGPD at any time by completing the web form available here, by calling our toll-free number: 1-800-257-7254, Option 4, or by sending us an email at privacy@tylertech.com that includes your full name, email address, and home address, and clearly indicates which right or rights under the LGPD you wish to exercise. The information collected through this process will be used only for responding to your request. You may also use any of the above methods to submit to our Privacy Team complaints or inquiries about our personal data collection and processing policies and practices.

We may, from time to time, process “personal information” of people who reside in Canada, which processing may be subject to the Personal Information Protection and Electronic Documents Act (“PIPEDA”).

Consent to Collect and Process. We only collect and process your personal information when we have a lawful basis for doing so. This lawful basis includes when you provide us with express consent, when consent is implied, or when we have a legal or contractual obligation to collect or process the information. By using the Tyler Platform or by providing us with your personal information by other means covered by this Privacy Statement, you have impliedly consented to our collection, use and disclosure of your personal information as explained in this Privacy Statement.

Submitting Requests to Withdraw Consent, or to Access, Correct, or Delete Your Personal Data. You may request to see, correct, or delete the personal information that we hold about you, or request to change or withdraw your consent to our collection and processing of your personal information. If you wish to request access to your personal information, or request that we correct or delete your personal information, or to change or withdraw your consent to our collection or processing of your personal information, please submit your request by completing the web form available here, by calling our toll-free number: 1-800-257-7254, Option 4, or by sending us an email at privacy@tylertech.com that includes your full name, email address, and home address, and clearly indicates you are changing or withdrawing your consent to our processing, or you are requesting access to, or correction or deletion of, your personal information pursuant to PIPEDA. The information collected through this process will be used only for responding to your request.

Please note that your right to access, correct, or delete the personal information that we hold about you is not absolute. There are instances where applicable law or regulatory requirements allow or require us to refuse your request. In addition, the personal information may have been destroyed, erased, or made anonymous in accordance with our record retention obligations and practices.

In the event that we cannot provide you with access to, or rectification or deletion of your personal information, we will endeavor to inform you of the reasons why, subject to any legal or regulatory restrictions.

Data Transfers. We may transfer the personal information we collect about you to countries other than the country in which the information was originally collected. Those countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your information to other countries, we will protect that information as described in this Privacy Statement.

Although Tyler does not have a corporate presence in the EU, EEA, or UK, we may, from time to time, process “personal data” of people who reside in the European Union, the European Economic Area (EEA), or the United Kingdom, which processing may be subject to the European Union’s General Data Protection Regulation (also called the “GDPR”) or the United Kingdom General Data Protection Regulation (also called the “UK-GDPR”), both hereinafter referred to as “GDPR”. “Personal data” is defined in the GDPR as “any information related to an identified or identifiable natural person,” and, for purposes of this Privacy Statement, references to “personal data” in this section include the categories of information set forth in the “Personal Data We Collect” section of the Tyler Privacy Statement - Controller, if applicable.

Legal Basis for Processing. We will only process your personal data if a sufficient basis for processing has been established. Those bases include:

• Consent: When you consent to the processing of your data for a specific purpose.
• Performance of a contract: Processing your data is necessary for the performance of a contract to which you are a party.
• Legal obligation: When the processing of your data is necessary for our compliance with a legal obligation.
• Vital interests of individuals: When the processing is necessary to protect your vital interests or those of another natural person.
• Public interest: When the processing is necessary for a public interest.
• Legitimate interest: Where processing is necessary for our own legitimate interests so long as those do not outweigh your interests or fundamental rights and freedoms.

Purposes for which we process data. Please see the sections titled “Why we use your Personal Data.”

Recipients of your personal data. Third parties which process your personal data on our behalf only do so in accordance with contractual obligations that instruct the data processor on how to process your data to meet our obligations as the controller.

Transfers of your data outside the EU, EEA or United Kingdom and suitable safeguards. Because Tyler is a United States based organization and the United States has not received a finding of “adequacy” from the European Union or the United Kingdom under Article 45 of the GDPR, Tyler only transfers your data to the United States with either your consent or our own compelling legitimate interest, in reliance on derogations for specific situations as set forth in article 49 of the GDPR, or in accordance with standard contractual clauses that impose contractual data protection requirements which the supervisory authority has deemed sufficient according to Article 46 of the GDPR.

Your rights with respect to your data. If you are a resident of the EU, EEA, or the United Kingdom, you have certain rights under applicable law, including the right to:

• Request that we provide you access to the personal data that we maintain about you;
• Request to correct, revise, or update any of the personal data we maintain about you;
• Request that we erase the personal data we maintain about you;
• Object to our processing of your personal data on the basis that the processing has a disproportionately detrimental impact on your interests, rights, and freedoms;
• Request that we restrict our processing activities related to your personal data;
• Withdraw your consent to our processing of your data at any time; however, such a withdrawal will not affect the lawfulness of our processing based on your consent prior to the withdrawal. Please note that where we rely on your consent in order to process your personal data and you then withdraw that consent, it may affect our provision of services to you, and may mean that we are unable to provide our services (either in part or in full) to you;
• Request to have your personal data reproduced in a structured, commonly used, and machine-readable format, whether or not such request relates to the transmission of the personal data to another party; and
• Require us to stop sending you marketing communications.

