INTRODUCTION

This Privacy Notice for CoverPin, Inc. (doing business as CoverPin) (“we,” “us,” or “our”) describes how and why we may access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”), including when you:

• Visit our website at https://www.coverpin.com or any website of ours that links to this Privacy Notice

• Download and use our web or mobile applications (including app.coverpin.com) or any other application of ours that links to this Privacy Notice

• Use the CoverPin application, which is a comprehensive compliance management software platform extending beyond license and permit management

• Engage with us in other related ways, including sales, marketing, customer support, or events

Questions or concerns?

Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for determining how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you have questions or concerns, please contact us at privacy@coverpin.com.

SUMMARY OF KEY POINTS

This summary highlights key points from this Privacy Notice. You can find full details by reviewing the sections below.

• What personal information do we process?
  We may process personal information depending on how you interact with our Services, the choices you make, and the features you use.

• Do we process sensitive personal information?
  Yes, where permitted by law and with appropriate safeguards, including where you provide explicit consent.

• Do we collect information from third parties?
  No. We do not collect personal information from third parties except where you authorize integrations (e.g., social logins or APIs).

• How do we process your information?
  To provide, improve, and administer our Services; communicate with you; ensure security and fraud prevention; comply with legal obligations; and for other purposes with your consent.

• In what situations do we share personal information?
  We may share information with service providers, affiliates, business partners, or in connection with legal obligations or corporate transactions.

• How do we keep your information safe?
  Through appropriate organizational and technical safeguards, though no system can be guaranteed 100% secure.

• What are your rights?
  Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal information.

• How do you exercise your rights?
  By contacting us or submitting a data subject access request.

DATA PRIVACY FRAMEWORK NOTICE (EU-U.S., UK EXTENSION, AND SWISS-U.S.)

CoverPin, Inc. complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.

CoverPin, Inc. has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. DPF Principles with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF.

CoverPin, Inc. has also certified that it adheres to the Swiss-U.S. DPF Principles with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.

If there is any conflict between the terms in this Privacy Notice and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.

To learn more about the Data Privacy Framework (DPF) program and to view our certification, please visit:

https://www.dataprivacyframework.gov/

REGULATORY OVERSIGHT AND RECOURSE (DPF)

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, CoverPin, Inc. commits to cooperate and comply with:

• The panel established by the European Union Data Protection Authorities (DPAs)

• The UK Information Commissioner’s Office (ICO)

• The Swiss Federal Data Protection and Information Commissioner (FDPIC)

with respect to unresolved complaints regarding our handling of personal data received in reliance on the applicable DPF mechanisms.

This recourse mechanism is provided at no cost to the individual.

ENFORCEMENT AUTHORITY

CoverPin, Inc. is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).

BINDING ARBITRATION

Under certain conditions, individuals may invoke binding arbitration for complaints regarding CoverPin’s compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF.

CoverPin, Inc. is obligated to arbitrate claims and follow the terms set forth in Annex I of the Data Privacy Framework Principles, provided that an individual has delivered notice to CoverPin and followed the procedures and conditions set forth in Annex I.

TABLE OF CONTENTS

1. What Information Do We Collect?

2. How Do We Process Your Information?

3. What Legal Bases Do We Rely On?

4. When and With Whom Do We Share Personal Information?

5. Cookies and Tracking Technologies

6. Artificial Intelligence-Based Products

7. Social Logins

8. Data Retention

9. Data Security

10. Information From Minors

11. Privacy Rights

12. Do-Not-Track Controls

13. U.S. State Privacy Rights

14. Other Regional Privacy Rights

15. Updates to This Notice

16. Contact Information

17. Review, Update, or Delete Your Data

1. WHAT INFORMATION DO WE COLLECT?

Personal Information You Disclose to Us

We collect personal information that you voluntarily provide, including:

• Names

• Email addresses

• Phone numbers

• Job titles

• Usernames and passwords

• Mailing addresses

Sensitive Personal Information

Where permitted by law and with appropriate safeguards, we may process:

• Financial data

• Government identifiers (e.g., Social Security numbers)

Application and Device Data

Including device identifiers, IP addresses, operating system information, usage data, and push notification preferences.

Automatically Collected Information

Including log and usage data, browser characteristics, device information, and analytics data collected through cookies and similar technologies.

2. HOW DO WE PROCESS YOUR INFORMATION?

We process personal information to:

• Provide and administer our Services

• Authenticate accounts

• Communicate with users

• Maintain security and prevent fraud

• Comply with legal obligations

• Protect vital interests

• Improve and develop our platform

3. WHAT LEGAL BASES DO WE RELY ON?

Depending on jurisdiction, we rely on:

• Consent

• Contractual necessity

• Legal obligations

• Vital interests

• Legitimate business interests

4. WHEN AND WITH WHOM DO WE SHARE PERSONAL INFORMATION?

We may share personal information with:

• Service providers and subprocessors

• Affiliates

• Business partners

• Authorities where legally required

• Parties involved in corporate transactions

CoverPin remains responsible for personal data transferred to third parties and ensures contractual protections are in place.

5. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies for functionality, security, analytics, and advertising. You may manage preferences through your browser or our Cookie Notice.

6. ARTIFICIAL INTELLIGENCE-BASED PRODUCTS

We offer AI-powered features using trusted third-party providers. Personal data processed through AI features is handled in accordance with this Privacy Notice and applicable agreements.

7. SOCIAL LOGINS

If you log in via third-party platforms, we receive limited profile information as authorized by you.

8. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain personal information only as long as necessary for the purposes described, and no longer than three (3) months following account termination unless legally required.

9. HOW DO WE KEEP YOUR INFORMATION SAFE?

We implement appropriate technical and organizational security measures but cannot guarantee absolute security.

10. DO WE COLLECT INFORMATION FROM MINORS?

No. We do not knowingly collect data from individuals under 18.

11. WHAT ARE YOUR PRIVACY RIGHTS?

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal data.

12. DO-NOT-TRACK CONTROLS

We do not currently respond to Do-Not-Track signals.

13. U.S. STATE PRIVACY RIGHTS

Residents of certain U.S. states may have additional rights regarding their personal information.

14. OTHER REGIONAL PRIVACY RIGHTS

Individuals in the EEA, UK, Switzerland, and Canada may lodge complaints with relevant supervisory authorities.

15. UPDATES TO THIS NOTICE

We may update this Privacy Notice periodically.

16. HOW CAN YOU CONTACT US?

Email: privacy@coverpin.com

Address:  CoverPin Inc 1207 Delaware Ave, Suite 130  Wilmington, DE 19806  United States

17. HOW CAN YOU REVIEW, UPDATE, OR DELETE YOUR DATA?

You may access and manage your account settings or contact us directly to exercise your rights.