What's New: Added Free Apps, Referral Showcase & Recommendations Hub!
100% Secure Cooperative Engine
Data Privacy & Security Notice

Privacy Policy & Data Protection

We are committed to providing the highest standards of data security, cryptographic encryption, and privacy protection across our digital marketplace, DRM licensing engine, developer ecosystem, enterprise portal, and sponsored advertiser network.

Last Policy Update:
September 2026
Version 2.4.0 (DRM & Enterprise Release)
01

Scope & Ecosystem Overview

Welcome to DOUXLE | Digital Systems & Software Licenses. This Privacy Policy details the policies and technical procedures governing the collection, processing, safeguarding, and disclosure of user information across all dimensions of our platform.

Our digital infrastructure encompasses four interconnected pillars:

Digital Marketplace & DRM Instant licensing, serial key management, and cryptographic software protection.
Enterprise B2B Systems Multi-seat corporate licensing, departmental distribution, and automated tax invoicing.
Developer Portal Software submission pipelines, API telemetry, and automated sales disbursement.
Sponsored Ads & Loyalty Pool Verified promotional campaigns, reward claims, and community loyalty perks.

By utilizing any aspect of the platform, you acknowledge and agree to the cryptographic data practices, compliance guidelines, and privacy protections set forth in this document.

02

Information We Collect

We collect only the minimum required technical and operational data necessary to deliver digital products, authenticate licenses, and maintain platform security:

Personal & Account Profiles
  • Display Name, Full Name, and primary authentication email.
  • Hashed password credentials (secured via salted BCRYPT).
  • Banking or payment details (IBAN/PayPal) strictly for approved developer disbursements or account withdrawals.
  • Optional enterprise company name, tax registration (VAT/CRN), and billing address.
DRM & License Authentication Telemetry
  • Cryptographic Hardware Identifier (HWID / one-way SHA-256 device fingerprint) for machine binding.
  • Online heartbeat timestamps and license verification checks.
  • Operating system architecture (e.g. Windows, macOS, Linux) for binary compatibility.
  • Assigned license key strings, activation dates, and seat allocation counts.
Orders, Loyalty & Financial Records
  • Comprehensive purchase logs, issued invoice numbers, and payment transaction IDs.
  • Loyalty reward point balances, non-withdrawable gift weights, and promotional bonuses.
  • Official PDF audit statements generated through your dashboard.
Security, Ads & System Interaction
  • Truncated IP addresses and session user-agent headers for anti-fraud validation.
  • Ad interaction logs and throttled click claims to verify legitimate community reward payouts.
  • Ephemeral community chat messages (subject to automated periodic system purge).
03

How We Use Collected Information

All collected data is processed strictly under authorized functional, contractual, and operational requirements:

Instant License Delivery

Generating serial keys, issuing DRM activation certificates, and recording machine bindings.

DRM Piracy Prevention

Validating active device limits per license, blocking unauthorized duplications, and verifying integrity.

Enterprise Invoicing

Producing compliant corporate B2B tax invoices, managing seat rosters, and providing accounting records.

Loyalty Weight Calculation

Crediting 1:1 order purchase weights and calculating store customer reward tier allocations.

Ad Validation & Claims

Verifying genuine clicks on sponsored advertiser campaigns to reward points while filtering fraudulent bots.

Security & Audit Integrity

Monitoring abnormal login velocity, preventing credential-stuffing, and preserving immutable transaction receipts.

04

DRM Protection & Device Telemetry Protocol

Our proprietary DRM (Digital Rights Management) subsystem provides zero-trust piracy defense while ensuring maximum consumer privacy:

One-Way Hashed Machine Fingerprints

The DRM engine computes a cryptographic, irreversible hash of hardware attributes (such as CPU family, motherboard UUID, and drive serials). We never store raw hardware identifiers, personal system files, or individual directory paths. The generated hash can only be compared for matching; it cannot be reversed.

Heartbeat Ping & Offline Tokens

Applications protected by our DRM client transmit lightweight heartbeat pings to verify active license states. For air-gapped or offline environments, signed HMAC offline license tokens are issued with strict expiration constraints, eliminating continuous telemetry requirements.

Zero File Access Guarantee: The DRM system never scans, inspects, uploads, or reads personal documents, browsing history, keystrokes, or peripheral device activity on your machine.
05

Developers & Enterprise B2B Data Handling

Specialized provisions apply to registered third-party software developers and corporate enterprise clients:

Developer Submissions & Intellectual Property
  • Uploaded binaries, installation packages, and documentation remain the exclusive intellectual property of the submitting developer.
  • Submissions are scanned solely for malware, trojans, backdoors, and licensing compliance.
  • API keys and HMAC master secrets are stored in encrypted vaults and are never exposed in client-side code.
Enterprise Corporate Confidentiality
  • Corporate employee seat rosters and email allocations are confidential to the corporate account owner.
  • Official tax invoices and VAT/CRN business identification are archived in compliance with statutory financial retention periods.
  • Enterprise volume license pools are insulated from public marketplace visibility.
07

Security & Cryptographic Standards

We maintain defense-in-depth security architectures following modern cryptographic standards:

Transport & Storage Encryption Full HTTPS TLS 1.3 encryption for all data in transit. Sensitive stored secrets, API credentials, and license payloads are secured with AES-256 cipher suites.
Authentication & Anti-CSRF Passwords secured with high-cost BCRYPT hashing. Cryptographic anti-CSRF token verification is enforced on all state-changing endpoints and checkout pipelines.
SQL Injection & Input Sanitization Strict parameterized queries (PDO prepared statements) across all database queries combined with rigorous HTML output encoding against XSS attacks.
Audit Logging & Threat Isolation Immutable administrative logs record all critical actions, license revocations, and developer disbursements to ensure forensic accountability.
08

Cookies & Local Session Storage

Our platform operates exclusively with strictly necessary first-party session cookies and client-side web storage:

  • Authentication Session: Secure HTTP-only cookies to preserve authenticated user state and protect against session hijacking.
  • Shopping Cart Persistence: Temporary session storage to maintain chosen digital licenses throughout your checkout process.
  • Security Tokens: Ephemeral tokens verifying form legitimacy and mitigating cross-site request forgery.
Zero Cross-Site Tracking: We do not load external third-party tracking pixels, invasive remarketing scripts, or behavioral data brokers.
09

Legal Disclaimer & Loyalty Program Terms

STRICT DISCLAIMER OF FINANCIAL & INVESTMENT SERVICES:

All customer loyalty points, reward weights, gift balances, developer referral bonuses, and promotional reward pools provided on DOUXLE | Digital Systems & Software Licenses are voluntary commercial perks granted to active customers as part of our platform customer retention program.

They do NOT constitute financial securities, investment contracts, shares, debentures, bank deposits, guaranteed profits, or financial instruments. DOUXLE | Digital Systems & Software Licenses is a digital software distribution, developer marketplace, and software licensing platform. We do not provide banking, securities trading, asset management, or financial advisory services.

10

User Rights, Data Portability & Account Controls

In alignment with international privacy regulations (including GDPR, CCPA, and regional personal data protection standards), you hold full sovereignty over your personal records:

Right to Rectification

Update profile details, password, payout information, and company credentials directly in your dashboard.

Data Portability

Generate and export official PDF statements detailing your purchase history, licenses, and reward ledger.

Right to Erasure

Request permanent deletion of your account, active sessions, and personal identifiers at any time.

Note: In accordance with tax and legal requirements, verified transaction invoices and commercial accounting records must be retained for the minimum statutory period mandated by law before complete archival disposal.

Questions Regarding Our Privacy & Data Practices?

Our dedicated compliance and data protection officer is available to answer your inquiries at [email protected].

Contact Support