Note: We are obligated to verify the identity of each individual when they request to exercise one or more of their rights under the GDPR. We will respond to all requests without undue delay, but not later than the time frame required by the GDPR. If the request to exercise one of your rights is not manifestly unfounded or unduly excessive and we can verify your identity, we will acknowledge your request.

Our contact details. Residents of the EU, Iceland, Liechtenstein, Norway, or the United Kingdom may initiate any of the above requests, objections, or requirements by sending us an email at privacy@tylertech.com and writing “GDPR Request” in the subject line. You may also write to us at the postal address provided in the “Contact Us” section of the Tyler Privacy Statement – Controller.

Filing a complaint with the supervisory authority. You have the right to raise a concern about our collection and processing of your personal data with your local supervisory authority, available here (EU/EEA) or here (UK) and you may do so without prejudice to any other rights you may have.

We may, from time to time, process “personal data” of people who reside in India, which processing may be subject to the Digital Personal Data Protection Act, 2023 (together with implementing regulations, the “Act”). Capitalized but undefined terms in this Notice shall have the meaning attributed to them in the Act.

Language Accessibility. Residents of India have the option to access the contents of this Privacy Statement in any language specified in the Eighth Schedule to the Constitution of India and may request access by emailing us at privacy@tylertech.com.

Individual Rights under the Act: If your personal data is subject to the Act, you may have certain privacy rights with regard to that information; however, these rights are not absolute and are subject to certain limitations provided by law. You may have the right to:

• Request a summary of the personal data that we hold about you;
• Request the identities of other Data Fiduciaries and data processors with whom your personal data has been shared;
• Request a description of any of your personal data we have shared with other Data Fiduciaries and data processors;
• Request information related to our processing of your personal data;
• Request that we correct, complete, or update the information we hold about you; or
• Request that we erase your personal data.

Submitting Requests to Exercise Your Rights under the Act. You, or your Consent Manager, may submit a request to exercise your rights under the Act at any time by completing the web form available here, by calling our toll-free number: 1-800-257-7254, Option 4, or by sending us an email at privacy@tylertech.com that includes your full name, email address, home address, a clear and precise description of the personal data with regard to which you seek to exercise any of the above-mentioned rights, and clearly indicates which right or rights under the Act you wish to exercise. If you are requesting Tyler correct, complete, or update your personal data, please indicate the change to be made, and provide documentation supporting such change. You may also be required to provide documents establishing your identity or, where appropriate, documents that establish the authority of your Consent Manager, and any other item or document that facilitates locating your personal data. The information collected through this process will be used only for responding to your request.

Legitimate Use for Collection and Processing. We only collect and process your personal data when we have a legitimate use for doing so. This legitimate use includes when you provide us with express consent, when consent is implied, or when we have a legal or contractual obligation to collect or process your personal data. By using the Tyler Platform or by providing us with your personal data by other means covered by this Privacy Statement, you have impliedly consented to our collection, use, and disclosure of your personal data as explained in this Privacy Statement.

Your Privacy Choices. Depending on your interaction with Tyler and the Tyler Platform, and the personal data Tyler processes about you, you may be able to exercise certain privacy choices such as revoking consent for certain processing activities. You may be able to revoke consent by using functionality on your device or browser; directly within the Tyler Platform; by calling our toll-free number: 1-800-257-7254, Option 4; or by sending us an email at privacy@tylertech.com.

Data Transfers. We may transfer the personal information we collect about you to countries other than the country in which the information was originally collected. Those countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your information to other countries, we will protect that information as described in this Privacy Statement.

Our Contact Details. Residents of India may contact Tyler’s Data Privacy Officer with questions related to the processing of their personal data by sending us an email at privacy@tylertech.com. You may also write to us at the postal address provided in the “Contact Us” section of this Privacy Statement.

We may, from time to time, process “personal data” of people who reside in Mexico, which processing may be subject to the Federal Law on the Protection of Personal Data held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares) (together with implementing regulations, the “Law”).

Individual Rights under the Law: If your personal data is subject to the Law, you may have certain privacy rights with regard to that information; however, these rights are not absolute and are subject to certain limitations provided by law. You may have the right to:

• Request access to your personal data that we hold;
• Request that we correct inaccurate or incomplete personal data;
• Request that we cancel your personal data; and
• Object to our processing of your personal data;

Submitting Requests to Exercise Your Rights under the Law. You, or your legal representative, may submit a request to exercise your rights under the Law at any time by completing the web form available here, by calling our toll-free number: 1-800-257-7254, Option 4, or by sending us an email at privacy@tylertech.com that includes your full name, email address, and home address, a clear and precise description of the personal data with regard to which you seek to exercise any of the above-mentioned rights,and clearly indicates which right or rights under the Law you wish to exercise. If you are requesting that Tyler correct your personal data, please indicate the change to be made, and provide documentation supporting such change. You may also be required to provide documents establishing your identity or, where appropriate, documents that establish the authority of your legal representative, and any other item or document that facilitates locating your personal data. The information collected through this process will be used only for responding to your request.

