Effective date: June 23, 2026

This Privacy Policy explains how Tri-Source Group LLC, a Florida limited liability company, doing business as Pinrates (“Pinrates,” “we,” “us,” or “our”), collects, uses, and shares information in connection with the Pinrates website and the Pinrates compliance decision-support platform available at pinrates.com and app.pinrates.com (collectively, the “Service”).

Pinrates is a business-to-business software service. Much of the information we process is supplied by our business customers about their own operations and transactions. Where we process such information on a customer’s behalf, we act as that customer’s service provider, and our handling is governed by our agreement with that customer in addition to this Policy.

1. Information we collect

Account and business information. When you or your organization register, we collect business name, contact name, work email, phone number, role, and billing details.

Contact information, including mobile numbers. If you opt in to text messaging, we collect the mobile number you provide and your consent record. See Section 4.

Customer Data. In the course of providing the Service, we process data that our business customers submit or connect — for example, order, shipment, registration, licensing, and tax/compliance data, which may include personal information about the customer’s own end customers. We process Customer Data on behalf of and under the instructions of the business customer.

Usage and device data. We collect log data, IP address, browser/device information, and product usage events, including through cookies and similar technologies, to operate and secure the Service.

2. How we use information

We use information to: provide, maintain, and improve the Service; authenticate users and secure accounts; process transactions and compliance decisions requested by our customers; send service, security, and transactional communications (including text messages you have consented to); provide support; comply with legal obligations; and detect and prevent fraud or misuse.

3. Cookies

We use strictly necessary cookies to operate the Service and may use analytics cookies to understand usage. You can control cookies through your browser settings; disabling some cookies may affect functionality.

4. Text messaging (SMS/MMS)

If you provide your mobile number and opt in, Pinrates sends transactional and account-related text messages — for example, tax-filing and compliance approval requests, confirmations, and account notifications. Message frequency varies based on your account activity. Message and data rates may apply. Reply STOP to opt out at any time, or HELP for help.

See our SMS terms and consent details for the full description of the messaging program.

5. How we share information

We share information only as described here:

• Service providers (sub-processors). We share information with vendors that provide infrastructure, messaging, email delivery, payment processing, and compliance/fulfillment integrations on our behalf, under contracts that limit their use of the information to providing services to us. Categories include cloud hosting and database, SMS/messaging, transactional email, payment processing, and regulatory/compliance and shipping integrations.
• At our customers’ direction. Where we process Customer Data as a service provider, we share it as directed by the customer (for example, with the regulatory or fulfillment systems they have connected).
• Affiliated brands. We may share information among Tri-Source Group LLC and its brands (MineralGraph, SpotUs, and Verification) that provide shared infrastructure, security, and administrative services, under the same confidentiality and use limitations described in this Policy. This does not include sharing your mobile number or messaging consent for any affiliate’s marketing.
• Legal and safety. We may disclose information to comply with law, enforce our agreements, or protect the rights, safety, and security of Pinrates, our customers, or others.
• Business transfers. See Section 12.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

6. Data retention

We retain information for as long as needed to provide the Service, comply with our legal and recordkeeping obligations (including compliance and tax-related records), resolve disputes, and enforce our agreements. Customer Data is retained and deleted in accordance with our customer agreements.

7. Security

We maintain administrative, technical, and organizational safeguards designed to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to appeal a decision about a request. California residents have rights under the CCPA/CPRA, including the right to know, delete, and correct, and the right to opt out of sale or sharing — and as stated above, we do not sell or share personal information. To exercise any right, contact us at privacy@pinrates.com. We will not discriminate against you for exercising your rights. Where we process Customer Data on behalf of a business customer, please direct your request to that business, and we will assist them as their service provider.

9. Data location

The Service is operated in the United States. If you access it from outside the U.S., you understand your information will be processed in the U.S.

10. Children’s privacy

The Service is intended for businesses and is not directed to individuals under 18, and we do not knowingly collect their personal information.

11. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new effective date and, where appropriate, provide additional notice.

12. Business transfers and entity changes

Pinrates operates as a registered fictitious name (DBA) of Tri-Source Group LLC, a Florida limited liability company. We may reorganize the Pinrates business, including by transferring it among affiliated entities or to a newly formed entity. In connection with any such reorganization, merger, acquisition, financing, or sale of assets, information covered by this Policy may be transferred to the successor or acquiring entity, which will continue to be bound by this Policy or a policy at least as protective. We will provide notice of any material change in the controlling entity.

13. Contact us

Email: privacy@pinrates.com