This Privacy Policy explains how Toryx Inc ("Toryx," "we," "us," or "our") collects, uses, shares, and protects your personal information when you use our website at www.toryx.ai, our chat interface, our API, and related services (the "Services"). We are a Delaware corporation headquartered in New Jersey.
We are committed to being transparent about our data practices. Please read this policy carefully. By using the Services, you acknowledge that you have read and understood this Privacy Policy.
1. Information we collect
Information you provide directly:
- Account information: Name, email address, and password when you register
- Payment information: Billing details and payment method if you subscribe to a paid plan (processed by our third-party payment processor; we do not store full payment card numbers)
- User content: Messages, prompts, files, and other inputs you submit through the chat interface or API, and the corresponding AI-generated outputs ("Content")
- Communications: Emails, support requests, or feedback you send us
Information collected automatically:
- Log data: IP address, browser type and version, operating system, referring URL, pages visited, and timestamps
- Device information: Device type, unique device identifiers, and screen resolution
- Usage data: Features used, session duration, frequency of use, and interaction patterns
- Approximate location: General geographic location inferred from your IP address (we do not collect precise GPS location)
Information from third parties:
- If you sign in through a third-party service (e.g., Google), we receive your name, email, and profile information as authorized by that service
2. How we use your information
We use the information we collect to:
- Provide and operate the Services — deliver AI-generated responses, maintain chat history, process API requests, and manage your account
- Improve and develop the Services — analyze usage patterns, diagnose technical issues, and enhance performance (see Section 3 for details on AI model training)
- Communicate with you — send service announcements, security alerts, and respond to support requests
- Ensure safety and security — detect, investigate, and prevent fraud, abuse, and violations of our Terms
- Comply with legal obligations — respond to lawful requests from government authorities and enforce our Terms
3. AI model training and your choices
How we use content for training. If you use the Services on a free plan, your Content may be used to train and improve our AI models. Before Content enters any training pipeline, we strip personal identifiers and de-link the data from user accounts. We do not use Content to build profiles about individual users, contact them, or market to them.
Free plan users. By using the Services on a free plan, you acknowledge and agree that your Content may be used for AI model training. This is part of the value exchange for free access to the Services.
Paid plan users. Content submitted by paid plan subscribers is not used for model training by default. Paid users who wish to contribute content to model improvement may opt in through their account settings.
API customer content. Content submitted through the Toryx API is not used for model training by default. API customers who wish to contribute content to model improvement may opt in through their API dashboard settings.
Content already incorporated into a completed training cycle cannot be selectively extracted from model parameters, but it will be excluded from all future training runs.
4. How we share your information
We do not sell your personal information. We share it only in the following circumstances:
- Service providers: We use trusted third-party vendors for hosting, payment processing, analytics, and security. These providers are contractually required to protect your data and use it only as directed by us.
- Legal requirements: We may disclose information if required by law, subpoena, court order, or government request, or if we reasonably believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- Business transfers: If Toryx is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
- With your consent: We may share information in other circumstances with your explicit consent.
5. Cookies and tracking
We use cookies and similar technologies on our website:
- Essential cookies are required for the Services to function (authentication, security, session management). These cannot be disabled.
- Analytics cookies help us understand how users interact with the Services so we can improve them. We use privacy-focused analytics tools.
Public website measurement. On our homepage, KMS page, research article and inquiry pages, optional measurement is off until you choose “Allow measurement.” With your permission, we use Google Analytics 4 for page visits, traffic sources and engagement; Plausible for aggregate website events; and the LinkedIn Insight Tag for campaign attribution, conversion measurement and aggregate professional demographics. Google and LinkedIn may use cookies or similar identifiers. This website measurement is separate from the operation of a customer-controlled Toryx appliance.
Events describe pages visited, reading progress, links clicked and whether an inquiry was started, failed or successfully submitted. We do not send your name, email address, LinkedIn profile URL or inquiry text as analytics event properties. If you submit an inquiry, the information you provide and available campaign-source labels are stored by Toryx so we can respond and understand where the inquiry came from. Reading-time and scroll signals are estimates of engagement, not proof that a person read or understood the content.
Use Tracking preferences to reject optional tracking, withdraw permission, or exclude this browser from measurement. Preferences apply to this browser and website; clearing browser storage resets them. We also honor a browser’s Global Privacy Control signal by disabling optional measurement. Changing your choice stops future optional collection; it does not erase data already received by an analytics provider. Necessary delivery, security logs and submitted inquiries continue to operate.
Our paper-link redirect records aggregate request counts by day and campaign label without a visitor identifier. Those counts can include repeat requests, bots and internal checks; they do not identify readers or measure activity after arrival at arXiv. We cannot see a named list of everyone who reads on LinkedIn or arXiv.
Provider details: Google Privacy Policy, Plausible Data Policy, and LinkedIn Privacy Policy. For questions or data requests, contact privacy@toryx.ai.
6. Data retention
We retain your personal data only as long as reasonably necessary for the purposes described in this policy:
- Account information: Retained while your account is active. After account deletion, we remove personal data within 30 days, except as required for legal, security, or fraud-prevention purposes.
- User content (chat history): Retained for your benefit while your account is active. Deleted within 30 days of account deletion or upon your request.
- API logs: Request metadata retained for up to 90 days for debugging and abuse prevention. Content payloads are not logged beyond the retention period necessary for service delivery.
- Automatically collected data: Log and usage data retained for up to 12 months, then deleted or aggregated.
When data is no longer needed, we securely delete or anonymize it.
7. Data security
We implement reasonable technical, administrative, and organizational security measures to protect your personal data against unauthorized access, loss, alteration, or destruction. These include encryption in transit (TLS) and at rest, access controls, and regular security assessments.
However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at support@toryx.ai.
8. International data transfers
Toryx is based in the United States, and your personal data is processed and stored on servers located in the United States. If you are located outside the U.S., your data will be transferred to the U.S. By using the Services, you consent to this transfer. We take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy.
9. Your rights
You have the following rights regarding your personal data:
- Access — Request a copy of the personal data we hold about you
- Correction — Request correction of inaccurate or incomplete data
- Deletion — Request deletion of your personal data, subject to legitimate legal or security exceptions
- Data portability — Request a copy of your data in a structured, machine-readable format
- Objection — Object to processing of your data based on legitimate interest, including for AI model training
- Restriction — Request that we restrict processing of your data in certain circumstances
How to exercise your rights: Email us at privacy@toryx.ai with the subject line "Data Rights Request." We will verify your identity and respond within 30 days (extendable by an additional 60 days for complex requests, with notice). These requests are free of charge.
If you are a California resident, you may also have additional rights under the California Consumer Privacy Act (CCPA). Contact us at privacy@toryx.ai for details.
10. Children's privacy
The Services are not directed at children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will promptly investigate and delete it. If you believe a child under 13 has provided us with personal information, please contact us at privacy@toryx.ai.
Users between 13 and 18 may use the Services only with parental or guardian consent, as described in our Terms of Service.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will post the revised policy with a new effective date and, where feasible, notify you by email or through the Services at least 30 days in advance. Your continued use after the effective date constitutes acceptance of the updated policy.
12. Contact us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at:
Toryx Inc
Hudson County, New Jersey
Privacy inquiries: privacy@toryx.ai
General support: support@toryx.ai
Website: www.toryx.ai