Data Transfers. We may transfer the personal information we collect about you to countries other than the country in which the information was originally collected. Those countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your information to other countries, we will protect that information as described in this Privacy Statement.

We may, from time to time, process “personal information” of people who reside in the Philippines, which processing may be subject to the Philippines Data Privacy Act of 2012 (with implementing rules and regulations, the “DPA”).

Lawful Basis for Collection and Processing. We only collect and process your personal information when we have a lawful basis for doing so. This lawful basis includes when you provide us with consent, when we have a legal or contractual obligation to collect or process the information, or when necessary to fulfill a compelling legitimate interest in a manner that does not outweigh your rights and freedoms.

Individual Rights under the DPA. If your personal information is subject to the DPA, you may have certain privacy rights with regard to that information; however, these rights are not absolute and are subject to certain limitations provided by law. You may have the right to:

• Request that we confirm whether we have, are, or will be processing your personal information;
• Request that we provide you with information about any automated processing of your personal information for purposes of profiling or any processing of your personal information for purposes of direct marketing;
• Request that we provide you with access to your personal information, including:
  • The content of your personal information that we have processed;
  • The sources from which we obtained your personal information;
  • The manner by which your personal information was processed;
  • The reasons for our disclosure of your personal information to third parties, and the names and addresses of such third-party recipients;
  • Information about any automated processes applied to your personal information, to the extent such automated processes will or are likely to be used as the sole basis for any decision that could significantly affect you;
  • The date when your personal information was last accessed and modified; and
  • To the extent Tyler is the data processor of your personal information, the designation, name or identity and address of the controller of such personal information;
• Request that we correct personal information that is inaccurate or not up-to-date;
• Request that we provide you with a copy of your personal information in an electronic or structured format that is commonly used and allows for further use of such personal information by you;
• Request that we suspend, withdraw, or order the blocking, removal, or destruction of your personal information upon discovery and substantial proof that such personal information is incomplete, outdated, false, unlawfully obtained, used for unauthorized purposes or is no longer necessary for the purposes for which it was collected;
• Object to the processing of your personal information (including for purposes of direct marketing, automated processing, or profiling) or request to withdraw your consent for our collection or processing of your personal information; and
• Be indemnified for any damages sustained due to our processing of inaccurate, incomplete, outdated, false, or unlawfully obtained, or if we processed your personal information without proper authorization.

Submitting Requests to Exercise Your Rights under the DPA. You may submit a request to exercise your rights under the DPA at any time by completing the web form available here, by calling our toll-free number: 1-800-257-7254, Option 4, or by sending us an email at privacy@tylertech.com that includes your full name, email address, and home address, and clearly indicates which right or rights under the DPA you wish to exercise. The information collected through this process will be used only for responding to your request.

Philippines National Privacy Commission. You may file a complaint about our personal data collection and processing policies and practices with the Philippines National Privacy Commission (“NPC”) by following the NPC’s instructions, available here.

Here are some steps you can take to exercise your privacy rights or otherwise control your personal data:

• User Requests. You can contact us at any time with any privacy-related questions or concerns using our toll-free number: 1-800-257-7254, Option 4, or by email: privacy@tylertech.com. We will consider and respond to any such requests promptly and in accordance with applicable law.
• Geolocation Information. You can disable location-based services on your mobile device or web browser by adjusting the settings on your device or browser. This will prevent the Tyler Platform from accessing your Geolocation Information. Note that some Tyler services may not be available if you disable location-based services.
• Emails. You can unsubscribe or opt out from our marketing emails by clicking the “unsubscribe” link in the footer of any such email.
• Tyler Accounts. You can keep your contact information accurate and up to date by logging into your Tyler account on the Tyler Platform. If you wish to delete your Tyler account, you may do so by using the “delete account function.” Please note, if you use the “delete account function” this will only delete your Tyler account, not information for which Tyler Clients are a controller.
• Cookies and Similar Technologies. You can refuse to accept third-party cookies by following your browser or device instructions. If you do not accept cookies, you may experience some inconvenience in your use of the Tyler Platform.

If we collect your data as a processor on behalf of our Clients, we handle your personal data according to their directives. In this situation, only our Clients have the authority to process your inquiries or requests regarding your personal data, so please reach out to the applicable Client with which you interact. If we receive a request from you directly, as an end user of one of our Clients, or from a third party on your behalf, we will take reasonable measures to facilitate your request.