Privacy Notice

Introduction

TRIVERITY (hereinafter, "TRIVERITY" or "we," "us," or "our"), created this privacy notice (this "Privacy Notice") to demonstrate our firm commitment to the privacy and protection of your information. This notice covers how TRIVERITY manages information that may be used to identify you directly or indirectly ("Personal Information") that you submit, or that we collect and receive on our Website at www.TriVerity.com, together with any other Websites and applications (including but not limited to mobile applications) owned, operated, or controlled by us (referred to herein individually and collectively as the "Website"). We provide access to the Website and any online services (referred to herein, individually, and collectively, as the "Services") to you, subject to the following conditions and other agreed-upon terms related to the relevant Services. For the purposes of this Privacy Notice, TRIVERITY is a controller (i.e., responsible party) for the practices described in this Privacy Notice. Additionally, this Privacy Notice does not apply to the extent we process Personal Information in the role of a processor or service provider, as applicable, on behalf of our business customers. For information about the privacy practices of a TRIVERITY business customer (or its affiliates), please visit the respective business customer's website or contact the business customer directly. We are not responsible for the privacy or data security practices of our business customers, which may differ from those set forth in this Privacy Notice.

California Consumer Notice of Collection and Consumer Notice of Collection in US States with Comprehensive Privacy Laws (collectively, "States")

Privacy rights and consumer protections are not uniform across all jurisdictions. The rights described in this notice may vary depending on your state or place of residence, and not all rights apply to all individuals. We will honor applicable privacy rights in accordance with the laws governing your jurisdiction. This Notice of Collection is provided to all California and U.S. States' consumers subject to this Privacy Notice. You can access the specific topics, as follows, within this Privacy Notice:

• Information Collection
• Sources of Personal Information
• How We Use Your Personal Information
• Information Sharing and Disclosure
• How We Protect Your Personal Information
• Email Security
• Cookies and Other Tracking Technologies
• Linked Third-Party Sites
• Data Retention
• Payment Information
• Rights Related to Your Personal Information
• Children
• Privacy Notice Changes
• Contact Information

Categories of Personal Information Collected

The types of Personal Information that we may collect depend on which of our Services you are utilizing and how you interact with us. We may collect, or have collected in the preceding twelve months, the following categories, and specific types of Personal Information:

• Contact Information/Identifiers: name, email address, username, account identifiers
• Payment Information: payment card or billing information when you make a payment
• Internet or Network Activity: IP address, browser type, device information, and website interaction data (e.g., pages visited, session activity)
• Account Information: information related to accounts made available to you by a financial institution
• Information Received from Clients: personal information provided to us by financial institutions in connection with fraud prevention, collections, or account servicing

Sources of Personal Information

We may collect, or have collected in the preceding twelve months, your Personal Information in the following ways, in accordance with applicable law:

• Directly from you (e.g., when you log in, make a payment, or contact us)
• From your financial institution or service provider
• Automatically through your use of our website (e.g., cookies and similar technologies)

How We Use Personal Information

We may collect, or have collected in the preceding twelve months, your Personal Information for the following purposes:

• To provide and maintain our platform and services
• To process payments and transactions
• To support fraud detection, identity verification, and account servicing
• To maintain the security and integrity of our systems
• To comply with legal and regulatory obligations
• To analyze website usage and improve functionality (e.g., analytics)

Information Sharing and Disclosure

We may disclose, or in the past twelve months have disclosed, the Personal Information described above in the following limited circumstances for business purposes:

• Affiliated Companies and Financial Institutions. We may disclose Personal Information to companies that are affiliated with us (for example, companies that control, are controlled by, or are under common control with us). We may also disclose Personal Information that is collected between Websites/Services that we, or our affiliates, control. We may also disclose your Personal Information (including sensitive Personal Information) to our client financial institutions, where appropriate. The Personal Information shared with these financial institutions typically includes Personal Information to verify accounts, confirm transactions, and to coordinate and improve the Services provided to you.
• Organizations that Provide Services. We may disclose your Personal Information to companies that perform services for us, such as credit, product development, and data processing vendors. The information shared with these companies typically includes Personal Information to provide the Services, process transactions on your behalf, conduct our operations, follow your instructions as you authorize, and/or protect the security of our financial records. We may also disclose your Personal Information with third parties described below in the Cookies and Other Tracking Technologies section.
• Business Transactions. In the event that we go through a business transition, such as a merger, if another company acquires us or our affiliates, or we sell a portion of our assets, your Personal Information may be part of the assets transferred.
• Other Parties. We reserve the right to disclose your Personal Information to third parties to comply with a legal obligation; to protect the legal rights of (or otherwise participate in a legal process pertaining to) our company, our employees, our agents, our clients and our affiliates; to protect the safety and security of our visitors, or to protect against fraud; or otherwise with your consent or as allowed by applicable law.
• De-identified or Aggregate Information. We may aggregate and anonymize information you provide to us in such a way as to ensure it will no longer be identifiable to you. This data is generally not considered Personal Information and may be used for statistical, analytic, and administrative purposes, including analyzing our Website traffic and trends, tailoring our Services, or conducting product analysis. We may share anonymized or aggregated data at our discretion, in accordance with applicable laws.

