Privacy Policy – Dokan Cloud

At Dokan Cloud, owned and operated by Dokan Inc., we are committed to protecting your privacy and earning your trust. This Privacy Policy explains, in clear and simple terms, how we collect, use, share, and protect your personal information when you use Dokan Cloud, our global eCommerce platform for standalone online shops and multivendor marketplaces. Whether you’re a customer shopping on a Dokan Cloud-powered store, a vendor running your business, a marketplace owner managing a platform, a standalone shop owner, or a visitor exploring dokan.co/cloud or our Vendor and Customer mobile apps, this policy applies to you.

This Privacy Policy is not legal advice. You are responsible for ensuring that it accurately reflects your data practices and complies with applicable laws.

This policy is generated based on the information provided during your use of Dokan Cloud and is intended to cover how you collect, use, and share personal information from your site visitors and customers. Please review and update this policy to ensure it aligns with your actual practices—especially if you collect data from third parties or share data with additional service providers or partners. We recommend consulting a legal professional if needed.

We provide our services worldwide, making it easy for solo entrepreneurs and marketplace owners to sell online. If we update this policy, we’ll notify you via email or a notice on our website.

For questions or concerns, contact us at [email protected].

1. Who We Are

Dokan Cloud, operated by Dokan Inc., is a cloud-based platform that empowers businesses to create standalone eCommerce shops or multivendor marketplaces. Whether you’re a solo entrepreneur launching a single store or building a marketplace with multiple vendors, we offer a complete integrated eCommerce solution.

1.1 Key Roles in Our Platform

• Propietario del mercado: You purchase our multivendor marketplace service and manage a platform where vendors sell products to customers.
• Vendedor: You create a shop within a marketplace to sell products.
• Propietario de tienda independiente: You operate a single eCommerce shop, acting as both the store admin and vendor.
• Cliente: You shop on a Dokan Cloud-powered store, buying products from vendors or standalone shop owners.
• Visitante: You explore our website or apps without making a purchase or creating an account.

1.2 Data Responsibilities

• Marketplace Owners and Standalone Shop Owners: You control customer data (e.g., orders, shipping details) for your marketplace or shop and must provide a privacy policy for your customers and vendors (if applicable), complying with applicable privacy laws.
• Vendedores: You control customer data needed to fulfill orders (e.g., shipping addresses) and must comply with applicable privacy laws.
• Nube Dokan: As a SaaS provider, we process data on behalf of marketplace owners, standalone shop owners, and vendors (as a data processor) and collect certain data for our platform’s operation, like usage or analytics (as a responsable del tratamiento de datos).

We regularly audit our data processing to ensure compliance with data protection laws, mapping what data we collect and who accesses it.

1.3 Data Protection Compliance

We oversee our data protection practices internally. For any privacy-related concerns or inquiries, please contact us at [email protected] 

2. What Information We Collect

We collect information to provide, improve, and secure our services. Here’s what we collect and why:

2.1 Information You Provide

• Clientes: Name, email, phone number, billing/shipping addresses, and payment details (processed securely via Stripe, PayPal, Paystack, etc.) when you sign up or shop on a Dokan Cloud-powered store.
• Vendors and Standalone Shop Owners: Name, business name, email, phone number, tax details, and payout information (e.g., PayPal or bank details) when you create or manage an account for a marketplace shop or standalone store.
• Propietarios del mercado: Name, business name, email, phone number, billing details, and account settings when you set up a multivendor marketplace.
• Support & Communication: Information you share when contacting us via email, live chat, SMS, or surveys.

2.2 Information We Collect Automatically

• Usage Data: Pages visited, features used (e.g., vendor dashboards, marketplace admin panels), and actions taken, collected via cookies, pixels, and tools like Google Analytics 4.
• Device Info: IP address, browser type, device type, operating system, and general location (e.g., country).
• Log Data: Access times, error reports, and referring websites.
• Transaction Data: Order details, such as products purchased, order value, and shipping information.

2.3 Information from Third Parties

• Proveedores de servicios: Data from partners like payment processors, cloud hosting (e.g., Google Cloud), or analytics tools to support our services.
• Marketplace Partners: If you connect your account to platforms like Google Drive (for analytics), we may receive related data, following their privacy policies.

