Privacy Policy

1. Introduction & Privacy Commitment

Doblly ("we", "our", or "us") is dedicated to protecting the privacy and personal data of our users and website visitors. This Privacy Policy outlines what information we collect when you visit https://doblly.com, create an account, or subscribe to our dropshipping automation platform, and explains how that information is handled, secured, and stored.

2. Information We Collect

We collect only the information necessary to provide and maintain our services:

• Account Registration Details: When you create a Doblly account, we collect your name, email address, password hash, and optional store business name.
• Storefront & Integration Configuration: To enable dropshipping synchronization, we store store identifiers, API access tokens provided by you for your connected stores (e.g., Shopify, WooCommerce), product import queues, and catalog preference settings.
• Payment & Transaction Data: We do not collect, process, or store complete credit card numbers, debit card numbers, or bank account credentials on Doblly servers. All subscription payment transactions are securely handled directly by PayPal. Doblly receives and stores only transaction status metadata, such as PayPal subscription IDs, order reference numbers, dates, and subscription status (e.g., ACTIVE, CANCELLED).
• Technical & Log Data: Standard server log information, including IP addresses, browser user agent, device operating system, access timestamps, and referring URLs, collected for cybersecurity and service diagnostics.

3. How We Use Your Information

Your information is utilized strictly for legitimate business and operational purposes:

• Provisioning, maintaining, and operating your Doblly SaaS account.
• Executing automated product imports and order synchronization with AliExpress and your connected stores.
• Managing subscription status, billing cycles, and communicating transaction receipts.
• Responding to customer support inquiries and technical troubleshooting requests.
• Detecting and mitigating fraud, unauthorized access, and malicious platform activity.

4. Sharing & Disclosure of Information

We do not sell, rent, or trade your personal data to third parties for marketing purposes. We share data only with trusted service providers strictly necessary to deliver the service:

• Payment Processing (PayPal): We share customer identifiers with PayPal to authorize recurring subscriptions and process billing in compliance with PayPal’s data security standards.
• Cloud Infrastructure & Hosting: Our secure server infrastructure and database hosting providers who operate under strict confidentiality agreements.
• Legal & Regulatory Compliance: We may disclose information if required to do so by applicable law, court order, or governmental authority to comply with legal obligations.

5. Cookies & Local Storage

Doblly uses essential cookies and similar browser storage technologies to maintain platform functionality:

• Strictly Necessary Cookies: Session cookies to keep you securely logged into your account, and CSRF security tokens to protect forms against cross-site request forgery.
• Preference Cookies: Cookies that preserve your preferred display language and interface layout settings.
• Third-Party Consent: Cookie preferences may be adjusted via our cookie consent controls.

6. Data Security & Retention

We apply industry-standard technical and organizational security controls to protect your data against unauthorized access, alteration, disclosure, or destruction. All web traffic between your browser and Doblly is encrypted via Secure Sockets Layer / Transport Layer Security (HTTPS / TLS).

We retain your personal and store configuration data for as long as your account remains active or as necessary to fulfill the purposes outlined in this policy. [Pending Client Confirmation: Exact data retention period following account closure before permanent database deletion].

7. Your Privacy Rights

Depending on your geographic location and applicable data protection legislation (such as GDPR or CCPA), you may have the following rights regarding your personal data:

• The right to request access to the personal data we hold about you.
• The right to request rectification of inaccurate or incomplete information.
• The right to request erasure ("right to be forgotten") of your account and personal details, subject to statutory retention obligations.
• The right to export your store data and product settings in a structured format.

To exercise any of these privacy rights, please reach out through our Support Page.

8. Privacy Contact & Data Protection

If you have questions or concerns regarding our privacy practices or this Privacy Policy, please contact our data team:

• Privacy Team: [Pending Client Confirmation: Official Privacy / DPO Email Address, e.g., privacy@doblly.com]
• Postal Correspondence: krit gat har hazitim 4/7