Privacy Policy

LynkTek Privacy Policy

Effective Date: August 1, 2026

1. Introduction

LynkTek (“LynkTek,” “we,” “our,” or “us”) is committed to protecting the privacy and security of the information entrusted to us. This Privacy Policy describes how we collect, use, disclose, protect, and retain personal information obtained through our website, products, services, and business operations.

LynkTek provides software integration services and API solutions primarily to financial institutions, fintech organizations, and other business customers. In many cases, LynkTek processes information solely on behalf of our customers as a service provider or data processor. Our customers determine the purpose and means of processing the information they provide to us.

This Privacy Policy applies to information collected through our website and to information processed in connection with the services we provide, unless otherwise governed by a separate written agreement with a customer.

By using our website or engaging our services, you acknowledge that you have read and understand this Privacy Policy.

2. Scope

This Privacy Policy applies to:

• Visitors to the LynkTek website.
• Representatives of current and prospective customers, partners, and vendors.
• Information submitted through our website or other business communications.
• Personal information processed by LynkTek while providing contracted services to our business customers.

This Privacy Policy does not apply to information processed solely under the direction of our customers where LynkTek acts as a service provider or processor. Financial institutions and other customers remain responsible for their own privacy notices and obligations to the individuals whose information they control.

3. Our Role

Depending on the circumstances, LynkTek may act as either:

Data Controller

For information collected directly through our website, business communications, recruiting activities, or sales processes, LynkTek determines how and why personal information is processed.

Service Provider / Data Processor

For information processed through our API platform or integration services, LynkTek generally acts as a service provider or processor on behalf of our customers.

Our customers, including financial institutions and fintech organizations, determine:

• what information is collected;
• the purposes for which it is processed;
• who may access the information; and
• how long it is retained.

When acting as a processor, LynkTek processes information only in accordance with contractual obligations and documented customer instructions.

4. Information We Collect

Information You Provide

We may collect information you voluntarily provide, including:

• Name
• Company name
• Business email address
• Business telephone number
• Job title
• Organization information
• Information submitted through contact forms
• Communications with our sales, support, or technical teams

Providing this information is voluntary; however, certain information may be required for us to respond to inquiries or provide requested services.

Information Collected Automatically

When you visit our website, we may automatically collect limited technical information, including:

• IP address
• Browser type and version
• Operating system
• Device information
• Date and time of requests
• Referring website
• Pages visited
• General usage statistics

This information is used to operate, maintain, secure, and improve our website and services.

Information Processed on Behalf of Customers

As part of providing our services, LynkTek may process information submitted by our customers through our API platform.

Depending on the services utilized, this information may include:

• Customer account identifiers
• Financial transaction information
• Banking integration data
• Authentication and authorization information
• Consumer or account information necessary to facilitate authorized financial transactions
• Technical integration and connectivity information

LynkTek does not determine the purpose for which this information is collected or used. Our customers remain responsible for obtaining any necessary authorization and providing applicable privacy notices to their customers.

5. How We Use Information

LynkTek uses information collected directly from individuals for legitimate business purposes, including:

• Responding to inquiries
• Providing customer service
• Delivering contracted services
• Managing customer relationships
• Improving our products and services
• Maintaining the security and availability of our systems
• Detecting and preventing fraud or unauthorized activity
• Complying with legal and regulatory obligations
• Protecting the rights, property, and security of LynkTek, our customers, and others

Information processed on behalf of customers is used solely for the purposes described in our agreements with those customers and in accordance with their documented instructions.

LynkTek does not sell personal information to third parties.

LynkTek does not use customer data received through our integration platform for advertising, profiling, or marketing purposes.

6. Legal Basis for Processing

Where applicable, LynkTek processes personal information based upon one or more of the following legal grounds:

• Performance of a contract.
• Compliance with legal obligations.
• Legitimate business interests, including securing and improving our services.
• Consent, where required by applicable law.

When LynkTek processes information solely on behalf of a customer, the customer is responsible for identifying the appropriate legal basis for processing.

7. Cookies and Website Technologies

Our website may use cookies and similar technologies to support functionality, improve user experience, analyze website usage, and maintain security.

These technologies may collect information such as browser type, device information, pages visited, and session activity.

Users may configure their browsers to refuse or remove cookies; however, doing so may affect the functionality of certain portions of the website.

LynkTek does not use website cookies to build advertising profiles or sell visitor information to third parties.