We do not sell, rent, lease, or "share" (as the term is defined in applicable law) your Personal Information to third parties except if you consent to such disclosure or as described in this Privacy Notice.

How We Protect Your Personal Information

We have reasonable and appropriate technical and organizational measures in place to protect against the loss, misuse, and alteration of your Personal Information under our control. We have taken reasonable steps to confirm the Personal Information is retained in secure facilities and that reasonable measures have been implemented for protection from unauthorized access. The measures we use are designed to provide a level of security appropriate to the risk of processing your Personal Information. For instance, this Website utilizes the latest industry-standard encryption technology to protect Personal Information.

While we strive to use industry-standard means to protect your Personal Information, no method of transmission over the internet is 100% secure. We ask that you do your part by maintaining any usernames and passwords you use to access the internet or this Website as strictly confidential.

Email Security

TriVerity does not send marketing communications to consumers. Emails sent by TriVerity are operational or transactional in nature, such as communications related to accounts, payments, or required notices. If you have questions about an email you received from us or wish to update your contact preferences where permitted by law, please contact us using the information provided in the Contact Information section.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain session functionality (e.g., login authentication)
• Analyze website usage and performance
• Support security and fraud prevention

These technologies may collect information such as IP address, browser type, and pages visited.
We do not use cookies for cross-context behavioral advertising.

Linked Third-Party Sites

We may provide links to other third-party websites through the Services solely as a convenience to you. However, such linking does not mean, and should not be interpreted to mean, that TRIVERITY endorses is affiliated with or makes any representations concerning such third-party websites. TRIVERITY neither reviews, controls, nor is responsible for these third-party sites or any content therein. By using such links, you will leave the Website and will no longer be accessing the Services. If you decide to access any of the third-party sites linked to the Services, you do so entirely at your own risk. TRIVERITY shall not be liable for any consequences arising from use of any third-party websites to which the Services link.

Data Retention

How long we retain your Personal Information depends on the context in which, and purposes for which, we collected it. We generally retain Personal Information for as long as necessary for achieving the purposes for which it was collected or processed unless a different retention period is required by applicable law.

Payment Information

If you make a payment through our website, we collect and process payment-related information such as billing details and transaction information.

Payment information may be processed by third-party payment processors on our behalf. We do not store full payment card numbers unless necessary for transaction processing and security.

Payment information is used solely for processing transactions, fraud prevention, and legal compliance.

Rights Related to Your Personal Information

Depending on where you live and the types of Personal Information at issue, you may have certain rights with respect to your Personal Information. For example, under applicable state laws, including those in California, you may have the rights listed below. Please note that many of these rights are subject to exceptions and limitations. For example, certain laws generally do not apply to Personal Information that you provide to us while acting in your professional capacity. Certain personal information processed by TriVerity is subject to the federal Gramm-Leach-Bliley Act (“GLBA”) and its implementing regulations and may be exempt from, or not subject to, certain state privacy laws and related consumer rights. Accordingly, individuals submitting data subject requests should be aware that requests involving GLBA-regulated information may be limited, denied, or fulfilled differently, and TriVerity will evaluate and respond to such requests in accordance with applicable law.

