Privacy Policy

Last Updated: February 2026

1. Introduction

Doblly ("we", "us", or "our") operates the Doblly platform, a SaaS e-commerce infrastructure platform. This Privacy Policy explains how we collect, use, disclose, and protect information from merchants and their end customers. By using Doblly, you consent to the practices described herein.

2. Data Collection

2.1 Information You Provide

We collect information you provide when registering an account, creating a store, adding products, uploading content, or interacting with our platform, including but not limited to: names, email addresses, business details, payment information, and other identifiers.

2.2 Information Automatically Collected

We automatically collect data regarding your use of the platform, including IP addresses, device and browser information, log files, cookies, usage metrics, and analytics data.

2.3 Information from End Customers

Merchants collect personal data from their end customers (buyers). Doblly processes this data solely as a service provider to enable store operations, order fulfillment, communication, and analytics.

3. Merchant Data

3.1 Account Information

Includes login credentials, contact information, billing details, business registration documents, and other account-specific data.

3.2 Store Content

Includes product descriptions, images, videos, pricing, promotions, and any other materials uploaded to your store.

3.3 Transaction Data

Includes order history, payment confirmations, refunds, and interactions with end customers.

4. End Customer Data

4.1 Personal Information

Includes names, addresses, email addresses, phone numbers, payment and shipping details collected by merchants for order processing.

4.2 Order & Purchase Data

Includes products purchased, order history, shipping information, and transaction status.

4.3 Consent and Preferences

Merchants are responsible for obtaining consent for communications, marketing, and promotional messages from end customers.

5. Use of Information

5.1 Platform Operations

We use data to provide, maintain, and improve Doblly services, including order processing, content display, analytics, and customer support.

5.2 Communications

We may use information to send service notifications, transactional communications, platform updates, and marketing messages where permitted by law.

5.3 Legal & Compliance

Information may be used to comply with legal obligations, prevent fraud, and enforce the Terms of Service.

6. Data Sharing & Disclosure

6.1 Service Providers

We share information with third-party service providers who perform operational tasks, including hosting, payment processing, analytics, email services, and customer support.

6.2 Legal Requests & Enforcement

We may disclose information to respond to legal obligations, governmental requests, investigations, or to protect rights, safety, and property.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of the business transaction.

7. Cookies & Tracking

7.1 First-Party Cookies

Used for authentication, session management, user preferences, and platform functionality.

7.2 Third-Party Tracking

Analytics, advertising, and social media providers may collect information via cookies or pixels to track user activity across platforms.

7.3 Opt-Out

Users can adjust browser settings to block cookies. Some platform features may be limited if cookies are disabled.

8. Data Security

8.1 Technical Measures

Includes encryption, firewalls, intrusion detection, secure access controls, and regular security assessments.

8.2 Organizational Measures

Includes staff training, access restrictions, audit trails, and data handling policies.

8.3 Incident Response

In case of a data breach, we follow applicable legal requirements and notify affected parties where required.

9. Backup & Disaster Recovery

9.1 Data Backup

Regular backups are performed to ensure data integrity and availability.

9.2 Disaster Recovery

We maintain disaster recovery plans to restore services in case of outages or emergencies.

10. Data Retention

10.1 Retention Period

We retain data as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements.

10.2 Deletion Requests

Merchants can request deletion of their account data. End customer data deletion requests are subject to merchant control.

11. User Rights

11.1 Access, Correction & Portability

Users may access, correct, or export their personal information in a structured, machine-readable format.

11.2 Objection & Restriction

Users may request restriction of processing or object to certain processing activities, subject to applicable law.

12. GDPR Compliance

12.1 Legal Basis

For EU residents, processing is conducted based on contractual necessity, legitimate interests, or consent.

12.2 Data Protection Officer

Merchants may contact our DPO for GDPR inquiries: legal@doblly.com

13. CCPA Compliance

13.1 California Residents

California residents may request access, deletion, or opt-out of sale of personal information.

13.2 Submission of Requests

Submit requests via email to legal@doblly.com.

14. Children’s Privacy

Doblly does not knowingly collect personal information from children under 16. Any data collected in error will be deleted promptly.

15. Third-Party Services

Doblly may integrate third-party applications, plugins, or APIs, each governed by their own privacy policies.

16. International Transfers

Data may be transferred to and processed in countries outside your jurisdiction. Appropriate safeguards are applied to ensure protection.

17. AI Tools & Generated Content

17.1 AI-Assisted Tools

Doblly provides AI tools for content generation, product description suggestions, and analytics. Merchants are responsible for reviewing AI-generated content for accuracy, legality, and compliance.

17.2 Data Use in AI

AI tools may process merchant or end customer data to generate outputs, but outputs are owned by the merchant.

18. Analytics & Reporting

18.1 Platform Analytics

We collect anonymized or aggregated analytics to improve platform functionality, user experience, and business insights.

18.2 Merchant Reporting

Merchants have access to reporting dashboards showing store performance, sales data, and customer behavior.

19. Changes to Privacy Policy

Doblly may update this Privacy Policy periodically. Continued use after updates constitutes acceptance of the revised policy.

20. Contact Information

For questions regarding this Privacy Policy, contact: legal@doblly.com