We collect information you provide directly, such as your name, business email address, company name, and message content when you contact us, request a demo, or subscribe to updates. We also collect information automatically when you use our Services, including IP address, browser and device type, pages visited, referring URLs, and timestamps, typically through server logs and cookies or similar technologies. If you are a customer of Vaelo or Messra, we may additionally process transactional, account, and usage data as described in your applicable customer agreement.

We use information to operate, maintain, and improve the Services; respond to inquiries and provide support; communicate about products, updates, and security notices; detect and prevent fraud, abuse, and security incidents; comply with legal obligations; and, where you have consented, send marketing communications. We do not sell personal information, and we do not use it to make automated decisions that produce legal or similarly significant effects about you.

Where the General Data Protection Regulation applies, we rely on one or more of the following legal bases: performance of a contract with you, our legitimate interests in operating and securing our business (balanced against your rights), compliance with a legal obligation, and your consent, which you may withdraw at any time. Contact us using the details below to ask which basis applies to a specific processing activity.

We share information with service providers who process it on our behalf, such as hosting, analytics, communications, and payment infrastructure providers, under confidentiality and data protection obligations. We may also disclose information to comply with applicable law, respond to lawful requests from public authorities, protect the rights and safety of TTG and others, or in connection with a merger, acquisition, financing, or sale of assets. We do not share information with third parties for their own independent marketing purposes.

TTG operates globally, and information may be transferred to, stored in, and processed in countries other than the one in which it was collected, including the United States. Where we transfer personal information out of the European Economic Area, the United Kingdom, or Switzerland, we rely on recognized transfer mechanisms, such as the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum, to protect that information.

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including to provide the Services, comply with legal, accounting, or reporting obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we securely delete or anonymize it.

Depending on where you live, you may have the right to access, correct, delete, or port your personal information, restrict or object to certain processing, and withdraw consent previously given. Residents of the European Economic Area, the United Kingdom, and Switzerland have these rights under the GDPR and may lodge a complaint with their local supervisory authority. Residents of California and other U.S. states with comprehensive privacy laws have similar rights under statutes such as the California Consumer Privacy Act, including the right to know what personal information we collect and to opt out of the sale or sharing of personal information; TTG does not sell or share personal information as those terms are defined under such laws. To exercise any of these rights, contact us using the details in Section 11; we will not discriminate against you for doing so.

We use cookies and similar technologies to operate our website, remember preferences, and understand how the Services are used. Where required by law, we will request your consent before setting non-essential cookies and provide a mechanism to withdraw that consent. You can also control cookies through your browser settings, though disabling them may affect site functionality.

We maintain administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Our Services are directed at businesses and are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

We may update this Policy from time to time; material changes will be reflected by a revised effective date above. To exercise your rights or ask questions about this Policy, contact us at contact@tolberttechnologiesgroup.com or write to Tolbert Technologies Group, 1395 Brickell Ave, Miami, FL 33131, USA.