This Privacy Policy ("Policy") explains how Pinnacle Promotions USA LLC("Pinnacle Promotions," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use our services. It also explains the choices and rights you have. Please read it carefully.

This Policy covers the public website at pinnacle-promotions.com (the "Site"), the client and brand-ambassador web portal atapp.pinnacle-promotions.com (the "Portal"), and thePinnacle Promotions mobile app for iOS and Android (the "App") — together, the "Services." Brand ambassadors and client companies also sign separate agreements during onboarding; where one of those agreements addresses a specific use of information, it applies alongside this Policy.

Who we are

Pinnacle Promotions USA LLC is a Texas limited liability company that plans, staffs, and runs in-store liquor, beer, and wine tastings and other promotional beverage events for brands, distributors, agencies, and retailers across Southeast Texas. Events are run by TABC-certified brand ambassadors who work with us as independent contractors. Pinnacle Promotions is the party responsible for the personal information described in this Policy. You can reach us using the details in "Contact us".

Who this Policy covers

Site visitors — anyone browsing the Site, using the contact form, or applying for a brand-ambassador role.
Brand ambassadors — independent contractors who onboard with us and run tastings through the App.
Client users — people who use the Portal or App on behalf of a brand, distributor, agency, or retailer that books tastings with us.
Tasting attendees — members of the public who sample a product at an event. We do not collect attendees' names or contact details; see "Tasting attendees".

Information we collect

From Site visitors and applicants

Contact and inquiry details. Your name, company, email address, phone number, the markets you are interested in, and the contents of your message.
Application details. If you apply to be a brand ambassador: your name and contact details, date of birth (to confirm you are 21 or older, as Texas law requires for alcohol tastings), mailing address, work authorization, TABC certification status, transportation and availability, experience, and any photo, résumé, or documents you choose to upload.
Technical data. IP address, general (city- or region-level) location, browser and device type, referring page, and the pages you view, recorded by our hosting and security provider to keep the Site secure and reliable.
Cookies. Strictly necessary cookies only, by default. See our Cookie Policy.

From brand ambassadors

Profile and contact details. Name, email address, phone number, mailing address, date of birth, and a profile photo.
Onboarding and compliance records. Your TABC certification (including a photo of the card, which we read automatically to capture the certificate number and expiry), the identity or permit documents you upload, and the agreements you sign electronically — the Independent Contractor Agreement, Card Use Agreement, direct-deposit authorization, and notification consent — together with the record of each signature (name, IP address, device, and time).
Tax and payment details. Your IRS Form W-9, including your Social Security or Employer Identification Number, and the bank account details you provide for direct deposit. The taxpayer number is stored encrypted and is erased from our systems once your payee record has been created with our accounting provider.
Purchasing-card details. If you are issued a Pinnacle purchasing card, we share your name, date of birth, address, email, and phone number with Stripe, our card issuer, to create the card. We keep only Stripe's reference identifiers for the cardholder and card; the card number and security code never pass through our servers.
Work activity. The tastings you are offered, accept, or decline; your check-in time and precise location at the venue; your route distance for mileage records; setup, event, and receipt photos; sample counts; recap notes; and the signatures collected at the event.
Messages. Messages you exchange with our team or a client through the App.
Device and diagnostic data. Push-notification token, installation identifier, device model and operating system, App version, and crash and performance diagnostics.

From client users

Account and business details. Your name, work email address, phone number, role, and the name, address, and billing contact of the company you represent.
Bookings and catalog. The tastings you request, the venues and dates, the products and recipes you list, and your notes and preferences.
Billing. Invoices, payment history, and your chosen payment method. Card and bank details are entered directly with Stripe, our payment processor; we do not store card numbers.
Signed agreements and consents. Your billing agreement and, if you give it, your consent for us to reference your brand in our marketing.
Device and technical data. As described above for the Portal and App.

Tasting attendees

Brand ambassadors record how many people sampled a product at an event and, for the client's event report, the approximate age range, gender, and ethnicity of those who did. These are aggregate observations — counts, not records of individuals. We do not collect attendees' names, contact details, or any identifier, and the figures cannot be linked back to a person.

Where information comes from

Most information comes directly from you or from the company you represent. Some is generated by your use of the Services (check-ins, photos, messages) or collected by your device with your permission (location, camera). We also receive limited information from our service providers — for example, payment status from Stripe — and we use public government data about licensed venues (not about people) to place events.