• Right of access and data portability: You may have the right to request access to Personal Information we hold about you. Specifically, you may have the right to request access to information about the categories of Personal Information concerned and categories of recipients to whom the Personal Information has been or will be disclosed, and the sources from which we receive that Personal Information among other information. You also may have the right to receive this Personal Information, in a structured, commonly used, and machine-readable format so you can transmit this Personal Information to another entity.
• Right to correction: You may have the right to request that we correct or supplement any inaccurate or incomplete Personal Information we process about you.
• Right to deletion: You may have the right to request that we delete your Personal Information that we collected from you or as applicable anonymize your Personal Information.
• Right to opt-out of the sale or sharing of Personal Information: We do not currently, nor have we in the preceding 12 months, sold or shared (in this context, share means use of your Personal Information for cross-contextual behavioral advertising) your Personal Information. We also do not knowingly sell or share the Personal Information of individuals under the age of 16 or as required by other applicable law.
• Automated Processing: Under certain circumstances, you may have the right to object to a significant decision based solely on automated processing (i.e., without human intervention) unless that decision is required or permitted by law.
• Right of Non-Discrimination/Retaliation: We do not discriminate against individuals who exercise any of their rights described in this Privacy Notice, nor do we retaliate against individuals who exercise these rights.
• Right to opt-out of our Use of your Sensitive Personal Information (in certain instances and if permissible under applicable law). We do not disclose Sensitive Personal Information for purposes other than those which cannot be limited under applicable law.

If you choose to assert any of these rights available under applicable laws, we will respond within the time period prescribed by applicable law. Please note that many of the above rights are subject to exceptions and limitations. If we are not able to provide the requested information or make the change you requested, you will be provided with the reasons for such decisions. You may be entitled to lodge a complaint with your local data protection authority or your state Attorney General's Office.

Your rights and our responses may vary based on your state of residency. Please note that you may be located in a jurisdiction where we are not obligated, or are unable, to fulfill a request. In such a case, your request may not be fulfilled.

We may require use of your Personal Information to provide access to the Services. Therefore, when you exercise your deletion right, in particular, you may lose access to certain aspects of the Services that require your Personal Information.

Rights Request and Verification Process

Only you, or a person that you authorize to act on your behalf, may make a verifiable consumer request related to your Personal Information. If you designate an authorized agent to submit a request to exercise certain privacy rights on your behalf, we will require verification that you provided the authorized agent with permission to make a request on your behalf. Our verification processes may vary and, for example, could require your provision of a copy of the signed permission you have given to the authorized agent to submit the request on your behalf and verify your own identity directly with us.

Except where otherwise provided under applicable law, you may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request should:

• Provide sufficient information that allows us to reasonably verify that you are the person about whom we collected Personal Information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

Our verification process may also include a request for additional information to confirm your identity or your authorized agent's identity (such as your name, email address, and date of birth) or to obtain proof that you have given your authorized agent permission to act on your behalf. If our verification process is successful, we will respond to your request within the time and in the manner required by applicable law. If we cannot validate the identity of you and/or your authorized agent or obtain proof that you have given your authorized agent permission to act on your behalf, we will attempt to contact you to inform you.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm that the Personal Information relates to you. We will only use Personal Information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

We will deliver our written response by mail or electronically, at your option. However, if you do not select an option we generally will respond by email unless required by other applicable law. You still always have the option to request a written response that can be received by U.S. Mail. Any information we provide will only cover the 12-month period preceding the verifiable consumer request's receipt. For data portability requests, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the Personal Information from one entity to another entity without hindrance, such as by electronic mail communication. Further, if you would like to appeal any decision we make about your request, you may contact us as stated in the "Contact Information" section below.

To exercise these rights, please submit a verifiable consumer request to us by either:

Calling us at 1-800-377-1798
Completing the Data Subject Request Form

Children

Our Website/Services are not directed toward children under the age of thirteen, and we do not knowingly collect any Personal Information from children under the age of thirteen. If a child provided us with Personal Information, we ask that a parent or guardian send us a written request to the address listed below and we will promptly delete the child's Personal Information from our records.

Privacy Notice Changes

TRIVERITY is always improving our Website/Services and, as these evolve, we reserve the right to update or amend this Privacy Notice at any time for any reason.

You may learn of changes to this Privacy Notice by viewing the "Last Updated" date of this Privacy Notice. Any changes or modifications will be effective immediately upon posting the updated Privacy Notice and you acknowledge you will not receive specific notice of each change or modification. You are encouraged to periodically review this Privacy Notice to stay informed of the updates.

Contact Information

If you have any questions regarding this Privacy Notice, you may contact us via the channels provided below:

TriVerity
4950 Amon Carter Blvd.
Fort Worth, TX 76155

1-800-377-1798
Email: curservices@triverity.com

Last Update Effective: July 1, 2026