Privacy Policy

Effective Date: March 19, 2026

1. SCOPE.

Wyllo LLC and its affiliates (Wyllo, we, our, or us) provide this Privacy Policy to describe how we collect, use, store, share, transfer, and process the information of individuals who visit our website at https.://www.wyllo.ai/ (Site) or otherwise interact with Wyllo in its role as a controller. This Privacy Policy also describes choices and rights you may have with respect to personal information.

Wyllo also offers services to online merchants (Merchants) to assist in identifying and preventing fraudulent transactions, fraudulent activities, policy abuse, and account takeovers. This Privacy Policy does not govern Wyllo’s data practices in its role as a processor, namely with respect to processing personal information on behalf of Merchants.

2. DATA COLLECTION.

When using our Site, you may provide information about yourself, including your name, title, company name, address, phone number, email address, log-in information, any other information you choose to provide.  For example, we collect this information when you express an interest in obtaining information about our services; request customer support; contact us; register to use our websites; sign up for or attend an event, webinar or contest;  participate in a survey; participate in any online communities or other customer interactions we facilitate, such as our customer advisory board; join our email list; download content; or interact with us for any other purpose. If you make purchases via our website or register for an event or webinar, we may also collect financial and billing information, such as billing name and address, credit card number or bank account information.

We (and other entities) automatically collect information about your interactions with us and our Site. For example, we may automatically collect information such as browser type, Internet Protocol (IP) address, device and application information, identification numbers and features, location, browser type, plug-ins, integrations, Internet service provider and/or mobile carrier, the pages and other activities on the Site, searches, referring website, app or ad, operating system, system configuration information, advertising and language preferences, date and time stamps associated with your usage, and frequency of visits to the websites, and other information we collect through the use of cookies and similar technology.  See the “Digital Advertising and Analytics” section of this Privacy Policy to learn more about the use of this information and choices available to you.

We also collect information about you from other sources including third-party providers of business contact information from whom we purchase information and from publicly available information. We may combine this and any other information we collect or receive with personal information provided by you.

3. DIGITAL ADVERTISING AND ANALYTICS.

We may partner with ad networks and other ad serving providers (Advertising Providers) that serve ads on behalf of us and others on non-affiliated platforms. Some of those ads may be personalized, meaning that they are intended to be relevant to you based on information Advertising Providers collect about your use of the Site and other sites or apps over time, including information about relationships among different browsers and devices. This type of advertising is known as interest-based advertising.  

You may visit the DAA Webchoices tool at www.aboutads.info/choices to learn more about this type of advertising and how to opt out of this advertising on websites by companies participating in the DAA self-regulatory program.  You can also exercise choices regarding interest-based advertising on your mobile device by downloading the appropriate version of the DAA’s AppChoices tool at https://youradchoices.com/appchoices.

If you delete your cookies or use a different browser or mobile device, you may need to renew your opt-out choices exercised through the DAA Webchoices tool.  Note that electing to opt out will not stop advertising from appearing in your browser or applications.  It may make the ads you see less relevant to your interests. 

We may also work with third parties that collect data about your use of the Site and other sites or apps over time for non-advertising purposes.  Wyllo uses Google Analytics and other third-party services to improve the performance of the Site and for analytics and marketing purposes.  For more information about how Google Analytics collects and uses data when you use our Site, visit www.google.com/policies/privacy/partners, and to opt out of Google Analytics, visit tools.google.com/dlpage/gaoptout.

Additionally, your browser may offer tools to limit the use of cookies or to delete cookies; however, if you use these tools, our Site may not function as intended.

