Security

Online Policy

Definition

“Cookies” are pieces of information that our Website can obtain from your computer when you access our Website and that are stored on your computer. For purposes of this Policy, Cookies could also mean other computer-stored files such as Flash Objects used to secure our Website. Our Website will access the Cookies that it stores on your computer whenever you visit our Website.

“Customer Information” means personal and non-personal information that we obtain from and about you through Cookies or from information that you voluntarily submit to us electronically, either by email or by accessing our Online Banking section.

“Website” shall mean the group of World Wide Web pages owned, maintained, licensed or otherwise controlled by TruPoint Bank, generally containing a homepage, hyperlinks to other pages, and usually located on the same computer-based server.

Generally

TruPoint Bank can better serve you through this Website when you provide us with information. You can do this in one of two different ways. You can register to use our Online Banking section or you can contact us by email.

Anonymous Access

You can browse our Website without us knowing anything about you by not providing information to us and by disabling or deleting the Cookies on your web browser.

Cookies

TruPoint Bank or our third party partners may install Cookies or similar files on your computer for the purpose of insuring secured access to our Online Banking sections, facilitating navigation around our Website, and to personalize your Website experience. Our Cookies do not contain any personal information unless it is encrypted, and we do not track your visits to other websites. Cookies contain technical and navigational information such as the type of computer and web browser you use, how long you view our Website, and the pages of our Website you visit. We do use Cookies in the Online Banking section of the Website to store our SiteKey information that allows us to recognize your computer without having to answer challenge questions. However, this information is encrypted and is used solely for our Online Banking section. Cookies may also be used to advertise its products and services on the Website in the form of banner ads, splash ads, and other formats. We may use information about your relationship with us, such as what types of accounts you have.

User Provided Information

We can also obtain private information about you when you voluntarily provide it to us through the Online Banking section or by email. This information could include your name, address, telephone number, email address, and account numbers.

Transaction Information

The Bank and our third party partners obtain and store information about your online transactions through our Online Banking section. This includes information about your accounts with the Bank, bill payments, and transfers.

Information Sharing

TruPoint Bank may share Customer Information we collect from you with third party companies that work for us called Non-Affiliated Companies. Non-Affiliated Companies act on our behalf and receive Customer Information from us, but they are contractually obligated to keep the Customer Information confidential and to use it only to provide the services that we request. Non-Affiliated Companies may include financial service providers such as payment processing companies, and non-financial companies such as check printing and data processing companies. We also may disclose Customer Information to credit bureaus and similar organizations and when required or permitted by law, such as in response to a subpoena or similar legal process, a fraud investigation, and risk management and security activities. Your Customer Information may also be disclosed in connection with the sale of your account to another financial institution. The Bank may also share Customer Information to other parties that you may authorize and direct. For more information on how TruPoint Bank shares your Customer Information, please see the TruPoint Bank Notice of Financial Privacy Rights.

Aggregation Sites

Aggregators are companies with websites that are designed to allow you to consolidate account information from several sources to be viewed on one site. To do this, an aggregator may request access to your personal financial information. You should ensure that any aggregator with whom you deal has appropriate policies to protect your privacy and security. If you provide information about your TruPoint Bank accounts to an aggregator, this means that you authorize us to honor all transactions initiated by the aggregator, whether or not you are aware of a specific transaction. If you decide to revoke the authority you have given an aggregator, you should immediately change your TruPoint Bank password in order to restrict access to your account.

Links to Other Sites

Our Website provides hyperlinks to other companies with whom TruPoint Bank has no direct relationship. When you click on these hyperlinks, you will be advised that you are leaving our Website, and we are not responsible for the privacy or security of these sites, including the accuracy, completeness, reliability or suitability of their information. If you are asked to provide information on one of these websites we strongly urge you to carefully study their privacy policies before sharing your information.

Financial Privacy Rights for Customers

In addition to the protections you enjoy under this Online Privacy Policy, the TruPoint Bank Notice of Financial Privacy Rights may also cover your online activities. This Notice explains our collection, use, disclosure, retention and security of information and applies to TruPoint Bank products and services offered within the United States for consumer purposes.

Amendments

Changes may be periodically made to this Online Privacy Policy without prior notice.

SECURITY STATEMENT

Definition

“Website” shall mean the group of World Wide Web pages owned, maintained, licensed or otherwise controlled by TruPoint Bank, generally containing a homepage, hyperlinks to other pages, and usually located on the same computer-based server.

Generally

This Website brings together a combination of industry-approved security technologies to protect data for TruPoint Bank (“Bank” or “us” or “we”) and for you. It features a password-controlled system entry, a VeriSign-issued Digital ID for the Bank's server, Secure Sockets Layer (“SSL”) protocol for data encryption, and a router loaded with firewall software to regulate the inflow and outflow of server traffic. Using these technologies, your internet banking transactions are believed to be as secure as current technology allows.

Secure Access and Verifying User Authenticity

To begin a session with the Bank's server, the user must key in a Log-in ID and a password. Our Website uses a "3 strikes and you're out" lock-out mechanism to deter users from repeated login attempts. After three unsuccessful login attempts, the Website locks the user out. Customers may utilize the "forgot your password" link or contact the Bank for a password reset. Upon successful login, the Digital ID from VeriSign, who are the experts in digital identification certificates, authenticates the user's identity and establishes a secure session with that visitor.

Secure Data Transfer

Once the server session is established, the user and the server are in a secured environment. Because the server has been certified as a 128-bit secure server by VeriSign, data traveling between the user and the server is encrypted with Secure Sockets Layer (SSL) protocol. With SSL, data that travels between the Bank and the user is encrypted and can only be decrypted with the public and private key pair. In short, the Bank's server issues a public key to the user's browser and creates a temporary private key. These two keys are the only combination possible for that session. When the session is complete, the keys expire and the whole process starts over when a new user makes a server session.

Router and Firewall

Requests must filter through a router and firewall before they are permitted to reach the server. A router, which is a piece of hardware, works in conjunction with the firewall, which is a piece of software, to block and direct traffic coming to the server. The configuration begins by disallowing ALL traffic and then opens holes only when necessary to process acceptable data requests, such as retrieving web pages or sending customer requests to the Bank.

Email & Text Message Fraud

Email can be used maliciously by sending computer viruses, offering inaccurate information in a way that appears accurate, requesting a person to provide information to a false website. These emails can even be sent by known friends or forwarded to you with good intention, which makes them appear even more legitimate. You should only access the Bank’s Website by entering “trupointbank.com” in your web browser and not by clicking on a hyperlink in an email. Otherwise, you could be directed to a site that may look like the Bank’s Website but is controlled by criminals seeking to steal your personal information such as login name, passwords and social security numbers. If you receive an email warning that a new computer virus is circulating, check the website of any one anti-virus software company for validation. Please report any suspicious email or text message that uses TruPoint Bank's name to us by calling 276-935-8161 and forwarding the email or text message to ReportFraud@TruPointBank.com.

Amendments

You should review this Security Statement often because we may change it at any time without notice.