Privacy Policy

Effective Date: 2026-05-30 · Last Revised: 2026-05-30

This Privacy Policy explains how TriState.Digital ("we," "us," or "our") collects, uses, and shares information when you use tristate.digital and any related services (the "Services"). By using the Services you agree to this Policy. If you do not agree, do not use the Services.

0. Operator

The Services are operated by AcquisitionInvest, LLC, a Wyoming limited liability company ("Operator," "we," "us," or "our"). The Operator is the data controller for personal information collected through the Services.

1. Information We Collect

We collect:

• Account information — name, email, and (when applicable) a password hash, when you create an account.
• Content you submit — messages, files, settings, and any content you submit through the Services.
• Contact & communication preferences — the email address, mobile phone number (if you opt in to SMS), and your subscription/opt-out status.
• Payment information — if you purchase a paid plan, our payment processor (Stripe) collects your card details. We never store full card numbers ourselves.
• Server & usage logs — IP address, user agent, timestamps, request paths, error traces. Used for security, abuse prevention, and debugging.
• Cookies & local storage — session cookies for sign-in, preference cookies, and (where applicable) lightweight analytics. We do not use cross-site advertising trackers.

2. How We Use Information

We use the information we collect to:

• Provide, maintain, and improve the Services.
• Authenticate accounts, prevent abuse, and protect users.
• Send transactional messages (security alerts, billing notifications, service announcements).
• Send marketing or product-update email if you have opted in — you can opt out at any time.
• Send SMS messages if you have explicitly opted in to a TriState.Digital SMS program — you can text STOP to opt out.
• Comply with legal obligations and respond to lawful requests.

3. Legal Basis (EU/UK Users)

If you are in the EU or UK, our legal bases for processing your personal data are: (a) contract — processing necessary to deliver the Service you signed up for; (b) consent — for optional marketing email, SMS, and non-essential cookies; (c) legitimate interests — for fraud prevention, security, and product improvement; and (d) legal obligation — for tax, accounting, and lawful-request compliance.

4. How We Share Information

We share information only as needed to deliver the Services or comply with law:

• Service providers — hosting (the VPS that runs tristate.digital), payment processing (Stripe), email delivery, SMS aggregators, AI APIs (where applicable), and error monitoring. These providers process data on our behalf under contracts that limit their use of it.
• Legal compliance — in response to a valid subpoena, court order, or similar lawful request, or to protect rights, property, or safety.
• Business transfers — if TriState.Digital is acquired, merged, or sold, your information may transfer to the successor entity subject to this Policy.

We do not sell your personal information. We do not share opt-in SMS data or mobile phone numbers with third parties for their own marketing.

5. SMS / Text Messaging

If you opt in to receive SMS messages from TriState.Digital, we collect and process your mobile phone number and your consent record (when, how, and for what purpose you opted in). We use this information solely to deliver the SMS program you consented to (prospect outreach (after explicit opt-in), client appointment reminders, account security messages, and case-study follow-ups).

5.1 No Sale, Rental, or Sharing of Mobile Opt-In Data

We do not sell, rent, lease, transfer, share, or otherwise disclose mobile opt-in data, mobile phone numbers, or SMS consent information to any third party for their own marketing, promotional, or commercial use. Mobile opt-in data is used only to deliver the TriState.Digital SMS service. The only third parties that touch your mobile phone number are the SMS aggregators we contract with (e.g., Twilio, Bandwidth) strictly to deliver messages on our behalf, under contractual confidentiality.

5.2 Opt-Out

Reply STOP to any SMS message to opt out. You will receive one confirmation message and no further marketing or informational SMS. You can also email info@tristate.digital with "STOP" in the subject line. Msg & data rates may apply from your wireless carrier.

6. Email Marketing

If you receive marketing or product-update email from us, every message will identify the sender, include a valid postal address on request, and provide a working unsubscribe link. To opt out of all TriState.Digital marketing email, click the unsubscribe link in any message or email legal@tristate.digital. Transactional email related to your account (security alerts, billing notices) is not subject to opt-out while your account is active.

7. Data Retention

We retain account information for as long as your account is active. After closure or 24 months of inactivity, we delete or anonymize personal data unless we are legally required to retain it (e.g., tax records). Server logs are typically retained for up to 90 days, then rotated. SMS consent records are retained for up to 4 years to demonstrate compliance.

8. Security

We use industry-standard safeguards including HTTPS/TLS in transit, encrypted credentials at rest, and access controls on our systems. No method of transmission or storage is 100% secure; we cannot guarantee absolute security. Report suspected breaches to info@tristate.digital.

9. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact legal@tristate.digital and we will delete it.

10. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, export, or restrict processing of your personal data. To exercise these rights, email legal@tristate.digital. EU/UK users may also lodge a complaint with their data-protection authority. California residents have rights under CCPA/CPRA including access, deletion, and the right to opt out of "sale" (we do not sell personal information).

11. International Transfers

TriState.Digital is operated from the United States. If you access the Services from outside the U.S., your information will be transferred to and processed in the U.S. By using the Services you consent to this transfer.

Dispute Resolution — Privacy Matters

Any dispute, claim, or controversy concerning this Privacy Policy or our handling of your personal data is governed by the dispute-resolution provisions of our Terms of Service, which require binding individual arbitration administered by JAMS under its Streamlined Arbitration Rules in Butler County, Pennsylvania, and waive the right to participate in any class, collective, or representative action. Court venue, where permitted, is the Court of Common Pleas of Butler County, Pennsylvania and the U.S. District Court for the Western District of Pennsylvania. The laws of the Commonwealth of Pennsylvania govern these matters without regard to conflict-of-laws principles. You may opt out of arbitration within 30 days of first acceptance of the Terms — see the Terms for details, or email legal@tristate.digital with the subject line "ARBITRATION OPT-OUT" and "tristate.digital" in the body.

12. Changes to This Policy

We may update this Policy from time to time. Material changes will be announced by email or by an in-app notice at least 14 days before they take effect.

13. Contact

Questions about this Privacy Policy or your data: legal@tristate.digital
Support & opt-out requests: info@tristate.digital