3. Cómo usamos su información

We use your information to make Dokan Cloud work better for you. Here’s how we process your data and the legal basis for each purpose:

• Create and manage accounts for customers, vendors, standalone shop owners, and marketplace owners (Legal Basis: Contractual necessity to provide our services).
• Process orders, payments, and vendor payouts securely for marketplaces and standalone shops (Legal Basis: Contractual necessity).
• Provide support via email, SMS, or live chat (Legal Basis: Contractual necessity or legitimate interests to assist users).
• Personalize your experience, like recommending products, tailoring vendor dashboards, or customizing marketplace admin panels (Legal Basis: Legitimate interests, with consent for specific recommendations where required).
• Improve our platform by analyzing usage with tools like Google Analytics 4 (Legal Basis: Legitimate interests, balanced with data minimization).
• Send updates, promotions, or newsletters (Legal Basis: Consent, where required by law).
• Prevent fraud, ensure security, and comply with laws (e.g., tax reporting) (Legal Basis: Legal obligation or legitimate interests for security).

4. How We Share Your Data

We don’t sell your personal information. We only share it when necessary to provide our services or meet legal requirements. Here’s who we may share with:

• Vendedores: Customer details (e.g., shipping address) to fulfill orders in a marketplace, as directed by the marketplace owner.
• Propietarios del mercado: Limited vendor or customer data (e.g., order summaries) to manage their marketplace.
• Proveedores de servicios: Trusted partners like Stripe, PayPal, Paystack (payments), Google Cloud (hosting), Mailchimp (emails), Twilio (SMS), and Google Analytics 4 (analytics) to run our platform. These providers are contractually bound to protect your data via Data Processing Agreements.
• Business Partners: Partners who refer vendors or provide apps/services may receive limited data (e.g., contact details) with your consent.
• Legal Requirements: We may share data to comply with laws, respond to legal requests, or protect our rights, safety, or property.
• Transferencias de negocios: If Dokan Cloud undergoes a merger, acquisition, or sale, your data may be shared with prior notice.

5. Cookies and Tracking Technologies

We use cookies, pixels, web beacons, and similar tools to:

• Make our website and apps work (e.g., remembering your login).
• Understand how you use Dokan Cloud (via Google Analytics 4).
• Show relevant ads (with your consent where required).

Types of Cookies:

• Essential: Needed for our platform to function.
• Functional: Enhance features like live chat or personalized settings.
• Analítica: Help us improve our platform by tracking usage.
• Advertising: Show ads tailored to your interests.

You can manage cookies via our cookie settings tool or your browser. Learn more at allaboutcookies.org.

6. Your Privacy Rights

You control your personal information. Depending on where you live (e.g., Europe, California), you have the right to:

• Acceso: See what data we have about you.
• Correct: Update incorrect information.
• Borrar: Request removal of your data (subject to legal requirements).
• Portabilidad: Get a copy of your data to use elsewhere.
• Opt-Out: Stop marketing emails or targeted ads.
• Restrict/Object: Limit certain data uses, like automated profiling.

How to Exercise Your Rights:

• Clientes: Contact the marketplace owner or standalone shop owner directly, as they control your data. We’ll assist them to fulfill your requests as required by law.
• Vendors, Standalone Shop Owners, Marketplace Owners, Visitors: Log into your dashboard to update/delete your account. We respond to requests within 30 days, extendable to 60 days for complex cases.
• Verificación: We may verify your identity to protect your data before responding.

We won’t charge you or treat you differently for using these rights. If you’re unhappy with our response, you can contact your local data protection authority (e.g., in the EEA or UK).

7. Data Security

We use industry-standard measures to protect your data, including:

• Cifrado para datos en tránsito y en reposo.
• Pseudonymization where possible to reduce identification risks (e.g., in analytics).
• Secure authentication and access controls.
• PCI-compliant payment processing.
• Regular system monitoring and updates.