How we use information

To run tastings. Scheduling, staffing, and confirming events; matching brand ambassadors to events by distance, availability, and experience (our team makes the final assignment); check-in verification; recaps and client reports.
To onboard and pay brand ambassadors. Verifying TABC certification, collecting tax forms, issuing purchasing cards, calculating pay and mileage, and paying by direct deposit.
To bill clients. Preparing quotes and invoices, charging authorized payment methods, sending receipts and reminders, and keeping accounting records.
To read documents automatically. We use optical character recognition to capture text from receipt photos and TABC cards so it does not have to be typed. A person reviews the result before it is relied on.
To frame profile photos. When you upload a profile photo, software detects where a face is in the image so the photo can be cropped and centered consistently. This step does not identify anyone, and we do not create or store a facial template or any other biometric identifier.
To communicate. Sending event assignments, reminders, invoices, security notices, and replies to your messages; and, only with your consent, promotional messages.
To keep the Services secure and working. Authentication, fraud and abuse prevention, audit logging, crash and performance monitoring, and troubleshooting.
To meet legal obligations. Tax reporting, alcoholic-beverage regulatory recordkeeping, responding to lawful requests, and enforcing our agreements.

We do not sell personal information, we do not use it for targeted advertising, and we do not make decisions about you by automated means alone that have legal or similarly significant effects.

Legal bases

Where the law requires a legal basis, we process personal information to perform our agreements with you or the company you represent; with your consent, where we ask for it; to comply with legal obligations; and for our legitimate interests in operating, securing, and improving the Services, provided those interests are not overridden by your rights.

How we share information

We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising. We disclose it only as described here.

Service providers who process information on our behalf under contract and only to provide services to us: Microsoft Azure (application hosting, database, secure key storage, monitoring, reading text from receipt and permit photos, and generating recipe suggestions from the product details clients enter), Cloudflare (website hosting, security, bot protection, and file storage), Stripe (client payments and invoicing, and issuing brand-ambassador purchasing cards), Intuit QuickBooks (accounting, invoicing, brand-ambassador payments, and tax reporting), Google Firebase (Android push notifications, crash reporting, and performance monitoring), Apple (iOS push notifications), Mapbox (maps and driving routes), and Resend (delivering Site form submissions to us).
Stripe, as card issuer. When a purchasing card is issued, Stripe also processes the cardholder's information for its own identity-verification and regulatory purposes under its own privacy policy.
Clients and brand ambassadors, to each other. A client sees limited information about the brand ambassador assigned to its event — typically name and photo — and the event report. A brand ambassador sees the event details a client provides, including venue and contact information needed to run the event.
Apple Wallet and Google Wallet, if you choose to add your purchasing card to your phone's wallet.
Legal and safety. When we believe in good faith that disclosure is necessary to comply with a law, regulation, legal process, or governmental request; to enforce our agreements; or to protect the rights, property, or safety of Pinnacle Promotions, our users, or the public.
Business transfers. As part of a merger, acquisition, financing, reorganization, or sale of assets, subject to this Policy.
With your direction or consent.

Location information

The App asks brand ambassadors for permission to use precise location for one purpose: to confirm that a check-in happens at the tasting venue. Location is used only while the App is open and only at check-in; the App never collects location in the background. Approximate location may be used to estimate driving distance for mileage records. You can withdraw location permission in your phone's settings at any time, in which case on-site check-in may not be available.

Photos and camera

Brand ambassadors use the camera to photograph the event setup, the tasting in progress, receipts, and onboarding documents. These images verify that the event took place, support client reports, and substantiate purchases and mileage. Photos are stored privately, and links to them are time-limited.

Cookies, local storage, and similar technologies

The Site uses only strictly necessary cookies unless you opt in to more; see theCookie Policy. The Portal uses a secure session cookie to keep you signed in and browser storage to remember your preferences. The App stores your work data on the device in an encrypted database so you can keep working without signal; it is removed when you sign out. None of the Services use advertising or cross-site tracking cookies.

