Privacy Policy

This Privacy Policy explains how Daotra ("Daotra", "we", "us") handles personal data collected through daotra.io, aff.daotra.io and related channels (together, the "Platform"), from publishers, advertisers, their representatives and visitors. Daotra decides how and why this data is used and is the controller of it, except where we say otherwise.

Our services are for business use. When we refer to "you", we mean the individual whose personal data we handle, including a person who represents a business. This Policy does not cover the privacy practices of advertisers or other third parties, which are governed by their own policies.

You can contact Daotra - Legal Dept. about this Policy at privacy@daotra.io.

Depending on how you use the Platform, we collect:

• Account and application details: name, company and legal name, registration number, country, address, email address, Telegram username, the name and email of your affiliate manager contact, and your password (which we store only in protected form);
• Business verification information that we ask for to review your application, such as information about your traffic sources and ownership;
• Communications: what you send through the contact form, email or Telegram;
• Technical and usage information: IP address, device and browser type, pages viewed, dates and times, and security and activity logs for the portal;
• Information stored on your device, such as your cookie choice and the cookies described in section 7.

We collect this from you, from your use of the Platform and, for verification, from public sources and service providers. We do not intentionally collect special categories of personal data, and ask you not to send any.

We use personal data to:

• review applications, create and manage accounts, and provide the portal and the Services (performance of a contract, or steps you ask for before one);
• communicate with you, answer your messages and give notices (contract, and our legitimate interest in running the business);
• keep the Platform secure, prevent and investigate fraud, abuse and misuse, and enforce our terms (legitimate interests and, where required, legal obligation);
• comply with law, including sanctions, anti-money-laundering, tax and regulatory requirements, and respond to lawful requests (legal obligation);
• understand and improve the Platform, but optional analytics only with your consent where the law requires it (consent or legitimate interests);
• establish, exercise or defend legal claims, and carry out corporate transactions (legitimate interests).

Where we rely on consent, you can withdraw it at any time, without affecting the earlier use of your data.

We do not sell personal data, and we do not share it for cross-context behavioral advertising. We disclose it only to the following categories of recipient, and only as needed:

• service providers that help us run the Platform, such as hosting, security, email and communications, and analytics providers;
• parties involved in operating the affiliate program, to the extent needed to review, verify, administer or protect it;
• professional advisers, auditors and insurers;
• courts, regulators, law enforcement and others where the law requires or permits, or to protect rights, safety and property;
• a buyer or other party in a merger, acquisition, financing or sale of all or part of our business.

We work globally. Your personal data may be processed in countries other than yours, which may have different data protection laws. Where the law requires it, we use appropriate safeguards for those transfers, such as standard contractual clauses or an adequacy decision, and you can ask us for more information using the contact details above.

We keep personal data for as long as needed for the purposes in this Policy, taking into account the length of our relationship with you, our legal, tax, accounting, anti-fraud and regulatory obligations, and the time limits for legal claims. We then delete or anonymize it. Records of the terms you accepted are kept for as long as they might be needed to establish or defend a claim.

The Platform uses:

• a strictly necessary session cookie that keeps you signed in to the Publisher portal (set only when you log in, protected so that scripts cannot read it, and removed when you log out or the session ends);
• a record in your browser's local storage of your cookie choice, so we do not ask you again;
• a record in your browser's local storage of the display settings you choose in the accessibility menu, so they are remembered on your next visit;
• optional analytics technologies, which we use only if you accept them and only if and when we enable them.

You can choose "Essential only" in the cookie banner, and you can block or delete cookies and local storage in your browser settings, but the portal will not work without its strictly necessary session cookie.

Depending on where you live, you may have the right to:

• know what personal data we hold about you and receive a copy;
• correct inaccurate data and, in some cases, have it deleted;
• object to or restrict some uses, and withdraw consent;
• receive your data in a portable format;
• opt out of the sale or sharing of personal data (we do not sell or share it) and of targeted advertising;
• limit our use of sensitive personal information (we use it only to run your account and keep the Platform secure);
• not be discriminated against for using these rights;
• ask for human review of a significant decision made using automated tools, for example a fraud decision;
• complain to your local data protection authority.

To use a right, email privacy@daotra.io. We may need to verify your identity, and you may use an authorized agent if we can verify their authority. We will respond within the period the law requires. If we refuse a request, you may appeal by replying to our decision, and we will review it.

We use technical and organizational measures designed to protect personal data, including encryption in transit, protected storage of passwords and access controls. No system is completely secure, so we cannot guarantee absolute security, and you are responsible for keeping your login details confidential.

The Platform is for businesses and is not directed to anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.

We may update this Policy from time to time. The "Last updated" date shows the latest version, and for material changes we will give notice by email or in the Platform where the law requires it.

Daotra - Legal Dept., privacy@daotra.io, or via Telegram at @Daotra. To exercise a privacy right, please use the email address.