4. USES.

We may use information for any lawful purpose, including the following:

a. Site and Service Operation. We process personal information to operate our Site and provide our services to you;

b. Contact and User Support. If you request support, or if you contact us by other means, including via a phone call, webform, we process personal information to fulfil your requests and otherwise communicate with you;

c. Improvement and Enhancement. We process personal information to analyze trends, to track your usage of and interactions with our Site and services, and for other analytics purposes, including to improve, personalize, or enhance our Site and services and provide our users and Merchants with more relevant service offerings;

d. Payments. We process personal information for verification purposes, to collect and process payments, and otherwise to complete our transactions with you;

e. Security. We process personal information to track use of our Site and the services, verify accounts and activity, investigate suspicious activity, and enforce our terms and policies, including to promote the safety and security of the website and the services provided by Merchants, and to protect our rights and the rights of others (including Merchants);

f. Customer Opportunities. We process personal information to assess new potential customer opportunities;

g. Personalized Advertisements. We process personal information to conduct marketing research, advertise to you, and provide personalized advertising on and off our websites based upon your activities and interests;

h. Marketing Communications. We process personal information to send you marketing information, product recommendations, and other non-transactional communications about us and partners, including information about our products, promotions or events;

i. Managing Contests or Promotions. If you register for a contest or promotion, we process personal information to conduct the contest or promotion, including prize distribution, and to communicate with participants;

j. Managing Event Registrations and Attendance. We process personal information to plan and host events or webinars for which you have registered or that you attend, including sending related communications to you;

k. Legal Obligations. We process personal information when cooperating with public and government authorities, courts, or regulators in accordance with our legal obligations under applicable laws to the extent this requires the processing or disclosure of personal information to protect our rights or the rights of our Merchants;

l. Deidentified or Aggregated Data. We may use information that has been deidentified or aggregated without limitation; or

m. Consent. We may process personal information with your consent, or as otherwise disclosed at the time information is collected.

5. DISCLOSURE AND SHARING.

We may share the information we collect with other parties, including the following:

a. Service Providers. With third-party service providers, who process information on our behalf to provide services, such as IT and system administration and hosting, payment processing, data enrichment, research and analytics, marketing, and customer support, or with our legal or business advisors;

b. Our Affiliates. With affiliates within our corporate group, to the extent such sharing of data is necessary to fulfill a request or provide our services;

c. Co-Marketing. With trusted third parties to provide co-marketing content that we think may be relevant to you, when you direct us to share your information.

d. Event Sponsors. If you attend an event or webinar organized by us, or download or access content, we may share personal information with sponsors of the event. If required by applicable law, you may consent to such sharing via the registration form or by allowing your attendee badge to be scanned at a sponsor booth. In these circumstances, your information will be subject to the sponsors’ privacy statements;

e. Contest and Promotion Sponsors. With sponsors of contests or promotions for which you register;

f. Advertising Partners. With Advertising Partners (as defined above), so that we can market and advertise on third-party platforms and websites;

g. Change in Ownership. To a successor, if we are involved in an actual or potential corporate sale, merger, reorganization, acquisition or other corporate change, or other transfer of all or part of our assets, including as part of a banking proceeding;

h. Legal Requirements. We may be required by law to disclose personal information pursuant to a subpoena, court order, governmental inquiry, or other legal process or as otherwise required by law;

i. Safety and Security. We may disclose personal information to protect our rights or the rights of third parties, or to protect the safety or security of any person or entity; or

j. Consent. We may disclose personal information with your consent or as otherwise disclosed at the time of data collection or sharing.

We may disclose information that has been deidentified or aggregated without limitation.

6. THIRD-PARTY LINKS AND TOOLS.

The Site may provide links to third-party websites or apps.  We do not control the privacy practices of those websites or apps, and they are not covered by this Privacy Policy.  You should review the privacy policies of other websites or apps that you use to learn about their data practices.

The Site also includes integrated tools or “plug-ins,” such as social networking tools offered by third parties.  If you use these tools to share personal information or you otherwise interact with these features on the Site, those companies may collect information about you and may use and share such information in accordance with your account settings, including by sharing such information with the general public. 

Your interactions with third-party companies and your use of their features are governed by the privacy policies of the companies that provide those features.  We encourage you to carefully read the privacy policies of any accounts you create and use.

7. DATA STORAGE AND SECURITY.

a. Data Security. We use a variety of physical, technical, and organizational measures designed to help protect personal information from unauthorized access, use or disclosure. While we use security measures to help protect against the loss, misuse, and alteration of personal information under our control, there is no guarantee that it cannot be compromised.

b. Retention of Personal Information. How long we keep information we collect about you depends on the type of information and how we collect and store it. We retain personal information that you provide to us where we have an ongoing legitimate business need to do so. For example, we retain personal information in identifiable form for as long as necessary to fulfill the purposes for which the personal information was provided to us or, if for longer, to comply with legal obligations, to resolve disputes, to enforce agreements, or to satisfy any essential similar purposes. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information, the purposes for which we process the personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.

