Privacy Policy

Scope and contact

doxanh operates dxAuth for shared sign-in and checkout. Email contact@doxanh.dev with privacy questions or requests.

This policy covers data handled by dxAuth. The application you use separately manages its business records, content, staff permissions, and application sessions. TableFlow restaurant orders are not purchases of doxanh software.

Information we use

For sign-in, we process your email, verification and delivery status, session information, and security signals such as IP address, approximate country, device or browser information, and failed attempts.

For purchases, we process the application and account or business reference, contact email, selected plan, quantity, currency, amount, billing period, payment references, payment status, subscription changes, and related support or audit records.

When you contact support, we process the information and attachments you provide. Never send passwords, verification codes, full card numbers, or card security codes.

Why we use it

We use this information to verify sign-in, provide purchased access, manage subscriptions, reconcile payments, send service messages, answer requests, keep financial and activity records, and prevent fraud or abuse.

Where applicable, our legal grounds include performing a contract, meeting legal obligations, legitimate interests in secure and reliable services, and consent where required. You can contact us about the basis that applies to a particular use.

Who receives information

The application you sign in to receives the verified identity needed to create its own session. Its authorized backend can obtain its own billing and access records. It is not entitled to another application's records.

Cloudflare provides hosting, storage, and anti-abuse services. Amazon Web Services provides email delivery. Paddle processes purchases made through its checkout, including payment details, billing information, and fraud checks, under its own privacy policy. Banks process bank transfers under their own terms.

We may disclose relevant information to professional advisers or authorities when required by law or necessary to protect legal rights. We do not sell personal information.

Payment details

Card and PayPal details are entered in Paddle's payment experience. dxAuth stores payment references and billing results, not full card numbers or card security codes.

Bank-transfer references and receipts may contain account-holder details. Share only the information needed to identify your payment.

Cookies and local storage

We use necessary cookies or storage for sessions, language preferences, security, and completing checkout. Cloudflare Turnstile helps protect sign-in against abuse. Paddle may use its own payment and fraud-prevention technologies on checkout.

See the Cookie and Anti-Abuse Notice for more information. Accepting service terms is not consent to unrelated advertising.

Retention

Sign-in codes and links expire. We remove or expire short-lived verification data according to its purpose. Security and delivery records are kept while needed to protect the service and investigate problems.

Payment, subscription, access-change, and audit records may remain after an account closes to support accounting, disputes, fraud prevention, and legal obligations. A deletion request does not automatically erase financial records. Backup copies may remain until their recovery cycle ends.

Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent where processing relies on it. Email contact@doxanh.dev; we may need to verify that the request is yours.

Some records must be retained by law or to resolve a dispute. We will explain relevant limits. Where applicable, you may complain to your local data-protection authority.

International processing and updates

Service providers may process information outside your country. Applicable legal protections and provider agreements govern those transfers.

The service is not intended for children below the age required to use it lawfully. We update this policy when our handling of information changes and provide notice when required.

Related information