Privacy Policy

This Policy applies to information we collect through the Platform, our website, and related communications. It does not apply to third-party payment processors, gateways, or acquiring banks, which have their own privacy policies governing information you provide directly to them.

Account and business information: name, email address, phone number, business name, tax ID, and related registration details you provide when creating an account.

Transaction and orchestration data: transaction metadata (amounts, timestamps, currency, merchant and routing identifiers, approval/decline codes, and similar routing data) generated as the Platform routes payments across processors, gateways, and acquiring banks. The Platform is designed to route and manage transactions using tokenized or non-sensitive identifiers wherever possible; full payment card numbers, card security codes, and other sensitive authentication data are handled only to the extent necessary to facilitate processing and are not used for the purposes described in Section 4 below.

Technical and usage data: IP address, device and browser information, log data, and how you interact with the Platform.

Cookies and similar technologies: as described in Section 6.

Information from third parties: information from payment processors, gateways, acquiring banks, identity verification providers, and other partners necessary to operate the Platform.

We use information to:

• provide, operate, secure, and support the Platform, including orchestrating and routing transactions;
• verify identity, prevent fraud, and comply with legal and card network obligations;
• communicate with you about your account and the Platform;
• analyze and improve the Platform's performance and features;
• train and improve our artificial intelligence and machine learning models, using account, transaction-metadata, technical, and usage information as described above — excluding full payment card numbers and card authentication data;
• for marketing purposes, such as informing you about products, features, or offers, subject to your choices described in Section 7; and
• comply with applicable law, regulation, and card network rules.

We may share information with:

• payment processors, gateways, and acquiring banks as necessary to route and process your transactions;
• service providers and vendors who perform functions on our behalf (e.g., hosting, analytics, customer support, fraud prevention);
• select business partners, for the marketing and business purposes described in this Policy;
• professional advisors and regulators, where required by law, legal process, or to protect our rights, property, or safety, or that of others;
• a successor entity, in connection with a merger, acquisition, financing, or sale of assets.

We do not share full payment card numbers or card authentication data with partners for marketing purposes or use them to train AI models.

Marketing communications. You may opt out of marketing emails using the unsubscribe link in any such email, or by contacting us at legal@toxicailabs.com.

AI training. If you would like to request that your account or usage information be excluded from AI model training, contact us at legal@toxicailabs.com. We will honor such requests to the extent feasible and consistent with data already used in previously trained models.

We use cookies and similar technologies to operate the Platform, remember preferences, and understand usage. You can control cookies through your browser settings; disabling cookies may affect Platform functionality.

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives you the right to:

• know what personal information we collect, use, disclose, and (where applicable) sell or share, and to request access to it;
• delete personal information we have collected from you, subject to certain exceptions;
• correct inaccurate personal information;
• opt out of the “sale” or “sharing” of personal information, including any sharing with partners for cross-context behavioral advertising, using the link below;
• limit the use of sensitive personal information to purposes permitted by law; and
• non-discrimination for exercising any of these rights.

Do Not Sell or Share My Personal Information: contact us at legal@toxicailabs.com to submit a request.

To exercise these rights, contact us at legal@toxicailabs.com. We will verify your request before responding, as required by law.

Residents of other states or countries with applicable privacy laws may have similar rights; contact us to make a request and we will respond as required by applicable law.

We use administrative, technical, and physical safeguards designed to protect information from unauthorized access, use, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain information for as long as necessary to provide the Platform, comply with legal and regulatory obligations (including card network and financial recordkeeping requirements), resolve disputes, and enforce our agreements.

The Platform is intended for business use by adults and is not directed to individuals under 18. We do not knowingly collect personal information from children.

If you access the Platform from outside the United States, you understand that your information will be processed and stored in the United States, which may have different data protection laws than your jurisdiction.

We may update this Policy from time to time. We will post the updated Policy with a new “Last Updated” date and, where required by law, provide additional notice or obtain consent.