We integrate data protection by design and default into our platform, minimizing data collection and ensuring secure processing from development to operation. Our internal security policy requires staff to follow strict data protection protocols, and we provide regular training to build awareness.

Data Protection Impact Assessments (DPIAs) are conducted for high-risk processing activities, such as new features involving sensitive data.

In case of a data breach, we have a process to notify affected users and relevant authorities within 72 hours, as required by law.

While we implement strong safeguards to protect your data, it’s important to understand that absolute security cannot be guaranteed online. You are responsible for keeping your account credentials confidential. If a breach occurs due to compromised credentials or actions on your side, you may be held accountable. Please contact us immediately at [email protected] if you notice any suspicious activity.

8. International Data Transfers

Please note that we may transfer, store, and process your personal information outside the country where you reside. This may include processing by our team members, third-party service providers, and partners in other countries.

If your personal information is transferred out of Europe, Dokan Cloud will use approved legal mechanisms such as the European Commission’s Standard Contractual Clauses or equivalent agreements recognized by the UK authorities, unless the destination country is officially recognized as providing adequate data protection.

9. Data Retention

We keep your data only as long as needed for the purposes of this policy or as required by law:

• Customer Data: Kept until you delete your account or stop using our services.
• Vendor and Standalone Shop Owner Data: Retained for two years after you close your shop or marketplace, then deleted.
• Marketplace Owner Data: Retained for two years after you close your marketplace, then deleted.
• Order Data: Kept for legal compliance (e.g., taxes).

To request deletion, email [email protected].

10. Third-Party Services

Dokan Cloud may connect to third-party tools (e.g., Google Analytics, Mailchimp, Facebook Pixel, payment gateways). These services have their own privacy policies, which you should review. We’re not responsible for their practices.

11. Google API Data and Limited Use Policy

Dokan Cloud uses Google Cloud APIs for features like analytics or Google Drive integration. We comply with Google’s API Services User Data Policy, including Limited Use requirements.

Ámbitos de Google Cloud:

• Ámbitos sensibles: Access to Google Drive files/folders for Google Analytics data.
• Ámbitos no sensibles: Access to your Google account email, public profile, or account identity.

Learn more at Política de datos de usuario de los servicios API de Google.

12. Automated Decision-Making

We may use automated tools to detect fraud or improve services (e.g., analyzing account activity for security). These tools don’t make significant decisions about you without human review. You can object to automated decisions by emailing [email protected].

13. Complaints

If you have any complaints about how we handle your personal information, please contact us using the details provided below. If you’re not satisfied with our response, you may have the right to appeal by reaching out to us again or, depending on your location, by contacting your local data protection authority.

14. Children’s Privacy

The Services are not meant for use by children, and we do not knowingly collect personal information from anyone under the age of 16. If you are a parent or guardian and believe your child has shared personal information with us, please contact us using the details below so we can delete it. As of the Effective Date of this Privacy Policy, we do not knowingly “share” or “sell” (as defined by applicable law) the personal information of individuals under 16 years of age. 

15. Changes to This Policy

We may update this policy to reflect new features, laws, or practices. We’ll notify you of significant changes via email or notice on the website. Check the Última actualización date above to see the latest version.

16. Regional Privacy Notice (USA)

If you live in certain US states (e.g., California, Colorado, Connecticut, Utah, Virginia), you have additional rights under laws like the CCPA:

• Right to Know: See what data we collect, use, or share.
• Right to Delete: Request removal of your data.
• Right to Opt-Out: Stop targeted ads or data sharing (we don’t sell your data).
• Right to Non-Discrimination: We won’t treat you differently for using these rights.

How to Exercise Rights:
Correo electrónico [email protected].
For customers of Dokan Cloud-powered stores, contact the marketplace owner or standalone shop owner directly.
We may verify your identity to protect your data.

California Residents: We don’t “sell” or “share” data as defined by CCPA. For “Shine the Light” requests, contact [email protected].

17. Contact Us

For questions, concerns, or to exercise your rights:
Correo electrónico: [email protected]
Address: Dokan Inc., 8 The Green Ste R, Dover, DE, 19901, USA

If you’re not satisfied, you can contact your local data protection authority.