Privacy Policy

1 Information We Collect

We collect information you provide directly and information generated when you use the platform.

• Account data: email address, name, password (hashed), profile avatar, and workspace settings.
• Google sign-in: if you use "Continue with Google", we receive your Google account email, name, profile picture, and email verification status from Google via our identity provider (Ory Kratos). We use this information solely for authentication and account management. We do not receive your Google password and do not use Google sign-in data for advertising.
• Transaction data: purchases, sales, affiliate attributions, withdrawal requests, account credits, and gift code activity.
• Support data: messages and attachments you submit through /support tickets.
• Technical data: IP address, browser type, device information, and server logs used for security, rate limiting, and debugging.
• Cookies: session cookies and HttpOnly authentication tokens — see section 5 and our Cookie Policy at /cookies.

2 How We Use Information

We use collected information to operate and improve Billixi, including:

• Authenticate you and maintain your session.
• Process payments, deliver digital products, and maintain existing Membership purchase records or license keys.
• Send transactional emails (verification, password reset, billing notifications).
• Operate affiliate commissions and seller analytics.
• Respond to support tickets and enforce our Terms of Service.
• Detect fraud, abuse, and security incidents.
• Comply with legal obligations and respond to lawful requests.

3 How We Share Information

We do not sell your personal information. We may share data with:

• Google — when you choose Google sign-in, subject to Google's privacy policy. Ory Kratos acts only as our identity provider; we use the data for authentication, not marketing.
• Payment and exchange partners — to settle transactions and process withdrawals (e.g. CoinEx integration).
• Telegram and Discord — only when required to fulfill or support an existing membership purchase that grants channel or role access.
• Infrastructure providers — hosting, email delivery, and identity services that process data on our behalf under contractual safeguards.
• Other service providers that support infrastructure, storage, monitoring, and performance of the platform (such as CDN, analytics, error monitoring, or object storage providers).
• Law enforcement or regulators — when required by law or to protect rights, safety, and platform integrity.

4 Data Retention

We retain account and transaction records while your account is active and for a reasonable period afterward for legal, tax, and dispute-resolution purposes.

We retain transaction records for at least 5 years for accounting, tax, fraud prevention, and dispute resolution purposes, unless a longer period is required by applicable law.

Support tickets and moderation records may be retained to investigate abuse and improve trust & safety.

You may request account deletion by opening a support ticket. Some data may be retained where required by law or for legitimate business records (e.g. completed payment ledgers).

5 Cookies and Similar Technologies

Billixi uses cookies and similar technologies that are essential to operate the service. For full details, see our Cookie Policy at /cookies.

• ory_kratos_session — identity session managed by Ory Kratos.
• hydra_access_token and hydra_refresh_token — HttpOnly cookies for API authentication (not accessible to JavaScript).
• oauth2_state, oauth2_code_verifier — short-lived cookies during login flows.
• google_oauth_return_to — short-lived cookie during Google sign-in redirect.

6 Security

We use industry-standard measures including HTTPS, hashed passwords, HttpOnly token cookies, and rate limiting on authentication endpoints.

Billixi will never ask for your private wallet keys or seed phrases. Keep your wallet credentials secure and report suspected unauthorized access via /support immediately.

No method of transmission or storage is 100% secure. We continuously work to protect your data but cannot guarantee absolute security.

7 Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data.

To exercise these rights, contact us through /support or privacy@billixi.com. We may need to verify your identity before fulfilling a request.

You can disconnect Google sign-in by using email/password recovery flows or contacting support if you need account linkage assistance.

8 Children

Billixi is not directed at children under 16. We do not knowingly collect personal information from children. Contact us if you believe a child has provided data and we will take appropriate steps to delete it.

9 International Transfers

Your information may be processed in countries other than your own. Where required by law, we rely on appropriate safeguards such as contractual protections for international data transfers.

By using Billixi where permitted by applicable law, you acknowledge that cross-border processing may occur subject to those safeguards.

10 Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date will reflect the latest revision. Material changes may be communicated via email or in-app notice.