Privacy Policy

Last updated: March 27, 2026

1. Overview

This Privacy Policy explains how Sloxly ("we", "us") collects, uses, stores, and protects your personal information when you use our digital products marketplace, authentication system, and related services.

2. Information We Collect

2.1 Account Registration

• Personal Details: Full name, username, email address, phone number.
• Authentication Data: Encrypted password hash, OAuth provider tokens (Google), session identifiers.
• Profile Information: Avatar image, buyer level, unique user ID.

2.2 Transaction Data

• Purchase History: Order numbers, products purchased, license keys, payment amounts.
• Payment Processing: Handled by PCI-DSS compliant providers (Razorpay, PayPal, Cashfree). We do not store credit/debit card numbers.

2.3 Technical & Usage Data

• Device Information: IP address, browser type, operating system, screen resolution.
• Usage Analytics: Pages visited, products viewed, search queries, time spent on pages.
• Security Logs: Login attempts, session tokens, CSRF verification data.

2.4 Captcha Verification Data

When you interact with Sloxly Captcha widgets on our platform or third-party sites using our service:

• Mouse movement patterns, click behavior, and touch events (processed in real-time, not stored persistently).
• Browser fingerprint data for bot detection.
• Verification tokens (expire after 5 minutes).

2.5 OAuth Authentication Data

When you use "Continue with Sloxly" on third-party applications:

• We share your name, email, and profile picture with the authorized application only after your explicit consent.
• Authorization codes and access tokens are time-limited and securely generated.

3. How We Use Your Information

• Account Management: Create and maintain your account, process purchases, deliver license keys.
• Security: Prevent fraud, detect bots, protect against unauthorized access via session fingerprinting.
• Communication: Send order confirmations, support responses, and important account notices.
• Platform Improvement: Analyze usage patterns to improve features and user experience.
• Legal Compliance: Comply with tax laws, payment regulations, and legal obligations.

4. Data Sharing

We share data only in these limited circumstances:

• Payment Processors: Transaction data with Razorpay, PayPal, or Cashfree to process payments.
• Sellers: Your username and email (for order fulfillment and support). Sellers never receive your password or payment details.
• OAuth Applications: Only data you explicitly consent to share (name, email, avatar) via the authorization consent screen.
• Legal Requirements: When required by law, court order, or to protect our rights.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Cookies

We use cookies for session management and authentication. See our Cookie Policy for full details.

6. Data Retention

• Account Data: Retained while your account is active. Deleted within 30 days of account deletion request.
• Transaction Records: Retained for 7 years for tax and legal compliance.
• Security Logs: Login logs retained for 90 days.
• Captcha Telemetry: Processed in real-time, discarded immediately. Captcha logs retained for 90 days.

7. Your Rights

You have the right to:

• Access your personal data through your dashboard.
• Correct inaccurate information via profile settings.
• Export your data in a portable format.
• Delete your account and associated data.
• Withdraw Consent for optional data processing at any time.

8. Security Measures

• Passwords stored using bcrypt hashing (never in plain text).
• Session fingerprinting to prevent hijacking.
• CSRF token protection on all forms.
• SSL/TLS encryption for all data transmission.
• Regular session ID regeneration.

9. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via email to registered users.

11. Contact

For privacy-related inquiries: support@sloxly.com