Privacy Policy

1. Introduction

Settl X, Inc. ("Settl X", "we", "us", or "our") is a Delaware C-Corp providing agentic AI compliance infrastructure for fintech and Web3/Web2.5 companies, operating through www.settlx.xyz. We take the privacy of individuals who interact with our website and services seriously.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and your rights with respect to it. It applies to:

• Visitors to our website at www.settlx.xyz (Website)
• Individuals who book a demo or otherwise contact us (Prospective Customers)
• Customers and users of our SaaS compliance platform (Platform)

2. Who We Are

Settl X is the data controller for personal information collected through our Website and demo booking process.

3. Information We Collect

3.1 Information You Provide Directly

When you book a demo or request more information through our Website, you provide us with:

• Your full name
• Your business email address
• Your company name (where provided)
• Any additional information you voluntarily include in a message or form field

This information is collected through Calendly, our third-party scheduling tool, when you click a "Book a Demo" or "Hire [Agent]" button on our Website. By booking a demo, you agree to Calendly's Privacy Policy in addition to this one.

3.2 Information Collected Automatically

We do not currently use website analytics tools, tracking pixels, or advertising cookies on www.settlx.xyz. We do not collect browsing behavior, device fingerprints, or usage analytics from Website visitors at this time.

Standard server logs maintained by our hosting provider may automatically record technical information such as IP addresses, browser type, and pages visited. This information is used solely for security and infrastructure purposes and is not used for marketing or profiling.

3.3 Platform Data (Compliance SaaS)

Our Platform is designed to process business and individual data on behalf of our Clients for KYB, KYC, KYT, sanctions screening, and related compliance workflows. This may include:

• Business registration data and ownership information
• Identity documents and verification data
• Transaction records
• Sanctions and watchlist screening data
• Adverse media and PEP (Politically Exposed Person) data

Settl X processes Platform data as a data processor acting on Client instructions. If you are an end user whose data has been processed through our Platform, please contact the fintech or financial institution that collected your data directly.

4. How We Use Your Information

We use the personal information collected through our Website for the following purposes:

• To respond to your demo request and contact you about Settl X products and services
• To schedule and conduct a product demonstration
• To send you follow-up communications related to your inquiry
• To maintain records of prospective customer interactions
• To comply with legal and regulatory obligations

We do not sell your personal information. We do not use your information for automated profiling or for advertising purposes on third-party platforms.

5. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal information under the following legal bases:

• Legitimate interests: To respond to your demo request and conduct pre-sales communications, where our interest in growing our business does not override your privacy rights.
• Consent: Where you have affirmatively opted in to receiving communications from us.
• Legal obligation: Where processing is necessary to comply with applicable law.

You may withdraw consent at any time by contacting us at punyaslok@settlx.xyz.

6. Third-Party Services and Disclosure

6.1 Service Providers

We share your personal information only with trusted third-party service providers who assist us in operating our business, subject to confidentiality obligations. Currently this includes:

• Calendly, Inc. — demo scheduling and calendar management. Calendly's Privacy Policy is available at calendly.com/privacy.

As we grow and add additional services (such as email, CRM, cloud hosting, or payment processing), we will update this section accordingly.

6.2 Legal Disclosure

We may disclose your personal information where required to do so by law, court order, regulatory authority, or governmental request. We may also disclose information where necessary to protect the rights, property, or safety of Settl X, our clients, or others.

6.3 Business Transfers

If Settl X is involved in a merger, acquisition, financing, or sale of business assets, personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

7. Data Retention

We retain personal information collected through demo bookings and contact forms for as long as necessary to pursue the legitimate business purpose for which it was collected — typically for the duration of our pre-sales relationship and for a reasonable period thereafter.

If you request deletion of your data (see Section 9), we will delete or anonymize your information unless we are required to retain it by law.

8. International Data Transfers

Settl X is incorporated in Delaware, United States. If you are located outside the United States, please be aware that your personal information will be transferred to and processed in the United States.

For individuals in the EEA or UK, we will ensure any cross-border transfer of personal data is made in compliance with applicable data protection law, including through Standard Contractual Clauses (SCCs) where required. You can request a copy of applicable transfer mechanisms by contacting punyaslok@settlx.xyz.

9. Your Privacy Rights

9.1 All Users

Regardless of your location, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your personal information
• Opt out of marketing communications at any time

To exercise any of these rights, please contact us at punyaslok@settlx.xyz.

9.2 EEA and UK Residents (GDPR)

If you are located in the EEA or UK, you additionally have the right to:

• Data portability — receive your data in a structured, machine-readable format
• Restriction of processing — request that we limit how we use your data
• Object to processing — where we rely on legitimate interests as a legal basis
• Lodge a complaint — with your local supervisory authority (e.g., the ICO in the UK)

9.3 California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, and sell
• Request deletion of your personal information
• Opt out of the sale or sharing of personal information — note: Settl X does not sell personal information
• Non-discrimination for exercising your privacy rights

To submit a California privacy request, email punyaslok@settlx.xyz with the subject line "California Privacy Request" and include your name and email address.

10. Children's Privacy

Our Website and Platform are not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact punyaslok@settlx.xyz and we will promptly delete it.

11. Data Security

We implement commercially reasonable technical and organizational measures to protect personal information from unauthorized access, disclosure, alteration, and destruction. However, no method of transmission over the internet or electronic storage is 100% secure.

Our Platform is designed with enterprise-grade security in mind. As we obtain certifications (including SOC 2, ISO 27001, and GDPR compliance frameworks), we will publish details in our Trust Center.

If you believe your personal information has been compromised, please contact us immediately at punyaslok@settlx.xyz.

12. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make material changes, we will update the Effective Date at the top of this document and, where appropriate, notify you by email.

We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact: