Privacy Policy

1. Who We Are

Doxzo (doxzo.com) is an affiliate marketplace that connects game developers with creators and promoters, who earn commission by sharing tracking links to developers' offers. This policy explains what personal data Doxzo collects through the Platform, why, and how you can control it.

2. Account Creation & Sign-In

Doxzo offers two ways to create an account and sign in, both authenticated through our backend provider, Supabase Auth: with an email address and password, or with Sign in with Google.

If you sign in with email and password, we collect and store your email address solely to create your account, verify your identity when you sign in, and communicate with you about your account. Your password is never stored by Doxzo in plain text — it is handled and hashed by Supabase Auth on our behalf.

When you sign in using Google OAuth, we receive your primary email address, full name, and avatar/profile picture via Supabase Auth, once you grant permission on Google's own consent screen. This data is collected solely for account creation, identity verification, and profile personalization on Doxzo, and is never sold or used for advertising. We do not request or receive any other data from your Google account, such as your contacts, calendar, or files.

If we add another third-party sign-in option in the future, we will update this section before that feature goes live to disclose exactly what additional information it would collect, and for what purpose.

3. Other Information We Collect

Beyond your account email, we collect:

• Offer & link data — offers you publish as a developer, and the tracking links and referral codes you generate as a promoter.
• Click & conversion data — when someone uses one of your tracking links, we log the click and any resulting conversion, including IP address and user agent, to attribute it to the correct promoter and offer and to detect fraudulent activity.
• Financial & payout information — subscription billing details (processed by Stripe; we never see or store your full card number), and, if you request a payout, the bank or payout-provider details (e.g. PayPal, Wise, or Coinbase) needed to send it to you.
• Essential cookies — used only to keep you signed in. Doxzo does not use advertising or cross-site tracking cookies; the referral identifier in a tracking link lives in the link itself, not in a cookie placed on a visitor's browser.

4. How We Use Your Information

We use the information above to operate the Platform: authenticating your account, attributing clicks and conversions to the correct promoter and offer, calculating and crediting commissions and payouts, enforcing plan-tier limits and escrow requirements, preventing fraud and abuse, and communicating with you about your account or transactions.

5. Third-Party Data Use & Sharing

We never sell your personal data to third parties, and we never use it for third-party or external advertising. We share personal data only with the essential infrastructure providers that Doxzo itself runs on, and only to the extent each needs it to do its job:

• Supabase — our database and authentication provider; it stores the account, offer, and tracking data described above on our behalf.
• Stripe — our payment processor; it handles subscription billing and card details directly, and never shares your full card number with us.
• Payout providers (PayPal, Wise, Coinbase, or your bank) — only when you request a withdrawal, and only with the details needed to send that specific payment to you.

We may also disclose information if required to do so by law, or to protect the rights, property, or safety of Doxzo, our users, or the public.

Google isn't listed above because it isn't a destination we send your Doxzo data to — it's the source of the sign-in information described in Section 2, shared with us only if and when you choose “Sign in with Google.”

6. Data Retention

We retain account, offer, and transaction data for as long as your account is active, and afterward only as needed to satisfy legal, accounting, or fraud-prevention obligations (for example, records of completed payouts).

7. Your Rights & Requesting Account/Data Deletion

You may request access to, correction of, or deletion of your personal data at any time, subject to our legitimate need to retain records of completed transactions (for example, for tax or fraud records) for a limited period after deletion.

To request deletion of your account and personal data, email deesaradewmina2007@gmail.com from the email address associated with your account, with the subject line “Account & Data Deletion Request.” We will confirm receipt and complete the deletion within a reasonable time, generally within 30 days, except for the limited transaction records described above.

8. Security

We rely on our infrastructure providers' security controls (including Supabase's database encryption and access controls, and Stripe's PCI-compliant payment handling) and our own access restrictions to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Platform is not directed to children and is not knowingly used to collect personal data from children.

10. Changes to This Policy

This policy may be updated as the Platform evolves — for example, before we add a new sign-in method or payout provider. Material changes will be reflected by updating the “Last updated” date at the top of this page.

11. Contact Us

Questions about this policy, or any privacy request other than deletion (see Section 7), can be directed to deesaradewmina2007@gmail.com.