If you have elected to receive marketing communications from us, we retain information about your marketing preferences for a reasonable period of time from the date you last expressed interest in our content, products, or services, such as when you last opened an email from us or ceased using your Wyllo account. We retain information derived from cookies and other tracking technologies for a reasonable period of time from the date such information was created.

When we have no ongoing legitimate business need to process personal information, we delete the information or deidentify it or, if this is not possible, store personal information and isolate it from any further processing until deletion is possible.

8. YOUR CHOICES.

Marketing. If you change your mind about being sent marketing emails, you may unsubscribe from our marketing communications through one of the following methods:

• by clicking on the “unsubscribe” link located on the bottom of our emails;
• updating your communication preferences; or
• by contacting us here or info@wyllo.ai.

If you opt out of our email marketing, we will still send you messages related to our transactions and relationship with you, such as order confirmations.

For choices with respect to third-party interest-based advertising activities, please see the “Digital Advertising and Analytics” section above.

9. ADDITIONAL INFORMATION FOR EU AND UK USERS.

This section applies to individuals who access our Site or services from the European Economic Area (“EEA”), Switzerland, or the United Kingdom (“UK”).

a. Transfer. As you register on our Service, personal information may be collected, transferred to and stored by us, our affiliates and other third parties disclosed in this Privacy Policy outside of your country or jurisdiction. Such countries and jurisdictions may not be subject to an adequacy decision by the European Commission or your local legislature or regulator, and such countries or jurisdictions may not provide for the same level of data protection as your country or jurisdiction. However, we ensure that such recipients of personal information either offer an adequate level of protection and security, or will have entered into applicable standard contractual clauses or an alternative mechanism for the transfer of data as approved by the European Commission (Art. 46 GDPR) or other applicable regulators or legislators. 

b. Rights. Individuals from the EEA, Switzerland, and the UK have the following rights:

1. 1. To request access to the personal information we hold about you;
   2. To request that we rectify inaccurate personal information about you;
   3. To request that we erase personal information about you;
   4. To request that we restrict the processing of personal information about you, under certain conditions;
   5. To request that we transfer personal information about you to another, or directly to you, in a commonly used, machine readable format;
   6. Where we previously obtained your consent to processing of personal information, to withdraw consent to processing such personal information; and
   7. To make a complaint to us if you believe that there has been an infringement of these rights.

To exercise these rights, contact info@wyllo.ai. Please be aware that we may be unable to afford these rights in certain circumstances, if we are legally prevented from doing so.

Additionally, you have the right to lodge a complaint against us. To do so, contact the supervisory authority in your country of residence.

10. CALIFORNIA PRIVACY RIGHTS.

The California Consumer Privacy Act (CCPA) grants California residents certain rights with respect to personal information we collect. If you are a California resident, this section of the Privacy Policy contains disclosures required by law and explains rights that may be available to you.

a. Personal Information We Collect and Disclose. We have collected and disclosed the following categories of personal information in the past 12 months:

• • Personal and online identifiers, such as name, e-mail address, mailing address, phone number, log-in information, or unique online identifiers;
  • Recordkeeping information, such as bank account number, credit card number, debit card number, or other financial or billing information;
  • Commercial information, such as records of products or services purchased, obtained, or considered;
  • Internet or other electronic network activity information, such as browsing history, search history, or interactions with a website, email, application, or advertisement;
  • Geolocation data, such as non-precise location derived from IP address;
  • Audio, electronic, visual, thermal, olfactory, or similar information, such as call recordings;
  • Professional or employment-related information, such as your title or company name;
  • Inferences drawn from the above information about your predicted characteristics and preferences.
  • Other information about you that is linked to the personal information above.

