This Privacy Policy explains what information DoxaQ (operator of the DoxaQ service at doxaq.doxaed.com) collects when you use the service, why we collect it, how we use it, and your rights over it.
1. Information we collect
Account information (hosts only)
When you create a host account, we collect your username, email address, and password (stored as a one-way hash). If you upgrade to Pro, our payment processor (Razorpay) collects payment method details directly; we receive only the subscription status, billing dates, and a reference identifier.
Player information
Players join sessions without an account. We collect the nickname they choose, their browser session identifier (so they can refresh and re-attach to the session), and the answers or responses they submit during the session.
Content you create
Quizzes, routines, prompts, uploaded images, and AI-generated content you create or store via DoxaQ are processed and stored to deliver the service.
Usage and technical data
We log limited technical data to operate the service securely: IP address, browser user agent, request timestamps, error messages, and rate-limit counters. These logs are retained for up to 30 days unless required for security investigation.
Cookies
We use a small number of essential cookies: a session cookie that keeps you signed in, a CSRF token cookie that protects forms, and a preference cookie for the user-prompt-submit hook. We do not use advertising cookies. We do not run third-party analytics that profile individuals.
2. How we use your information
- To provide, maintain, and secure the service;
- To deliver live sessions, scoring, leaderboards, and reports;
- To process payments and manage your subscription;
- To respond to support requests;
- To detect and prevent abuse, fraud, and security incidents;
- To comply with applicable law.
We do not sell your personal information to anyone. We do not use your content to train AI models.
3. Third parties we share data with
| Provider | Purpose | Data shared |
|---|---|---|
| Razorpay | Payment processing, subscription management | Email, name, billing details (collected directly by Razorpay) |
| Google Gemini | AI quiz generation | The text you paste into the AI generator |
| Google Fonts | Web font delivery (Inter, JetBrains Mono) | IP address (for delivery; no profile is built) |
| QR-server.com | Generating QR codes for shareable session links | The session URL (which is a public 6-letter code) |
| Hosting infrastructure | Running the service on AWS EC2 | All operational data, encrypted in transit |
Each provider is bound by its own privacy policy. We use them only to deliver the service to you.
4. International transfers
Some of our providers (Google Gemini, Google Fonts, qr-server) are located outside India. By using DoxaQ you consent to your data being transferred to and processed in jurisdictions that may have different data-protection laws than India.
5. Data retention
- Account data: retained for as long as your account is active. We delete accounts and their data within 30 days of a deletion request.
- Session data (host-tier): sessions and answers are retained for 90 days on the free tier, indefinitely on Pro.
- Technical logs: up to 30 days.
- Payment records: retained as required by tax and accounting law (up to 7 years).
6. Security
The site is served exclusively over HTTPS. Passwords are stored as one-way hashes. Payment details never touch our servers. We patch our infrastructure regularly, monitor for abnormal access patterns, and rate-limit sensitive endpoints.
No internet service can be guaranteed 100% secure. If you believe an account has been compromised, contact us immediately at doxaedofficial@gmail.com.
7. Your rights
You can:
- Access the personal data we hold about you;
- Correct inaccurate data through your account settings or by emailing us;
- Delete your account and the personal data tied to it;
- Export your quizzes and session reports on request;
- Object to specific processing or withdraw consent where consent is the legal basis.
To exercise any of these rights, email doxaedofficial@gmail.com. We respond within 30 days.
8. Children
DoxaQ is intended for use by educators and adults; players using the service in a classroom may be under 18. We do not knowingly collect more information from a player than the nickname they choose and their session responses. If you believe a child has provided us with personal information beyond that, contact us and we will delete it.
9. Changes to this policy
We may update this policy from time to time. The current version is always at https://doxaq.doxaed.com/legal/privacy/. Material changes will be communicated by email to active subscribers.
10. Contact
Privacy questions or rights requests: doxaedofficial@gmail.com. For the full address, see the Contact Us page.