Privacy Policy

When you register an account and interact with Doller, we collect the following limited data points:

• Registration Data: Your name, username, email address, phone number, country, referral information and hashed password.
• Financial Data: Investment allocations, balances, deposit/withdrawal histories, and payment evidence such as uploaded transfer slips.
• BEP20 Wallet Addresses: Destination and remittance blockchain addresses you submit for financial processing.
• Technical Telemetry: Login IP addresses, session timestamps, and device browser user-agents for fraud prevention.

Only upload information necessary to verify a payment. A transfer slip may contain personal information; avoid including unrelated identity documents or sensitive details.

We process your information exclusively to power your experience and safeguard platform stability:

• To instantiate and administer your user investment account.
• To verify and execute deposits, yield distributions, and withdrawal requests.
• To dispatch security notifications and password reset tokens upon your explicit request.
• To detect, prevent, and mitigate sybil attacks, duplicate accounts, and fraudulent activity.
• To deliver dedicated support for inquiries and dispute resolution.

The application uses password hashing, session controls and request validation to help protect accounts. No online service can eliminate every security risk.

• Use a unique password and protect access to your email account.
• Use the HTTPS website and check the domain before signing in.
• Never share passwords, verification codes or wallet recovery phrases with support.

We maintain a strict zero-monetization policy. We do not sell, rent, or trade your personal records. Data is disclosed only in the following restricted circumstances:

• Legal & Regulatory Mandates: When strictly mandated under applicable law or valid judicial process.
• Platform Protection: To enforce Terms of Service, mitigate security breaches, or protect user assets from bad actors.
• Infrastructure Providers: With hosting and email delivery providers as needed to operate the service. External font or asset services may receive technical request data when their resources load.

We employ only essential, functional session cookies required for authentication integrity:

• HTTP-Only: Restricted from access via client-side JavaScript to reduce exposure to client-side scripts.
• SameSite Policy: Configured as SameSite=Lax to protect against cross-site request vulnerabilities.
• Session Lifespan: Cleared automatically on logout or session expiry.

We do not integrate invasive third-party ad trackers, marketing pixels, or analytics brokers.

• Account Records: Stored to operate the account and handle support and security reviews. Contact support about closure or deletion; no automatic 90-day deletion period is promised.
• Ledger & Transactions: Transaction records may be retained for accounting, security and dispute handling. Transfers published on a blockchain cannot be removed by this platform.
• Authentication Tokens: Temporary password reset tokens are invalidated immediately upon use or automatically after 60 minutes.

You can contact support about access, corrections or deletion:

• Right of Access: Request a comprehensive export of your stored profile and financial history.
• Right of Rectification: Update your name, credentials, and wallet preferences directly in your Account Settings.
• Right of Erasure: Request account closure or deletion. Support must review what can be removed and what records need to be retained.
• Credential Updates: Modify your password at any time via your secured dashboard.

We may periodically revise this Privacy Policy to reflect technical enhancements or regulatory obligations. When changes occur, the revision date at the top of this document will be updated immediately.

Review the published revision date to identify changes to this policy.

For inquiries, data rectification requests, or security disclosures, please reach out through our official platform support channel or submit an inquiry directly via your account portal.

Include your account email and describe your request. Do not send passwords or verification codes.