Privacy Policy

1.1 Information You Provide Directly

• Account registration: email address, username, display name, and password (stored as a hashed credential via Supabase Auth).
• Profile information: optional biography, profile picture, company name, website URL, location, and social media links.
• Seller applications: full legal name, business name, tax residency country, payout method and account details, and tool/product descriptions.
• Listings: tool titles, descriptions, URLs, pricing, and promotional materials you submit for publication.
• Freelancer profiles: skills, portfolio items, hourly rates, and work history.
• Communications: messages sent to other users, support tickets, blog posts, and forum posts in The Grid.
• Financial information: payout account details (PayPal email, Wise account, cryptocurrency wallet address, or bank contact information). We do not store full payment card numbers; card processing is handled by our payment processor, Stripe.

1.2 Information Collected Automatically

• Usage data: pages visited, features used, links clicked, tools viewed, searches performed, and time spent on the Platform.
• Device and technical data: IP address, browser type and version, operating system, device identifiers, referring URLs, and language preferences.
• Cookies and similar technologies: session cookies, authentication tokens, and analytics cookies. See our Cookie Policy for details.
• Transaction data: purchase history, tool click counts, and listing performance metrics.

1.3 Information from Third Parties

• If you sign in via a third-party OAuth provider (e.g., Google or GitHub), we receive your name, email address, and profile picture from that provider in accordance with their privacy policies.
• Payment processors may share transaction confirmation and fraud-screening data with us.

We use your personal information to:

• Create and maintain your account and authenticate your identity.
• Provide, operate, and improve the Platform and its features.
• Process transactions, issue payouts to sellers, and maintain financial records.
• Deliver support tickets, respond to inquiries, and resolve disputes.
• Send transactional emails (account verification, password resets, payout confirmations, listing approvals).
• Send marketing communications where you have opted in; you may unsubscribe at any time.
• Detect and prevent fraud, abuse, policy violations, and security incidents.
• Comply with applicable laws, regulations, tax obligations, and legal process.
• Enforce our Terms of Service.
• Analyze aggregate usage trends to improve the Platform.

3.1 Service Providers. We engage third-party vendors to operate our Platform, including:

• Supabase — database, authentication, and file storage.
• Stripe — payment processing and seller payouts.
• Vercel — web hosting and content delivery.
• Email service providers — transactional and marketing email delivery.

These providers access your information only to perform services on our behalf and are contractually obligated to keep it confidential.

3.2 Public Profile Data. Your username, display name, profile picture, bio, and published listings are visible to other users and search engines. You control what you add to your public profile.

3.3 Legal Requirements. We may disclose information when required by law, court order, subpoena, or other legal process, or when we believe in good faith that disclosure is necessary to protect rights, safety, or property.

3.4 Business Transfers. If DozyTech is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Platform before your information becomes subject to a different privacy policy.

3.5 Aggregated Data. We may share aggregate, anonymized data (e.g., “10,000 users searched for writing tools this month”) that does not identify any individual.

We use cookies and similar tracking technologies to maintain user sessions, remember preferences, and analyze Platform usage. Please review our full Cookie Policy for details on the specific cookies we set, their purposes, and how to control them.

We retain personal information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements.

• Account data: retained while your account exists and for 90 days after deletion to allow for error correction.
• Financial records: retained for a minimum of 7 years to comply with tax and accounting regulations.
• Support tickets: retained for 3 years.
• Server logs: typically retained for 30–90 days.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: request a copy of the personal data we hold about you.
• Correction: update inaccurate or incomplete information via your account settings.
• Deletion: request deletion of your account and personal data (subject to legal retention requirements).
• Portability: request your data in a machine-readable format.
• Objection / Restriction: object to or restrict certain processing activities.
• Withdraw consent: where processing is based on consent, withdraw it at any time.

To exercise these rights, contact us at [email protected]. We will respond within 30 days. Note that some requests may be limited where we have a legal obligation to retain data.

Our Platform is not directed to children under 13 years of age (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us at [email protected] and we will delete it promptly.

DozyTech operates primarily in the United States. If you access our Platform from outside the United States, your information may be transferred to and processed in the United States or other countries. We take appropriate safeguards (such as Standard Contractual Clauses where required) to ensure your information receives an adequate level of protection.

We implement industry-standard technical and organizational measures to protect your information, including TLS encryption in transit, encrypted storage for sensitive fields, and role-based access controls. However, no method of transmission over the internet is 100% secure. In the event of a data breach that is likely to result in harm to affected individuals, we will notify relevant authorities and affected users as required by applicable law.

Our Platform contains links to third-party websites and tools. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party services you visit.

We may update this Privacy Policy periodically. When we do, we will post the updated policy on this page with a new “Last updated” date and, for material changes, notify you by email or prominent in-Platform notice at least 30 days before the change takes effect. Your continued use after the effective date constitutes acceptance of the revised policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact: