Privacy Policy

PaxLabs Inc ("PaxLabs", "we", "us", "our") is a research and engineering company incorporated in Delaware, USA. This Privacy Policy describes how we handle personal information in the course of operating our public websites, corresponding with you, and running our business.

We wrote this policy to be understood, not to be impenetrable. If any section is unclear, write to privacy@paxlabs.inc and we will explain it.

1. Who we are

The controller of your personal information is PaxLabs Inc, a Delaware (USA) corporation. Where we mention "our affiliates" we mean the Paxeer Foundation (our non-profit subsidiary) and any other entity under common control with PaxLabs.

For questions regarding this policy or the exercise of your rights, our Privacy Desk is reachable at privacy@paxlabs.inc.

2. Scope of this policy

This policy applies to personal information we process when you:

• Visit paxlabs.inc or any sub-domain operated by us;
• Email us at an @paxlabs.inc address;
• Apply to a role or submit a press request;
• Engage with us as a counterparty, vendor, or partner.

This policy does not cover the Paxeer Network blockchain itself. Transactions on Paxeer, HyperPaxeer, or any affiliated chain are public, pseudonymous, and permanent by design. We do not control — and cannot delete — information that you publish to a public blockchain.

3. Information we collect

3.1 Information you provide directly

• Contact data. Name, email address, organisation, job title, and the contents of your message when you email us or respond to correspondence.
• Application data. Résumé, cover letter, portfolio links, references, and other materials submitted in connection with employment, contracting, or grant applications.
• Commercial data. Information submitted during partnership, vendor, or counterparty on-boarding — including entity information and authorised-signatory details.

3.2 Information collected automatically

• Log data. IP address, user-agent string, referer URL, pages viewed, and timestamps. Retained for security, fraud prevention, and aggregate traffic analysis.
• Cookies and similar technologies. See our Cookie Policy for the categories used, retention, and opt-outs.

3.3 Information we do not collect

• We do not operate an end-user account system on paxlabs.inc. No passwords, no KYC, no financial account data is collected from this site.
• We do not purchase marketing lists. We do not enrich your profile with data from data brokers.
• We do not collect biometric identifiers or precise geolocation.

4. How we use information

We process personal information to:

1. Respond to your messages and fulfil the purpose for which you sent them;
2. Evaluate job applications and communicate with candidates;
3. Operate and secure our websites, including preventing abuse;
4. Comply with legal, tax, accounting, and regulatory obligations;
5. Exercise or defend our legal rights, including in disputes;
6. Analyse aggregate traffic to understand how the site is used.

We do not engage in automated decision-making that produces legal or similarly significant effects concerning you.

5. Legal bases (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases:

• Consent — for non-essential cookies and analytics where required by law. You may withdraw consent at any time.
• Contract — to take steps at your request prior to entering a contract, and to perform a contract with you.
• Legitimate interests — to operate and secure our sites, evaluate applications, respond to press and partnership requests, and defend legal claims. These interests are balanced against your rights.
• Legal obligation — to comply with applicable law, sanctions regimes, and binding legal process.

6. Sharing & processors

We share personal information only in these situations:

• Service providers (processors). Vendors that host our site, deliver our email, run our analytics, or otherwise process data on our behalf, bound by written agreements restricting use to our instructions. Core processors include a cloud hosting provider, a transactional email provider, and an analytics provider.
• Affiliates. The Paxeer Foundation and other affiliated entities, where necessary to operate our research, grant, or ecosystem programmes.
• Professional advisors. Auditors, lawyers, accountants, and insurers, subject to confidentiality.
• Legal process. Where compelled by valid legal process, or where we believe in good faith that disclosure is necessary to protect our rights, the rights of our users, or the public.
• Corporate transactions. In connection with a merger, acquisition, financing, or sale of all or part of the business, with protections consistent with this policy.

We do not sell personal information. See our Do Not Sell page.

7. International transfers

We are headquartered in the United States. When we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland to countries that have not received an adequacy decision, we rely on appropriate safeguards — principally the European Commission's Standard Contractual Clauses, supplemented by additional technical and organisational measures where required.

8. Retention

We retain personal information for only as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our default retention schedule is:

• Inbound correspondence: up to 36 months after last contact.
• Unsuccessful applications: up to 24 months, unless you request earlier deletion.
• Log data: up to 12 months.
• Records required by law: for the period mandated by applicable law.

9. Security

We apply administrative, technical, and physical safeguards designed to protect personal information — including encryption in transit, access controls, least-privilege access, and vendor due-diligence. No system is perfectly secure; we cannot guarantee absolute security of information transmitted to or from us.

10. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Delete personal information, subject to legal retention obligations;
• Restrict or object to certain processing;
• Receive a copy of your information in a portable format;
• Withdraw consent where processing is based on consent;
• Opt out of the "sale" or "sharing" of personal information — we do not engage in either, but you may still submit a request;
• Opt out of targeted advertising — we do not engage in this activity;
• Lodge a complaint with your supervisory authority.

To exercise any right, email privacy@paxlabs.inc from the address associated with your request. We verify requests by matching the sending address to the address on file and, where necessary, requesting additional information. We respond within 30 days (45 days for complex requests, with notice).

You may also designate an authorised agent to act on your behalf by providing written authorisation signed by you.

11. Children's data

Our services are directed at professionals and are not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us and we will delete it.

12. Third-party sites

Our sites link to external resources — research papers, source repositories, and ecosystem protocols. We are not responsible for the privacy practices of those third parties. Review their policies before providing information.

13. Changes to this policy

We update this policy from time to time. Material changes will be indicated by a new "Effective" date at the top of this page and, where appropriate, by a prominent notice on the site. Continued use of our services after the effective date constitutes acceptance of the updated policy.

14. Contact the privacy desk

To reach the PaxLabs Privacy Desk:

• Email: privacy@paxlabs.inc
• Postal: PaxLabs Inc, Attn: Privacy Desk, Delaware, USA (full postal address available on request).

For users in the European Economic Area or the United Kingdom, you may also contact your local supervisory authority.