Legal Document //

Privacy Policy

Effective Date // March 25, 2026

1. Overview & Commitment

DomainFox (“we,” “us,” or “our”) operates the DomainFox platform, valuation engine, API ecosystem, and domain management tools. We are dedicated to protecting your privacy and handling your personal data and domain portfolio information with high standards of security and transparency.

2. Information We Collect

2.1 Information Provided Directly by You

  • Account Credentials — Email address, full name, username, and encrypted credentials submitted upon account registration or authentication.
  • Payment & Billing Data — Payment transaction metadata and billing records. Complete credit card numbers are handled exclusively by PCI-DSS compliant third-party payment processors; DomainFox never stores raw card details.
  • Domain Portfolio & Search Data — Domain names, purchase prices, acquisition dates, custom notes, valuation query inputs, and portfolio lists uploaded to or evaluated on the platform.
  • Communication Logs — Customer support requests, technical inquiries, and email correspondence.

2.2 Information Collected Automatically

  • Service Telemetry — IP addresses, browser types, operating system specs, referrers, page interaction events, and API request timestamps.
  • Cookies & Session Tokens — Secure authentication cookies and performance telemetry to store active sessions and user configuration preferences.

2.3 Data Derived from Public Registry Feeds

  • Domain Metadata — Public WHOIS/RDAP records, registration status, name server allocations, and DNS records retrieved to populate domain profile details.

3. How We Use Your Data

We process personal and domain data strictly for legitimate operational purposes:

  • Operating, executing, and maintaining the DomainFox valuation engine and portfolio management suite.
  • Processing subscription transactions, credit token usage, and billing invoicing.
  • Generating statistical valuation projections, brandability scores, and trademark risk indicators.
  • Delivering automated security notices, account verifications, and system status updates.
  • Monitoring system stability, preventing API abuse, detecting fraud, and enforcing usage rate limits.
  • Fulfilling legal regulatory requirements and law enforcement obligations.

DATA PRIVACY PROMISE: We do NOT sell, rent, or lease your personal data or private domain portfolio records to third parties. We do NOT use your private portfolio data to train public AI models without your explicit prior authorization.

4. Sub-Processors & Data Disclosures

We share operational data strictly with trusted service infrastructure partners operating under strict data processing agreements:

  • Secure Payment Processors — PCI-DSS compliant financial infrastructure for managing subscription checkout and billing recurring fees.
  • Cloud Hosting & Data Networks — Encrypted cloud infrastructure providers hosting our database servers, web infrastructure, and edge caching networks.
  • Transactional Email Services — Automated messaging gateways used to transmit verification codes, password resets, and subscription updates.
  • Legal Disclosures — When mandated by valid legal process (e.g., subpoena, court order, statutory regulation).

5. Data Retention & Account Erasure

We retain account data for as long as your account remains active or as required to provide Service operations.

Upon account cancellation or request for deletion, we will permanently purge or anonymize your personal account data and private portfolio records within 30 calendar days, except where financial, tax, or legal retention obligations require longer preservation.

6. Security Architecture

DomainFox implements enterprise-grade technical and organizational security controls to safeguard data:

  • TLS 1.3 encryption in transit for all web traffic and API endpoints.
  • AES-256 encryption at rest for database records and sensitive token credentials.
  • Role-based access controls and strict internal data isolation policies.

While we utilize rigorous defense standards, no digital transmission or storage architecture can guarantee 100% immunity from external intrusion.

7. User Data Rights (GDPR / CCPA / International Standards)

Depending on your legal residence, you hold specific data rights regarding your personal information:

  • Right of Access — Request a copy of the personal data held about your account.
  • Right to Rectification — Correct inaccurate or incomplete account records.
  • Right to Erasure ("Right to be Forgotten") — Demand permanent deletion of your personal profile and portfolio data.
  • Right to Data Portability — Export your portfolio data in standard machine-readable CSV/JSON format.
  • Right to Restrict or Object — Limit specific data processing activities or withdraw consent.

To exercise any of these privacy rights, submit a request to privacy@DomainFox.com. We respond to all verified inquiries within 30 days.

8. International Data Transfers

DomainFox servers and operational nodes operate primarily within the United States. If you access the Service from international jurisdictions (including the EEA or UK), your information may be processed in the United States under standard contractual clauses and appropriate safeguards.

9. Updates to Privacy Policy

We reserve the right to revise this Privacy Policy periodically. Material modifications will be posted to this page alongside an updated Effective Date. Continued use of the platform following policy updates indicates acceptance.

10. Contact Privacy Officer

For questions or formal inquiries concerning our data protection practices, contact our Privacy Office at:

DomainFox Privacy Office_

Email: privacy@DomainFox.com