Privacy Policy | Toyo Robotics Americas

1 Information We Collect

We collect information depending on how you interact with our website, engineering tools, and commercial portals:

Personal & Commercial Inquiry Information

Name, corporate email address, phone number, company name, job title, and geographic location.
Technical application requirements, part configurations, and project details voluntarily provided through contact forms, Request for Quote (RFQ) submissions, or direct email communications.

B2B Distributor Partner Portal & Account Data

Authentication & Profile Records: For authorized channel partners using our Distributor Partner Portal (powered by Supabase), we collect and maintain your corporate email address, first and last name, encrypted password credentials, partner account tier metadata, and profile update timestamps.
Session & Security Logs: Authentication tokens, login timestamps, one-time password (OTP) verification events, and time-limited signed file download requests for gated commercial assets.

Product Reviews & Engineering Feedback

Information you voluntarily submit through our on-page Product Reviews system, including reviewer name, company or engineering role, product series evaluated, star rating, and written review content.

Automatically Collected Information

IP address, browser type and version, device identifiers, operating system, and screen resolution.
Pages visited, time spent on pages, clickstream behavior, on-site search queries (via Google Programmable Search), and referring URLs or campaigns.

Cookies, Analytics Tags & Local Storage Technologies

We use cookies, tracking pixels, and browser storage technologies to operate our platform, secure partner sessions, and analyze B2B engagement:

Google Tag Manager (GTM) & Google Analytics: Used to manage website tags and collect aggregated, anonymized insights into site traffic, page performance, and engineering tool usage.
LinkedIn Analytics (LinkedIn Insight Tag): Used to measure B2B campaign effectiveness, track website conversions from LinkedIn, and understand aggregate professional demographics of visitors interacting with our industrial automation content.
Browser Local Storage (localStorage): Used by our Supabase authentication module to maintain active Distributor Partner Portal sessions and enforce our automated 60-minute inactivity security timeout.

2 How We Use Your Information

We use the information we collect to:

Respond to your engineering inquiries, generate part number configurations, and provide technical and commercial support.
Send requested product catalogs, CAD documentation, formal quotations, and technical updates.
Authenticate authorized distributor partners, display authorized online pricing and lead times, and generate secure, time-expiring download links for gated resources.
Moderate and publish verified product reviews submitted by customers and automation engineers.
Improve our website, sizing calculators, and digital services through traffic and conversion analytics (via Google Analytics and LinkedIn Analytics).
Manage commercial customer and distributor relationships using Zoho CRM.
Comply with applicable legal, export control, tax, and regulatory obligations.

3 How We Share Your Information

We do not sell your personal information to third parties. We share your information only in the following operational and legal circumstances:

With our Corporate Partner, TOYO Automation: We may share your information with our parent and manufacturing partner, TOYO Automation Co., Ltd., based in Taiwan, and its affiliates, for engineering sizing, custom multi-axis manufacturing, order fulfillment, and warranty support.
Authorized Regional Distributors: When you request local sales support or a commercial quote, we may share your inquiry details with the authorized North American TOYO distributor assigned to your territory.
Infrastructure, CRM & Analytics Service Providers: We engage trusted third-party service providers who process data on our behalf under strict confidentiality and security obligations:
- Supabase, Inc.: Provides cloud PostgreSQL database hosting, Row-Level Security (RLS), B2B Distributor Partner Portal authentication, private bucket storage, and product review storage.
- Zoho Corporation: Provides Customer Relationship Management (Zoho CRM) and lead routing for contact and quote forms.
- Google LLC: Provides Google Tag Manager, Google Analytics, and Google Programmable Search Engine services.
- LinkedIn Corporation: Provides B2B conversion tracking and audience analytics via the LinkedIn Insight Tag.
In Connection with Business Engagements: We may share certain business contact and technical project information with enterprise partners—such as PowerCo SE, the battery division of Volkswagen—with whom we have entered into mutual non-disclosure agreements (NDAs), strictly limited to component selection, standardization, and approved release lists for production lines.
Legal & Compliance Requirements: When required by law, subpoena, court order, export compliance audit, or governmental request.

4 Data Storage and Security

Your information may be stored and processed in the United States, Taiwan, or other jurisdictions where our cloud infrastructure providers (including Supabase, Zoho, and Google) or corporate partners operate.

We implement industry-standard administrative, technical, and physical safeguards—including SSL/TLS encryption in transit, Supabase Row-Level Security (RLS) policies, 60-second expiring signed URLs for private partner documents, and automated 60-minute session inactivity timeouts—to protect your personal identifiable information (PII) and commercial account data. While we maintain rigorous security standards, no method of electronic transmission or storage over the internet is 100% guaranteed secure.

5 Your Rights and Choices

Depending on your jurisdiction (including applicable California privacy laws), you have the right to:

Access, Update, or Delete Your Data: Request access to, correction of, or deletion of your personal information. Authorized distributor partners may also update their profile name and account password directly within the Distributor Partner Portal.
Opt Out of Marketing Communications: Unsubscribe from promotional emails or newsletters at any time.
Manage Cookies & Analytics Tracking:
- You can configure your browser settings to block or clear cookies and local storage (note: disabling localStorage or essential cookies may prevent login to the Distributor Partner Portal).
- You may opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
- You may manage or opt out of LinkedIn analytics and targeted B2B advertising through your LinkedIn Ad Settings.

To exercise any of your privacy rights, please contact us using the details in Section 8 below.

6 Children’s Privacy

Our website and industrial B2B services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

7 Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our digital platform, third-party integrations, or legal requirements. We will post any updates on this page and revise the Effective Date at the top of the document.

8 Contact Us

If you have any questions about this Privacy Policy or our data protection practices, please contact us at:

TOYO Robotics Americas Corp.
637 Peralta Ave
San Francisco, CA 94131, USA

Email: support@toyorobotics.com

Website: www.toyorobotics.com