Some of the categories of personal information listed above are considered sensitive personal information under the CCPA. Specifically, we collect log-in credentials, financial account number, and debit or credit card number. We do not use or disclose “sensitive personal information”, as defined by the CCPA, for purposes other than those specified in the CCPA that do not require an opt-out opportunity. 

b. Categories of Sources. We collect personal information from the following categories of sources:

• • You;
  • Our affiliates and business partners;
  • Merchants;
  • Our service providers;
  • Third-party data providers (such as providers of business contact information); and
  • Advertising companies and networks.

c. Our Purposes for Processing Personal Information. We use and disclose the personal information we collect for business and commercial purposes as further described in the “Uses” section of this Privacy Policy.

We may use and share deidentified information to the extent permitted by applicable law. When we use deidentified information, we maintain and use the information in deidentified form and do not attempt to reidentify it, except to check whether our deidentification processes satisfy the requirements of applicable law.

d. Recipients of Personal Information. We disclose the categories of personal information designated above to the categories of third parties listed in the “Disclosure and Sharing” section of this Privacy Policy for commercial and business purposes.

We share personal information for cross-context behavioral advertising purposes but do not otherwise engage in “sales” of personal information as defined by the CCPA. Additionally, we do not knowingly sell or share personal information of individuals under 16. Specifically, in the past 12 months, we have disclosed the following categories of personal information to third-party business partners—such as advertising networks—for advertising and marketing purposes, including cross-context behavioral advertising:

• • Identifiers;
  • Internet or other similar network activity;
  • Non-precise geolocation data; and
  • Inferences drawn from other personal information (excluding any information that may be considered sensitive under the CCPA).

e. Retention. The period of time for which we retain this information is described in the “Data Storage and Security” section of this Privacy Policy.

f. Your Rights. California residents have rights with respect to the personal information we collect. You may be able to exercise the following rights regarding personal information, subject to certain exceptions and limitations:

• • The right to know the categories and specific pieces of personal information we collect, use, disclose, and sell about you; the categories of sources from which we collected personal information about you; our purposes for collecting, selling, or sharing personal information about you; the categories of personal information about you that we have sold or disclosed for a business purpose; and the categories of third parties with which we have shared personal information;
  • The right to correct inaccurate information that we maintain about you;
  • The right to request that we delete the personal information we have collected from you;
  • The right to opt out of the sale or sharing of personal information for cross-context behavioral advertising; and
  • The right not to be retaliated against for the exercise of the above privacy rights.

Opt-out Preference Signals: Certain mechanisms or technologies, such as Global Privacy Control (GPC), may be used to signal your opt-out preferences to entities that process personal information. To the extent that we are able to recognize these signals and they are legally sufficient, we process these signals as requests to opt out of the sale and/or sharing of personal information for cross-context behavioral advertising. Depending on the signal you select, the opt-out may apply to only certain interactions, such as on a specific a browser or device. You may select and install a mechanism or technology to send opt-out preference signals of your choice per the provider’s instructions.

To exercise your opt-out right, click “Do Not Sell or Share My Personal Information” or enable Global Privacy Control (GPC).

To exercise your other rights regarding your personal information, please contact us using the following information and submit the required verifying information, as further described below:

• By completing our webform
• By calling us at 888-773-3669

g. Verification Process and Required Information. We may need to request additional information from you to verify your identity or understand the scope of your request. You will not be required to create an account with us to submit a request or have it fulfilled. We will require you to provide, at a minimum, basic contact information like your name and email address.

h. Authorized Agent. You may also designate an authorized agent to make requests on your behalf by designating such an agent in writing or through a power of attorney. An authorized agent can make a request on your behalf using the submission methods described above. We will require the agent to provide us with proof that you have authorized the agent to make requests on your behalf prior to accepting requests from the agent, and we may require you to either verify your identity or directly confirm that you provided the agent permission to submit the request.

11. OTHER TERMS.

a. Contact Information. If you have questions or concerns regarding this Privacy Policy or our privacy practices, please email us at: info@wyllo.ai, call us at: 888-773-3669, or mail us at 228 Park Ave S, PMB 17422, New York, New York 10003-1502 US.

b. Revisions to this Policy. We may change this policy at any time and changes will be posted on this page. Please check back frequently to see any updates or changes to our policy.