Privacy Policy

Mainlynk, Inc. ("Mainlynk," "we," "us," or "our") operates a governed institutional network platform for community banks, credit unions, and specialty lenders. This Privacy Policy describes how we collect, use, disclose, and protect information when you visit our website at mainlynk.com (the "Site") or interact with our platform services (collectively, the "Services").

Mainlynk is not a lender, broker, or loan originator. We do not collect or process consumer loan applications or consumer financial data. Our Services are directed exclusively to institutional participants — financial institutions, lenders, and their authorized representatives.

We collect the following categories of information:

Information You Provide Directly When you submit a contact form, request a demo, or apply to become a network partner, we collect your name, business email address, institution name, title, phone number, and any other information you choose to provide.

Usage and Technical Data When you visit the Site, we automatically collect certain technical information including your IP address, browser type and version, operating system, referring URLs, pages viewed, and time spent on pages. This data is collected through standard web server logs and analytics tools.

Communications If you contact us by email or through our contact form, we retain records of that correspondence.

Institutional Data Participating institutions may provide institutional-level data (not consumer-level data) as part of their use of the platform. This data is governed by separate participation agreements and data use policies.

We use the information we collect to:

• Respond to inquiries, demo requests, and partnership applications
• Operate, maintain, and improve the Site and platform Services
• Communicate with you about the platform, network updates, and relevant industry information
• Analyze usage patterns to improve user experience
• Comply with legal obligations and enforce our agreements
• Protect the security and integrity of the platform and network

We do not sell personal information to third parties. We do not use personal information for automated decision-making that produces legal or similarly significant effects.

We may share information in the following limited circumstances:

Service Providers We work with third-party vendors who assist us in operating the Site and platform (e.g., hosting providers, analytics services, CRM tools). These vendors are contractually required to handle data only as directed by us and in accordance with applicable law.

Technology Partners Lendflow provides the technology infrastructure underlying the Mainlynk platform. Data shared with Lendflow is governed by our partnership agreement and Lendflow's applicable privacy and data handling policies.

Legal Requirements We may disclose information if required to do so by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Mainlynk, our network participants, or others.

Business Transfers In the event of a merger, acquisition, or sale of all or a portion of our assets, information may be transferred as part of that transaction. We will notify affected parties as required by applicable law.

We do not share personal information with unaffiliated third parties for their own marketing purposes.

We use cookies and similar tracking technologies to operate the Site and understand how visitors use it. Cookies are small data files stored on your device.

Essential Cookies: Required for the Site to function properly. These cannot be disabled.

Analytics Cookies: Help us understand how visitors interact with the Site (e.g., pages visited, time on site). We use this data in aggregate to improve the Site.

You can control cookies through your browser settings. Disabling certain cookies may affect Site functionality. We honor browser-level Do Not Track signals where technically feasible.

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. Contact and inquiry data is generally retained for up to three years from the date of last contact. Institutional participation data is retained for the duration of the participation agreement and for a reasonable period thereafter as required for legal and compliance purposes.

We implement reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

If you believe your information has been compromised, please contact us immediately at the address below.

The Site may contain links to third-party websites, including our technology partners. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

Depending on your jurisdiction, you may have certain rights with respect to your personal information, including the right to access, correct, or delete information we hold about you, or to object to or restrict certain processing.

To exercise any of these rights, please contact us at the address below. We will respond to requests within the timeframe required by applicable law. We do not discriminate against individuals who exercise their privacy rights.

California residents may have additional rights under the California Consumer Privacy Act (CCPA). Please contact us for more information.

Mainlynk's platform processes institutional-level data provided by participating financial institutions. This data is not consumer financial data and is not subject to consumer financial privacy laws such as the Gramm-Leach-Bliley Act (GLBA) in the same manner as data held by financial institutions directly. Participating institutions are responsible for ensuring their own compliance with applicable privacy laws governing their customer data. Mainlynk's data use obligations with respect to institutional data are governed by the applicable participation agreement.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you by email or through a notice on the Site. Your continued use of the Site or Services after any changes constitutes your acceptance of the updated Policy.

If you have questions about this Privacy Policy or our data practices, please contact us at:

Mainlynk, Inc. [email protected]

We will respond to all inquiries within a reasonable timeframe.