Visa CLI Consumer Privacy Notice

Last Updated: March 25, 2026

Visa Inc. and its Affiliates and subsidiaries (collectively, "Visa," "we," "us," or "our") are a global payments technology company that enables fast, secure, and reliable electronic payments across more than 200 countries and territories. Visa CLI (Command Line Interface) is offered by Visa Inc. and Affiliates.

The Visa CLI Consumer Privacy Notice ("Notice") is intended to provide you with the information required under the Gramm-Leach-Bliley Act (GLBA) and its implementing regulations, and applies to consumers who enroll in, and use, Visa CLI services in the United States for their own personal, family, or household purposes. This Notice describes how we collect, use, share, and protect personal information in connection with your use of Visa CLI. For additional information about how Visa processes personal information across its products and services, including more detailed information about your privacy rights and choices, please visit the Visa Global Privacy Notice.

What does Visa CLI do with your personal information?

Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some, but not all, sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this Notice carefully to understand what we do.

The types of personal information we collect and share depend on how you use Visa CLI. This information can include:

• Name and contact details (e.g., email address, billing address)
• Payment card information (e.g., tokenized card credentials, card ID, last four digits of PAN, expiration date)
• Transaction details (e.g., amount, merchant name, transaction ID, past CLI transactions and receipts)
• Device and session information (e.g., GitHub username, IP address, session tokens)
• User prompts (e.g., requests made through the CLI interface)
• Derived or inferred information (e.g., insights generated about your usage for security, fraud prevention, and analytics purposes)

How does Visa CLI collect your information:

• Directly from you when you provide card credentials and billing information, or other personal information during enrollment in Visa CLI;
• From your GitHub account when you authenticate using GitHub OAuth;
• From your transactions and instructions submitted through your user prompts when you use Visa CLI to make payments.

Reasons we use and share your personal information:

We may use and share your personal information for our everyday business purposes, such as to verify and process your transactions, maintain your account(s) and manage access, conduct security auditing and abuse detection, perform product analytics and debugging, enable reconciliation of funds, comply with applicable laws (including anti-money laundering requirements, fraud prevention, sanctions, screening, etc.), respond to court orders and legal investigations, and for other purposes related to the operation of Visa CLI and as otherwise required or permitted by law. For these purposes, we may share your information with Service Providers and Affiliates who help us operate Visa CLI, including payment processors, tokenization and vault providers, and secure cloud infrastructure platforms. You cannot opt out of this type of sharing, as it is integral to providing the Visa CLI service to you.

We may also process your personal information for our own Visa marketing purposes to offer our products and services to you, and for joint marketing with other financial companies.

We do not share your personal information for our Affiliates' everyday business purposes regarding your creditworthiness.

We also do not share your personal information for Affiliate and Nonaffiliate (third party) marketing purposes.

Why can't I limit all sharing?

Federal law gives you the right to limit: (1) sharing information about your creditworthiness with Affiliates for their everyday business purposes; (2) Affiliates using your information to market to you; and (3) sharing your information with Nonaffiliates to market to you, none of which are applicable to the Visa CLI service as we do not engage in these activities.

State laws (California, Vermont) and individual companies may give you additional rights to limit sharing. However, you cannot opt out of required sharing with Service Providers and Affiliates to service your accounts, process your transactions, or fulfill legal and compliance obligations, as those activities are necessary for the provision and delivery of the Visa CLI service.

Information Security and Data Retention

We use physical, technical, organizational, and administrative safeguards to help protect your personal information from unauthorized access or loss, in accordance with industry requirements and applicable law. Service Providers we engage to process your personal information on our behalf must act on the basis of our written instructions, and are required to implement appropriate technical and organizational measures to ensure the security of your personal information. Your payment card credentials are tokenized and stored in a PCI DSS compliant vault operated by our Service Provider, Very Good Security ("VGS").

Visa and/or our Service Providers may retain your information as needed for the purposes listed in this Notice, and in accordance with applicable law.

Definitions

• Affiliates are companies related by common ownership or control. They can be financial and nonfinancial companies. Cybersource is a Visa Affiliate for payment acceptance, gateway, and processing services.
• Nonaffiliates are companies not related by common ownership or control. They can be financial and nonfinancial companies, and referred as third parties. For the avoidance of doubt, this definition is not inclusive of Service Providers.
• Service Providers are companies that perform services on our behalf, including payment processing, data hosting, and security services. Service Providers with whom we share information include VGS (card tokenization and vault services), ClickHouse (analytics and telemetry), and Railway (server and cloud provider). Visa reserves the right to update this list of Service Providers.