Legal
Privacy Policy.
Last updated: August 2026
Draft. This is a working draft prepared for Paysmith. It has not yet been reviewed by counsel; bracketed items are pending confirmation.
01 — Who we are
Paysmith is a product of Ploton Labs, Inc., a Delaware corporation. It provides verified identities and wallets for AI agents acting on behalf of a person or company. This policy explains what we collect, why, and the choices you have. It applies to our website and product.
Ploton Labs, Inc. is the controller of your data:
Ploton Labs, Inc.
8 The Green, STE A
Dover, DE 19901
United States
[email protected] · +1 619 214 9308
02 — Data we collect
We collect what we need to verify identity, run wallets, and keep the service safe:
- Account details you give us, such as name, email, and the organization an agent acts for.
- Identity and verification data used to confirm who is behind an agent — including business registration details, tax identifiers, and the names, addresses and identity documents of directors and beneficial owners.
- Wallet and transaction records, including amounts, counterparties, timestamps, and the rules applied.
- Records of your agreements, including when you accepted these terms and which version.
- Technical data such as device, log, and usage information when you use the site or API.
03 — How we use it
- To verify identities and issue and operate wallets.
- To enforce the spending rules and limits an account holder sets.
- To detect fraud, prevent abuse, and keep the service secure.
- To support you and improve the product.
- To meet legal and regulatory obligations, including anti-money-laundering and sanctions checks.
We do not use your data to train machine-learning models, and we do not make decisions producing legal effects about you by automated means alone.
04 — Who we share it with
We do not sell personal data.
Airwallex. Wallets, cards, and payouts are provided by Airwallex US, LLC. Identity and transaction data for those services is shared with, and separately processed by, Airwallex as its own controller under the Airwallex privacy policy and its US Financial Privacy Notice.
Other providers that help us run Paysmith:
| Provider | Purpose |
|---|---|
| Amazon Web Services | Hosting and infrastructure |
| Cloudflare | Application delivery and security |
| [ADD REMAINING SUB-PROCESSORS: email delivery, logging/analytics, support, telephony] |
We also share data with counterparties to the extent a transaction requires, and where the law requires it or to protect our rights.
05 — Where data is held
Data is stored and processed in the United States. [IF ANY PROVIDER PROCESSES OUTSIDE THE US, NAME IT AND THE TRANSFER MECHANISM.]
06 — Security
We use technical and organizational measures to protect data, including encryption in transit, encryption of sensitive records at rest, and access controls. No system is perfectly secure, and we cannot promise absolute security.
07 — How long we keep it
- Identity and verification records — for the life of the account and [X] years after it closes, to meet financial record-keeping obligations.
- Transaction and audit records — [X] years, as required by anti-money-laundering rules.
- Technical and log data — [X] months.
- Marketing contact details — until you unsubscribe.
Where the law requires a longer period, we keep the data for that period.
08 — Your rights
Depending on where you live, you may be able to access, correct, export, or delete your data, or object to certain processing. To make a request, email [email protected]. We may need to verify your identity first, and some data must be kept to meet legal obligations.
If you are a California resident, you may request the categories and specific pieces of personal information we collect, request deletion or correction, and are entitled not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined under the CCPA. [CONFIRM WITH COUNSEL WHICH OTHER US STATE LAWS APPLY.]
09 — Cookies
We use cookies that are strictly necessary to sign you in and keep your session secure. [IF ANY ANALYTICS OR MARKETING COOKIES ARE USED, LIST THEM AND DESCRIBE THE CONSENT MECHANISM — otherwise state plainly that none are used.]
10 — Children
Paysmith is for businesses. We do not knowingly collect data from anyone under 18.
11 — Changes
We may update this policy as the product and the law change. When we do, we will revise the date above and, where appropriate, give notice.
12 — Contact
Questions about this policy or your data?
Ploton Labs, Inc.
8 The Green, STE A
Dover, DE 19901
United States
[email protected] · +1 619 214 9308