Privacy Policy

Last updated: September 10, 2026

This Privacy Policy explains how Cobalt | Bevly (“Cobalt,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with the Cobalt | Bevly support and operations platform at cxbolt.com and its related applications and services (collectively, the “Platform”). By accessing or using the Platform, you acknowledge that you have read and understood this Policy.

1. Who this Policy applies to

The Platform is a private, access-controlled tool for Cobalt personnel, agents, and authorized business partners. It is not directed to the general public, and access requires an account and valid credentials. This Policy applies to everyone who accesses the Platform, as well as to the merchant, client, and contact records that authorized users process through it.

2. Information we collect

Information you provide

• Account and profile information — your name, work email address, phone number, role, and login credentials.
• Authentication data — passwords (stored only in hashed form) and two-factor authentication settings and secrets.
• Content you submit — notes, messages, tickets, tasks, documents, and other records you create or upload while using the Platform.

Business and customer records processed through the Platform

• Merchant and client data — business names, contacts, merchant identifiers (MIDs), addresses, equipment, billing and subscription details, and support history.
• Communications — inbound and outbound email, call logs, chat messages, and related metadata handled within the Platform.

Information collected automatically

• Usage and device data — IP address, browser type, pages viewed, actions taken, and timestamps.
• Audit and security logs — sign-in events, failed login attempts, and records of sensitive actions, retained for security and accountability.
• Cookies and similar technologies — used to keep you signed in, remember your session, and secure the Platform (see Section 6).

Information from third parties

The Platform integrates with related Cobalt systems (for example, ach.cxbolt.com and agents.cxbolt.com) and with third-party service providers such as payment processors and communication tools. Information may flow to and from these systems to keep records consistent.

3. How we use information

• Operate, maintain, and secure the Platform and authenticate users.
• Provide support and operations services, and manage merchant onboarding, billing, equipment, and communications.
• Monitor for, investigate, and prevent fraud, abuse, unauthorized access, and security incidents.
• Maintain audit trails and comply with legal, regulatory, and contractual obligations.
• Analyze and improve the Platform's performance, reliability, and features.
• Communicate with you about your account, service changes, and security matters.

4. How we share information

We do not sell personal information. We share it only as described here:

• Within Cobalt and with authorized personnel who need it to perform their duties.
• Service providers who process data on our behalf (for example, hosting, email, payment processing, and analytics providers) under obligations of confidentiality.
• Business partners such as processors and financial institutions, as needed to deliver services related to a merchant or client.
• Legal and safety — when required by law, subpoena, or regulator, or to protect the rights, property, or safety of Cobalt, our users, or others.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

5. Data retention

We retain information for as long as your account is active and as needed to provide the Platform, and thereafter as required to meet legal, regulatory, accounting, audit, and dispute-resolution obligations. Audit and security logs may be retained for extended periods. When information is no longer required, we delete or de-identify it.

6. Cookies and tracking

The Platform uses strictly necessary cookies and similar technologies to authenticate sessions, maintain security (including CSRF protection), and remember preferences such as staying signed in. Because these are essential to how the Platform works, disabling them may prevent you from signing in or using core features.

7. Data security

We use administrative, technical, and physical safeguards designed to protect information, including encryption of stored credentials, two-factor authentication, role-based access controls, idle-session timeouts, and audit logging. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately using the details below.

8. Your rights and choices

Depending on your location and applicable law, you may have the right to access, correct, update, or delete certain personal information, or to object to or restrict its processing. To exercise these rights, contact us using the details below. Because much of the data on the Platform is processed on behalf of our business clients, we may direct certain requests to the relevant client or ask you to verify your identity before acting. We will respond consistent with applicable law.

9. Third-party links and services

The Platform may link to or integrate with third-party sites and services that we do not control. This Policy does not apply to those third parties, and we encourage you to review their privacy practices.

10. Children's privacy

The Platform is intended solely for authorized business users and is not directed to individuals under 18. We do not knowingly collect personal information from children.

11. Processing in the United States

The Platform is operated in the United States, and information is processed and stored there. If you access the Platform from outside the United States, you understand that your information will be processed in the United States.

12. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above, and material changes may be communicated through the Platform. Your continued use of the Platform after an update takes effect constitutes acceptance of the revised Policy.

13. Contact us

If you have questions or requests regarding this Privacy Policy or our data practices, contact us at support@cxbolt.com or (860) 270-0552.