8. Sharing and Disclosure of Information

LynkTek does not sell or rent personal information to third parties.

We may share information only as necessary to operate our business, provide contracted services, comply with legal obligations, or protect our rights. Information may be disclosed in the following circumstances:

Service Providers

We engage trusted third-party service providers that assist in delivering our services, including cloud hosting, monitoring, communications, and technical support. These providers are contractually required to safeguard information and may only process information for authorized business purposes.

Customer Directed Processing

When LynkTek acts as a service provider or data processor, information is processed solely under the direction of the applicable customer and in accordance with contractual obligations.

Legal Requirements

We may disclose information when required to do so by applicable law, regulation, legal process, or governmental request, or when necessary to protect the rights, safety, or security of LynkTek, our customers, or others.

Business Transactions

If LynkTek is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to appropriate confidentiality obligations.

9. Information Security

LynkTek maintains administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, and destruction.

Our information security program is based on industry-recognized security practices and is regularly reviewed to address evolving threats and business requirements.

Security measures include, but are not limited to:

• Encryption of data in transit using Transport Layer Security (TLS).
• Encryption of data at rest using AWS-managed encryption services.
• Multi-factor authentication for administrative access.
• Role-based access controls and the principle of least privilege.
• Continuous monitoring of production systems and security events.
• Network protection through AWS Web Application Firewall (WAF).
• Threat detection using AWS Guard Duty and Amazon Inspector.
• Audit logging through AWS CloudTrail and Amazon CloudWatch.
• Secure software development practices, including code reviews and automated vulnerability scanning.
• Regular backup and recovery processes to support business continuity.
• Periodic independent security assessments, including penetration testing and vulnerability assessments.

Access to customer information is limited to authorized personnel with a legitimate business need and is reviewed periodically.

10. Data Retention

LynkTek retains personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, satisfy contractual obligations, comply with legal requirements, resolve disputes, and enforce our agreements.

Information processed on behalf of customers is retained in accordance with applicable contractual agreements and customer instructions.

When information is no longer required, LynkTek securely deletes or de-identifies the information using established data disposal procedures.

11. Individual Privacy Rights

Subject to applicable law and the nature of our relationship with the individual, individuals may have certain rights regarding their personal information, including the right to:

• Request access to personal information maintained by LynkTek.
• Request correction of inaccurate or incomplete information.
• Request deletion of personal information where applicable.
• Request restriction of certain processing activities.
• Object to the processing of personal information where permitted by applicable law.
• Request a copy of personal information in a commonly used, machine-readable format where required by law.
• Withdraw consent where processing is based upon consent.

Authorized Representatives and Legal Advocates

Where permitted by applicable law, an individual may exercise their privacy rights through an authorized representative, including a parent, legal guardian, or other legally authorized advocate.

LynkTek may require reasonable documentation verifying the identity of the individual and the authority of the representative before fulfilling a request. This may include documentation establishing legal guardianship, authorization to act on behalf of the individual, or other documentation required by applicable law.

Requests for Information Processed on Behalf of Customers

Because LynkTek primarily acts as a service provider or data processor for financial institutions and other business customers, requests relating to information processed on behalf of a customer should generally be directed to the applicable financial institution or organization with which the individual has a relationship.

Where appropriate, LynkTek will assist its customers in fulfilling applicable privacy requests in accordance with contractual obligations and applicable law.

12. Data Portability

Where required by applicable law and where LynkTek acts as the controller of personal information, individuals may request a copy of their personal information in a structured, commonly used, and machine-readable format.

For information processed on behalf of our customers, requests for data portability should generally be submitted to the applicable financial institution or organization that controls the information. LynkTek will reasonably assist customers in fulfilling such requests where required by contract or applicable law.

13. Data Accuracy

LynkTek takes reasonable steps to maintain accurate personal information.

Individuals who believe their personal information is inaccurate or incomplete may request correction by contacting LynkTek or, where applicable, the financial institution or organization that controls the information.

14. International Data Transfers

LynkTek primarily stores and processes information within the United States using reputable cloud service providers.

Where information is transferred across international borders, LynkTek implements appropriate contractual, technical, and organizational safeguards designed to protect personal information in accordance with applicable legal requirements.

15. Incident Response

LynkTek maintains documented incident response procedures designed to identify, investigate, contain, remediate, and recover from suspected security incidents.

