Privacy policy

OVERVIEW & DATA CONTROLLER

SECTION 1 – LEGAL BASES FOR PROCESSING

1. Performance of a Contract: Processing is necessary to fulfill orders, authenticate checkout transactions, deliver digital licenses, flash device configurations, and route physical shipments across domestic and international borders.
   
   
2. Legitimate Business Interests: Processing is conducted to safeguard our infrastructure, detect and prevent commercial fraud, preserve transaction records for chargeback representment, protect our reseller distribution channels, and coordinate with upstream development partners.
   
   
3. Compliance with Legal Obligations: Processing is necessary to adhere to United States export administration laws (EAR), OFAC sanctions screening, Delaware statutory accounting mandates, and foreign customs/tax reporting requirements.
   
   
4. Consent: Where you have granted explicit, affirmative opt-in consent for specific technical notices or marketing updates. You retain the right to withdraw such consent at any time.
   
   

SECTION 2 – CATEGORIES OF PERSONAL DATA WE COLLECT

1. Identity & Contact Identifiers: Legal first and last name, physical billing address, verified physical shipping address, telephone number, and customer email address.
   
   
2. Transactional & Billing Telemetry: Transaction amount, currency, order timestamp, payment method type, the issuing bank name, billing match status (AVS/CVV verification results), and licensed product serial identifiers. (Note: DEXAIM LLC never stores or handles raw credit/debit card account numbers; payment card data is processed directly via tokenized PCI-DSS compliant payment gateways).
   
   
3. Technical, Hardware & Diagnostic Telemetry: Internet Protocol (IP) address, approximate geolocation, internet service provider (ISP), browser fingerprint, operating system type, proxy/VPN detection indicators, device identifiers, and any diagnostic logs, device manager snapshots, or system specifications submitted to our technical support desk during onboarding.
   
   
4. Customs & Logistical Compliance Data: Consignee documentation, tariff classification details, and declaration data required by commercial freight carriers and international customs border agencies.
   
   

SECTION 3 – DISCLOSURE & DATA SHARING

1. Core Infrastructure & E-Commerce Hosting: Hosted platforms (Shopify) and database providers that maintain our checkout architecture and store operational logs.
   
   
2. Payment Processors & Gateway Networks: Regulated financial processors and merchant acquiring banks to authenticate payments, tokenize transactions, and mitigate merchant risk.
   
   
3. Logistics & Freight Carriers: Commercial shipping partners (e.g., DHL, FedEx, UPS, postal services) to execute physical package transit, customs clearance, and delivery verification.
   
   
4. Upstream Developers & Software Programmers: When necessary to provision, compile, or issue a unique digital license key or custom firmware image directly to the customer.
   
   
5. Fraud Mitigation & Industry Network Defense: In direct accordance with Section 6.3 of our Terms of Service, if an account submits a fraudulent chargeback, payment dispute, or bad-faith transaction, you expressly consent to our transmission of identifying transaction data (including name, email, IP address, delivery address, Discord ID, hardware identifiers, and payment metadata) to upstream developers, hardware manufacturers, peer resellers, and collaborative anti-fraud databases to enforce permanent network-wide blacklists.
   
   
6. Legal Compulsion & Regulatory Authorities: When mandatory disclosure is required by valid subpoena, court order, or formal investigation from law enforcement or customs border agencies.
   
   

SECTION 4 – HIGH-PROFILE CLIENT CONFIDENTIALITY PROTOCOLS

1. Confidential Handling: Customer transaction logs, custom hardware orders, device configurations, firmware builds, and technical support transcripts are classified internally as Confidential Information.
   
   
2. Non-Public Engagement: We maintain strict internal compartmentalization. We do not confirm client relationships, publicize buyer identities, or disclose transaction histories to marketing vendors, public forums, or media outlets.
   
   
3. Integrity Rule: Confidentiality safeguards protect legitimate client privacy; they do not permit or excuse the submission of fictitious financial, banking, or billing records at checkout.
   
   

SECTION 5 – INTERNATIONAL DATA TRANSFERS

• Standard Contractual Clauses (SCCs) approved by the European Commission;
  
  
• The UK International Data Transfer Addendum;
  
  
• Technical, administrative, and physical security measures meeting international encryption and access-control standards.
  
  

SECTION 6 – DATA RETENTION & SECURITY

1. Retention Periods: We retain personal information for the period required to fulfill your purchase, maintain software license functionality, enforce our warranty and onboarding windows, comply with statutory tax and accounting obligations (typically up to seven years for financial records), and preserve evidence necessary to resolve payment disputes under payment network rules.
   
   
2. Technical Safeguards: We deploy industry-standard technical and operational controls, including end-to-end Transport Layer Security (TLS/HTTPS), encrypted database storage, strict internal access authorization, and multi-factor authentication across all merchant workstations.
   
   

SECTION 7 – YOUR GLOBAL PRIVACY RIGHTS

1. Right of Access & Portability: The right to request confirmation of processing and obtain a machine-readable export of your personal information.
   
   
2. Right to Rectification: The right to request the correction of inaccurate, incomplete, or outdated personal data.
   
   
3. Right to Erasure ("Right to Be Forgotten"): The right to request the deletion of your personal data. (Note: This right is subject to statutory retention exceptions, including our mandatory duty to retain transaction records for financial audit compliance, tax laws, and dispute defenses).
   
   
4. Right to Restrict or Object to Processing: The right to restrict certain types of data processing or object to processing conducted on the basis of legitimate interests.
   
   
5. Right to Non-Discrimination: We will never deny services, charge different prices, or alter service levels because you exercised any statutory privacy right.
   
   

SECTION 8 – CONTACT & FORMAL LEGAL NOTICES