Privacy Policy
Last updated: August 13, 2026
1. Scope and Who We Are
CISARKANSAS PAY (the "Service") is operated by T Smith Consulting ("we," "us") to support court fines, fees, and other payments for participating Arkansas county government offices (each, a "County"). This notice explains how the Service handles information when members of the public search for a County account, make a payment, receive receipts or reminders, and when authorized County staff use the Service's administrative features.
The responsible County maintains the underlying account and case records. The Service creates and processes additional records needed to operate the payment portal and support County payment operations.
2. Information We Handle
Information used to locate an account. This may include the last name, date of birth, case number, or other search information you provide. The Service may retrieve and display County-held information such as an account identifier, name, address, case number, balance, charge details, transaction history, and pending-payment information so the account can be identified.
Payment and financial information. We may create or receive records containing names, account or transaction identifiers, County, payment description, amount and fees, status, dates, refunds and disputes, payout and reconciliation details, receipt information, card brand and last four digits, and payment-provider identifiers.
Contact and communication information. When a receipt or County-authorized notice is sent, records may include an email address or phone number, message or receipt content, delivery status, provider response, and delivery error information.
Provider, technical, and staff information. The Service may retain payment-provider event and object records. Its servers, hosting, and monitoring systems may also process an IP address, request path, browser or device information, timestamps, diagnostic information, and security events. Staff-related records may include login identifiers, County and role assignments, authentication and multi-factor security information, and selected audit events.
3. How We Use Information
We use information to:
- locate and verify accounts and show relevant County information;
- process and reconcile payments, refunds and disputes, transfers, and payouts;
- send receipts and County-authorized email or text reminders;
- provide support and investigate payment or delivery problems;
- prevent fraud, misuse, and security incidents;
- administer, audit, monitor, and troubleshoot the Service; and
- meet financial, court, public-record, and other legal obligations.
4. Online Payment Card Information
For online card payments, your complete card number, expiration date, and security code are entered on a checkout page hosted and operated by Stripe. Those complete card credentials are never entered into or stored by this portal.
We send Stripe the transaction and account metadata needed to process and identify the payment. Stripe returns transaction information that may include an email address, billing or cardholder details, card brand and last four digits, payment-method attributes, receipt links, status, and provider identifiers. The Service may retain related Stripe event and object records for payment operations, reconciliation, support, security, and recordkeeping.
5. When Information Is Disclosed
We do not sell personal information or use it for targeted advertising. We disclose information as needed to operate the Service, complete County payment functions, and meet legal obligations, including to:
- The responsible County — receives payment and receipt information and uses account, case, and contact records for County operations.
- Stripe — receives checkout, transaction, and account information needed to process, identify, settle, refund, and support payments.
- SendGrid — receives recipient addresses and message content needed to deliver receipts and County-authorized email notices.
- Twilio — receives phone numbers and message content needed to deliver County-authorized text notices where enabled.
- Microsoft Azure — hosts the Service, databases, and supporting monitoring and operational systems.
We may also disclose information to comply with law, legal process, court or government requests, audit and public-record obligations, or to protect people, the Service, Counties, and payment operations from fraud, misuse, or security threats.
6. Receipts and County Notices
We attempt to email a receipt to the address supplied through checkout. A receipt may also be copied to the County office configured to receive it. A receipt may include the payer or account name, County, account or case reference, amounts, transaction identifiers, and card brand with the last four digits. Electronic delivery can fail, so contact the County or our support address if a receipt does not arrive.
A County may direct the Service to send email or text reminders using contact information in County records. The Service does not currently process automatic reply keywords for text-message opt-out requests. To stop reminders or correct contact information, contact the County office responsible for the account.
7. Cookies and Similar Technologies
The Service uses essential cookies and session mechanisms for functions such as form security, session continuity, and staff sign-in. Their duration depends on the applicable browser, session, authentication, and security settings. The current public pages do not use advertising cookies, analytics cookies, or third-party browser-tracking scripts.
8. How Long We Keep Information
Different records serve different purposes, so no single retention period applies to all information:
- County account and court records are governed by the responsible County's instructions, applicable County records schedules, and legal requirements. Some records may require long-term or permanent retention.
- Payment and financial records are retained as needed to process and reconcile payments, manage refunds, audits, reporting, disputes and chargebacks, and meet financial, court, public-record, and other legal duties.
- Receipts, reminders, provider records, and support information are retained as needed to deliver or document the service, troubleshoot problems, prevent misuse, and meet audit or legal obligations.
- Security, audit, and technical information is retained as needed to operate, protect, investigate, and diagnose the Service and meet applicable compliance obligations.
- Temporary browser and session information is generally shorter-lived and controlled by the relevant browser, session, authentication, or security setting.
A legal hold, subpoena, investigation, audit, dispute, chargeback, security incident, public-record requirement, or other preservation duty may require longer retention. Records are disposed of only when permitted by the applicable records schedule, County instruction, and law. Service providers retain information under their contracts, legal duties, and privacy or retention practices.
Because complete online card credentials are not retained by this portal, the portal's retention periods do not apply to those credentials.
9. Security
We use administrative, technical, and organizational safeguards designed to protect information. These include encrypted web connections, role-based access controls, multi-factor authentication for protected administrative areas, and logging of selected administrative and security events. Online card credentials are handled on Stripe-hosted Checkout instead of this portal.
No system can guarantee absolute security. Please contact us promptly if you believe information associated with the Service has been misused.
10. Your Choices and Requests
Contact the County responsible for an account or case to ask about access, correction, payment history, contact preferences, or other County-held information. You may also contact us using the address below, and we will help route the request when appropriate. Depending on the request, we or the County may need to verify your identity.
Correction or deletion may not be available where information must be retained for court, financial, audit, security, public-record, or other legal purposes.
11. Changes to This Notice
We may update this notice when the Service or its information practices change. The "Last updated" date at the top identifies the current version.
12. Contact
For questions about this notice, the Service, or a payment, email support@tsmithconsulting.co. For questions about an account, case, balance, or County record, contact the County office responsible for that record.