Privacy Policy

This privacy notice for Triad Secure Inc. ("Company," "we," "us," or "our"), describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you:

• Visit our website at www.triadsecure.com, or any website of ours that links to this privacy notice
• Use our cybersecurity SaaS platform, including vulnerability scanning, threat monitoring, and reporting tools
• Engage with us in other related ways ― including any advisory meetings, mentor sessions, sales, marketing, or events such as webinars

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at info@triadsecure.com

SUMMARY OF KEY POINTS

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with Triad Secure Inc. and the Services, the choices you make, and the products and features you use.

We may process sensitive personal information when necessary with your consent or as otherwise permitted by applicable law. This personal information is largely limited to your name, contact information (such as your email address and phone number), payment information, and information related to our Services.

We may receive information from public databases, marketing partners, social media platforms, and other outside sources.

We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so.

We may share information in specific situations and with specific categories of third parties.

We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.

The easiest way to exercise your rights is by sending a data subject request to info@triadsecure.com. We will consider and act upon any request in accordance with applicable data protection laws.

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT?
2. HOW DO WE PROCESS YOUR INFORMATION?
3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
4. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?
5. HOW LONG DO WE KEEP YOUR INFORMATION?
6. HOW DO WE KEEP YOUR INFORMATION SAFE?
7. DO WE COLLECT INFORMATION FROM MINORS?
8. WHAT ARE YOUR PRIVACY RIGHTS?
9. CONTROLS FOR DO-NOT-TRACK FEATURES
10. Triad Secure Inc. AND STATE LAWS
11. DO WE MAKE UPDATES TO THIS NOTICE?
12. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
13. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

We collect personal information that you voluntarily provide to us when you express an interest in our Services, such as learning about us or our Services.

Personal Information Provided by You

The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

• Your first and last name
• Your email address
• Your phone number

Payment Data

We may collect data necessary to process your payment if you make purchases, such as your payment instrument number (such as a credit card number), and the security code associated with your payment instrument. All payment data is stored by Stripe, Inc. You may find their privacy notice link(s) here: https://stripe.com/privacy. Stripe also covers instances where financing through Affirm or Klarna is used.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information. We do not store full payment details on our servers; all processing complies with PCI DSS standards.

Information Automatically Collected

We automatically collect certain information when you visit, use, or navigate our Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information.

The information we may collect includes:

• Log and Usage Data. Service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services
• Device Data. Information about your computer, phone, tablet, or other device you use to access the Services
• Location Data. Information about your device's location, which can be either precise or imprecise

2. HOW DO WE PROCESS YOUR INFORMATION?

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To facilitate account creation and authentication and otherwise manage user accounts
• To deliver and facilitate delivery of Services to the user
• To respond to user inquiries/offer support to users
• To send administrative information to you
• To fulfill and manage your orders
• To enable user-to-user communications
• To request feedback
• To send you marketing and promotional communications
• To protect our Services
• To identify usage trends
• To determine the effectiveness of our marketing and promotional campaigns
• To save or protect an individual's vital interest

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We may share your data with third-party vendors, service providers, contractors, or agents ("third parties") who perform services for us or on our behalf and require access to such information to do that work. We have contracts in place with our third parties, which are designed to help safeguard your personal information.

The categories of third parties we may share personal information with include:

• Cloud Computing Services
• Communication & Collaboration Tools
• Data Analytics Services
• Data Storage Service Providers
• Finance & Accounting Tools
• Government Entities
• Payment Processors
• Performance Monitoring Tools
• Website Hosting Service Providers

We also may need to share your personal information in the following situations:

• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition
• Business Partners. We may share your information with our business partners to offer you certain products, services, or promotions

4. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

We operate and may process information in multiple jurisdictions, service providers, and other third parties may be located or process information outside of the jurisdiction in which you reside. The data protection and other laws of the United States might differ from your jurisdiction.

To the extent information including information from the EU and EEA is transferred outside of those jurisdictions by your use of the Services, we will adopt standard contractual clauses or other means pertaining to data protection approved in your country or region.

5. HOW LONG DO WE KEEP YOUR INFORMATION?

We will only keep your information for as long as it is necessary to provide you with Services or for other purposes as described in this privacy notice, unless a longer retention period is required or permitted by law. We retain information for as long as necessary for the purposes described (e.g., up to 7 years for billing/security records to meet legal requirements), or longer if required by law. Account data is retained until deletion requested or account inactive for 2 years.

When we have no ongoing legitimate business need to process your information, we will either delete or anonymize such information, or, if this is not possible, then we will securely store your information and isolate it from any further processing until deletion is possible.

6. HOW DO WE KEEP YOUR INFORMATION SAFE?

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. You should only access the Services within a secure environment.

7. DO WE COLLECT INFORMATION FROM MINORS?

We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at info@triadsecure.com.

8. WHAT ARE YOUR PRIVACY RIGHTS?

We strive to provide you with the ability to access, review, correct, update, suppress, or otherwise limit our use of the information you have previously provided directly to us, including:

• Via Your Account Settings. If you have registered with our Services, you may have the ability to access and use certain features and functionality
• Via Email/Mail. You may also contact us by email using the contact information below

Additionally, you may opt-out of:

• Electronic Communications From Us. You may opt-out of receiving marketing-related emails using the opt-out mechanism in each email
• SMS messaging. You may terminate SMS messaging by replying "STOP"
• Third Party Marketing Purposes. You may request that we do not disclose your information with third parties for their direct marketing purposes

9. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

10. TRIAD SECURE INC. AND STATE LAWS

California Residents

Under the California Consumer Privacy Act as amended by the California Privacy Rights Act (the "CCPA"), California residents have additional rights:

• Right to request deletion of your information
• Right to correction of inaccurate information
• Right to know/access the categories of information we collect
• Right to know the categories of information disclosed for a business purpose

You may make these requests by contacting us at info@triadsecure.com or by calling 602-825-3129 during regular business hours in Mountain Standard Time.

Virginia, Colorado, Connecticut or Utah Residents

As residents of the above-named states, you also have rights under each of the following laws:

• The Virginia Consumer Data Privacy Act
• The Colorado Data Privacy Act
• The Connecticut Act Concerning Personal Data Privacy and Online Monitoring
• The Utah Consumer Privacy Act

11. DO WE MAKE UPDATES TO THIS NOTICE?

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Revised" date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

12. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may contact us by email at info@triadsecure.com.

13. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it in some circumstances. To request to review, update, or delete your personal information, please email us at info@triadsecure.com.