Communications and notifications

We send service messages — event assignments and reminders, schedule changes, invoices and receipts, onboarding and document notices, and security alerts — by push notification, in-app alert, and email. You can control push notifications in your phone's settings and adjust many notification preferences in the App or Portal; service messages needed to run an event or settle an account will still be sent. We send promotional email only with your consent, and every promotional message includes an unsubscribe link. We do not send marketing text messages.

Data retention

We keep personal information for as long as your account is active and as needed for the purposes above. When an account is deleted — in the App under Settings, or as described on our account deletion page — profile and contact details are removed immediately. Some records must be kept after that: signed agreements, invoices, payment and tax records, and event records required by federal tax law and the Texas Alcoholic Beverage Commission are retained for the periods those rules require, and aggregate event statistics are kept in a form that does not identify you. Security and session records are purged automatically on a rolling schedule. Site inquiries and applications are kept for a limited period consistent with our business needs unless the law requires longer.

Security

We protect personal information with administrative, technical, and organizational safeguards designed for the sensitivity of the data we hold. All connections use TLS encryption. Tax identification numbers are encrypted at rest and erased once no longer needed; the App's on-device database is encrypted; access is role-based and logged; sessions can be revoked; and sensitive screens in the App block screenshots and screen recording. No system is perfectly secure, so we cannot guarantee absolute security. Keep your sign-in details confidential and tell us at once if you suspect your account has been compromised.

Your rights and choices

Depending on where you live, you may have the right to:

Access — confirm whether we process your personal information and obtain a copy of it.
Correct — fix inaccurate information. Most profile details can be updated directly in the App or Portal.
Delete — have your personal information deleted, subject to the retention obligations above.
Portability — receive a copy of information you provided in a portable format.
Opt out — of the sale of personal information, targeted advertising, or profiling that produces legal or similarly significant effects. We do not do any of these.
Withdraw consent — where we rely on it, without affecting processing that already occurred.
Appeal — ask us to reconsider a decision about your request.
Non-discrimination — exercise these rights without being treated differently for it.

To exercise a right, use the controls in the App or Portal, our contact form, or the email address below. We will verify your request — usually by confirming details associated with your account or inquiry — and respond within the time the law requires (45 days for Texas residents, which may be extended once where permitted). You may use an authorized agent where the law allows; we may ask the agent to prove their authority. If we deny a request, we will tell you why and how to appeal.

U.S. state privacy rights

Texas residents. The Texas Data Privacy and Security Act gives Texas residents the rights listed above. We do not sell personal data or engage in targeted advertising, and we do not process sensitive data without the consent the law requires. To appeal a decision we make about your request, reply to our response or contact us again and state that you are appealing.

California residents. Under the California Consumer Privacy Act, we do not sell or share personal information and have not done so in the preceding twelve months. In that period we may have collected the categories described in"Information we collect" — identifiers, professional and employment-related information, financial information, government identifiers, geolocation, visual information (photos), internet activity, and inferences drawn for event reports — for the business purposes described in this Policy. You have the rights to know, delete, correct, and limit, and the right not to be discriminated against for exercising them.

Residents of other states with comprehensive privacy laws have comparable rights, which we honor as described above.

Do Not Track and opt-out preference signals

Because we do not track you across other websites and do not sell or share personal information, our practices are consistent with browser "Do Not Track" settings and Global Privacy Control signals. Where the law requires us to treat such a signal as an opt-out request, we honor it.

Children

The Services are for adults. Brand ambassadors and anyone who samples alcohol at an event must be 21 or older; Portal and App users must be at least 18. The Services are not directed to children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

Third-party services and links

The Services link to and work with services we do not control — Stripe's card interfaces, Apple Wallet and Google Wallet, Mapbox maps, the Apple App Store and Google Play, and third-party websites. Their privacy practices are governed by their own policies, which we encourage you to read.

International visitors

The Services are operated from the United States and intended for people in the United States. If you use them from elsewhere, your information will be processed in the United States, where data-protection laws may differ from those in your country.

Changes to this Policy

We may update this Policy as our Services, practices, or the law change. We will revise the "Last updated" date and, for material changes, notify you through the App or Portal or by email before they take effect. Continued use of the Services after a change takes effect means you accept the revised Policy.

Contact us

Questions about this Policy, or a request to exercise a privacy right, can be sent to:

Entity: Pinnacle Promotions USA LLC
Email: support@pinnacle-promotions.com
Online: Contact form · Account deletion
Region: Southeast Texas, United States