Legal

Account Information: When you register, we collect your email address, display name, and authentication identifiers (OAuth tokens or Solana wallet public keys). We never store private keys or seed phrases.

Usage Data: We automatically collect information about your interactions with the Service, including token addresses you scan, pages visited, browser type, IP address, and timestamps.

Scan Data: Token addresses submitted for analysis are processed by our AI engine. We retain scan results to improve model accuracy and provide scan history features.

Payment Information: Subscription payments are processed by Coinbase Commerce. We do not store card numbers or private keys. We retain only payment charge IDs and subscription status.

Communications: If you subscribe to our newsletter, we store your email address and subscription preferences. You may unsubscribe at any time via the link in any email.

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process transactions and send related information
• Send administrative information, updates, and security alerts
• Respond to comments, questions, and requests
• Send marketing communications (with your consent)
• Monitor and analyze usage patterns to improve the Service
• Detect, prevent, and address technical issues and fraud
• Train and improve our AI risk-scoring models

We do not sell, trade, or rent your personal information to third parties. We may share information with:

• Service Providers: Coinbase Commerce (payments), Resend (email), AWS S3 (storage), and analytics providers operating under data processing agreements.
• Legal Requirements: When required by law, subpoena, or to protect the rights, property, or safety of TaroAi, our users, or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users.

Token addresses, wallet addresses, and on-chain transaction data are publicly available on the Solana blockchain. Our analysis of this public data does not constitute a privacy violation. We do not associate on-chain data with your personal identity without your explicit consent.

We retain your account data for as long as your account is active. Scan history is retained for 12 months for free users and indefinitely for Pro subscribers. You may request deletion of your account and associated data by contacting [email protected].

We implement industry-standard security measures including TLS encryption in transit, AES encryption at rest, JWT-based session management, and regular security audits. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security.

We use essential session cookies required for authentication. We do not use third-party advertising cookies. You may disable cookies in your browser settings, but this will prevent you from logging in to the Service.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict processing of your data
• Data portability (receive your data in a machine-readable format)
• Withdraw consent at any time where processing is based on consent

To exercise these rights, contact [email protected].

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete it immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

For privacy-related inquiries: [email protected]