TONCU GROUP LLC d/b/a TonAxis
Effective: April 20, 2026 | Version 1.1 — Entity Correction Applied
1. Who We Are and How to Reach Us
TONCU GROUP LLC, an Illinois Limited Liability Company doing business under the trade name TonAxis ("TonAxis," "we," "us," "our"), operates a subscription-based income stability membership platform at www.tonaxis.com.
Principal Place of Business:
TONCU GROUP LLC d/b/a TonAxis
2413 W Algonquin Rd, Suite 333
Algonquin, IL 60102
Privacy Officer:
privacy@tonaxis.com
2. Scope
This Privacy Policy governs all personal information collected through www.tonaxis.com, the member enrollment process, the claim submission and review process, email communications, and automated data collection during use of TonAxis services.
3. Information We Collect
3.1 Identity and Contact Information
- Full legal name
- Email address
- Date of birth
- Mailing address
- Phone number
3.2 Financial Information
- Bank account information processed securely via Stripe
- Subscription payment history
- Claim submission records
- Membership tier and eligibility status
3.3 Device and Technical Information
- Device fingerprint hash
- IP address
- Browser user agent string
- Session identifiers and timestamps
4. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Membership enrollment and service delivery | Contractual necessity |
| Claim processing and payment decisions | Contractual necessity |
| Fraud detection and risk scoring | Legitimate interest |
| Recurring billing compliance | Legal obligation |
| Security and fraud prevention | Legal obligation |
5. GLBA Financial Privacy Notice
| Reason We Share | Does TonAxis Share? | Can You Limit? |
|---|---|---|
| Everyday business purposes | YES | NO |
| Marketing our membership services | YES | NO |
| Joint marketing with financial companies | NO | N/A |
| Nonaffiliates marketing | NO | N/A |
6. Information Sharing
- Stripe Inc. for payment processing and ACH payouts
- Cloud infrastructure providers for secure hosting
- Email delivery services for transactional notifications
- Cloudflare R2 for encrypted file storage
TONCU GROUP LLC does not sell, rent, lease, or trade personal information to third parties.
7. Data Security
- AES-256 encryption for stored data
- TLS 1.3 encryption for data in transit
- Multi-factor authentication for admin access
- Role-based access controls
- Regular penetration testing and vulnerability scanning
- Annual staff security training
- Written incident response procedures
8. Data Retention and Deletion
| Data Category | Retention Period |
|---|---|
| Enrollment records | Membership + 7 years |
| Claim records | Membership + 7 years |
| BIPA device fingerprint hash | Membership + 3 years |
| Technical access logs | 24 months |
9. Your Rights
- Request access to your data
- Request correction or deletion
- Opt out of non-required sharing
- Illinois BIPA legal rights
For all requests contact: privacy@tonaxis.com
10. Changes to This Policy
TONCU GROUP LLC will provide 30 days’ advance notice of material changes via email to your registered address.
11. Contact and Complaints
Privacy questions: privacy@tonaxis.com
Regulatory complaints:
FTC at reportfraud.ftc.gov
Illinois AG at illinoisattorneygeneral.gov