Privacy Policy

Introduction

At Taco, we respect your privacy and are committed to protecting your information. As a non-custodial, AI-powered decentralized trading interface, Taco does not hold, manage, or have access to users’ assets, private keys, or transaction data.

We follow strict data-minimization principles — collecting and processing only what is absolutely necessary to operate and secure our Services.

This Privacy Policy explains how Taco (“we,” “our,” or “us”) collects, uses, stores, and protects limited information when you access our website, decentralized application, APIs, or any related products and services (collectively, the “Services”).

By using Taco, you confirm that you have read, understood, and agreed to this Privacy Policy.

Data Controller and Contact Information

Taco is the data controller responsible for processing your information. If you have any questions about this Privacy Policy or our data practices, please contact us at: support@tacolabs.io

Information We Collect and How We Use It

Taco collects only non-identifiable network data (IP addresses) that are technically necessary for the safe and lawful operation of our Services.

We do not collect wallet information, private keys, on-chain transaction data, personal identifiers, or financial information.

The only data we process is your IP address, used exclusively for the following legitimate purposes:

• Security and Abuse Prevention — Detecting and preventing fraud, malicious activity, and denial-of-service attacks.
• Regulatory and Geolocation Compliance — Restricting access from prohibited jurisdictions as required by law and compliance obligations.
• Network Optimization — Routing traffic efficiently to improve user experience.
• Statistical and Analytical Purposes — Generating anonymized usage metrics to improve platform performance.

This limited processing is carried out under our legitimate interests in maintaining security, service reliability, and regulatory compliance.

Anonymized and Aggregated Data Usage

Taco may use aggregated or anonymized data to analyze general usage patterns, improve product features, and enhance system performance.

Such data is irreversibly de-identified, ensuring that no individual user can be identified.

Examples include:

• Measuring total website visits and session durations;
• Researching performance bottlenecks;
• Evaluating adoption trends.

No profiling or behavioral tracking is conducted.

Data Retention

We retain your IP address only for as long as necessary to provide our Services, fulfill the purposes stated in this Privacy Policy, and comply with legal requirements.

Data Sharing and Disclosure

We do not sell, rent, or trade user data.

We may share limited technical data (e.g., IP addresses) only with:

• Infrastructure or security service providers, who process it strictly under our instructions;
• Regulatory or legal authorities, if required by applicable law; or
• Cloud and analytics partners, solely for service monitoring or performance purposes.

All third parties are contractually bound to maintain confidentiality and comply with applicable data-protection laws.

Your use of external third-party services (such as connected wallets, DEX protocols, or block explorers) will be governed by their respective privacy policies, not Taco’s.

International Transfers of Personal Data

We may transfer your IP address to affiliates, third-party partners, and service providers globally. Taco implements appropriate safeguards (including Standard Contractual Clauses) to ensure compliance with applicable data protection laws.

Data Security

Taco employs reasonable and proportionate security measures — both technical and organizational — to protect your data against unauthorized access, misuse, disclosure, alteration, or destruction.

Measures include:

• Network-level security and intrusion detection;
• Access-control and encryption practices;
• Regular internal security audits.

However, no system can guarantee absolute security. You acknowledge that interactions with decentralized networks inherently carry risk.

Your Privacy Rights

Subject to applicable law, you have rights concerning your personal data. To exercise these rights, please contact us atsupport@tacolabs.io

Children's Privacy

Taco’s Services are not directed toward minors.

We do not knowingly collect or process data from individuals under 18 years of age (or the relevant minimum age in your jurisdiction).

If you believe a child has provided data to Taco, please contact us immediately for prompt deletion.

Revisions to Our Privacy Notice

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our operational practices.

When updates occur, the revised version will be published on our website with an updated “Last Updated” date.

Continued use of Taco after such revisions constitutes acceptance of the updated Policy.

Governing Law and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of the British Virgin Islands (BVI).

Any disputes or claims arising out of or in connection with this Policy shall be submitted to the exclusive jurisdiction of the courts of the British Virgin Islands.