Security events are monitored using automated monitoring and logging technologies, and incidents are investigated by authorized personnel in accordance with established response procedures.

Where required by applicable law or contractual obligation, LynkTek will notify affected customers of confirmed security incidents involving customer information without unreasonable delay.

16. Third-Party Websites

Our website may contain links to third-party websites or services that are not operated by LynkTek.

This Privacy Policy does not apply to third-party websites, and LynkTek is not responsible for their privacy practices or content. Individuals are encouraged to review the privacy policies of any third-party websites they visit.

17. Children’s Privacy

LynkTek’s services are intended for businesses and are not directed to children under the age of 13.

LynkTek does not knowingly collect personal information directly from children through its website or services. If we become aware that personal information has been collected from a child in violation of applicable law, we will take reasonable steps to delete the information.

18. How to Exercise Your Privacy Rights

Individuals wishing to exercise applicable privacy rights or submit questions regarding this Privacy Policy may contact LynkTek using the information provided below.

Requests may include:

• Access to personal information maintained by LynkTek.
• Correction of inaccurate or incomplete information.
• Deletion of personal information where applicable.
• Requests for data portability where required by law.
• Requests to restrict or object to the processing of personal information where permitted by applicable law.
• Withdrawal of consent where processing is based on consent.
• Questions regarding the collection or processing of personal information.

To help protect personal information, LynkTek may take reasonable steps to verify the identity of the individual submitting a request before providing access to or modifying personal information.

Where LynkTek processes information solely on behalf of a customer, requests relating to that information may be referred to the applicable financial institution or organization, as they are responsible for determining how the information is collected, used, and disclosed.

LynkTek will cooperate with its customers to support the fulfillment of applicable privacy requests in accordance with contractual obligations and applicable law.

19. California Privacy Rights

If applicable, residents of California may have certain rights regarding their personal information under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

Subject to applicable exceptions, these rights may include:

• The right to know what personal information is collected.
• The right to request deletion of personal information.
• The right to request correction of inaccurate information.
• The right to receive personal information in a portable format where applicable.
• The right to limit certain uses of sensitive personal information where required by law.
• The right not to be discriminated against for exercising privacy rights.

LynkTek does not sell personal information or share personal information for cross-context behavioral advertising.

When LynkTek acts solely as a service provider or processor on behalf of a customer, requests relating to customer-controlled information should generally be directed to the applicable customer.

20. Privacy Questions and Complaints

LynkTek is committed to resolving privacy concerns promptly and professionally.

Individuals who have questions regarding this Privacy Policy or believe their privacy rights have been affected are encouraged to contact us using the information below.

LynkTek will review inquiries, investigate as appropriate, and respond within a reasonable timeframe consistent with applicable legal and contractual obligations.

21. Changes to This Privacy Policy

LynkTek may update this Privacy Policy periodically to reflect changes in our business operations, legal requirements, technologies, or privacy practices.

When material changes are made, the updated Privacy Policy will be published on our website with a revised Effective Date.

Continued use of our website or services following publication of an updated Privacy Policy constitutes acknowledgment of the revised policy.

22. Contact Us

Questions regarding this Privacy Policy or requests concerning personal information may be directed to:

LynkTek
Privacy Officer
Email: privacy@lynktek.io
Website: https://www.lynktek.io

Mailing Address

LynkTek
Attn: Privacy Officer
4319 S National Ave. #376
Springfield, MO 65810

Definitions

For purposes of this Privacy Policy:

Customer

A financial institution, fintech organization, or other business entity that contracts with LynkTek to provide services.

Personal Information

Information that identifies, relates to, describes, or can reasonably be associated with an identified or identifiable individual, as defined by applicable law.

Processing

Any operation performed on personal information, including collection, use, storage, transmission, disclosure, deletion, or destruction.

Controller

The organization that determines the purposes and means of processing personal information.

Processor or Service Provider

An organization that processes personal information on behalf of a controller.

Commitment to Privacy

Protecting the confidentiality, integrity, and availability of information entrusted to LynkTek is fundamental to our business.

We recognize the sensitive nature of the financial information processed through our platform and are committed to maintaining appropriate administrative, technical, and organizational safeguards designed to protect that information throughout its lifecycle.

As our business evolves, LynkTek will continue to assess and enhance its privacy and security practices to meet the expectations of our customers, comply with applicable legal requirements, and maintain the trust placed in our services.