Privacy Policy

Welcome to Domzivo. We respect your privacy and are deeply committed to protecting your personal data. This Privacy Policy ("Policy") provides a comprehensive overview of how Domzivo ("we," "our," or "us") collects, uses, discloses, transfers, stores, and safeguards your information when you visit our website at domzivo.com, create an account, purchase domain names, use our AI domain generator, interact with our customer support, or otherwise use our services (collectively, the "Services").

By accessing or utilizing our Services, you expressly acknowledge that you have read, completely understood, and unconditionally agree to be bound by all the terms of this Privacy Policy. If you do not agree with any provision or practice described in this policy, you must immediately cease using our Services and website.

This Policy applies globally to all users of our Services, regardless of their location, while incorporating specific provisions for users subject to regional privacy frameworks such as the General Data Protection Regulation (GDPR) and the Nigeria Data Protection Regulation (NDPR).

We collect various categories of personal and non-personal data to provide, improve, and secure our Services. This collection occurs through direct interactions, automated technologies, and third-party sources.

We strictly limit the use of your personal data to purposes permitted by law. Primarily, we use your information in the following circumstances:

• Contractual Fulfillment: To register, renew, transfer, and manage domain names. This includes establishing your account, processing your financial transactions, and providing access to our DNS management infrastructure.
• Service Provision and Maintenance: To deliver the specific products you request, maintain platform stability, troubleshoot technical issues, and provide responsive customer support.
• ICANN Compliance: To comply with ICANN requirements regarding the collection, retention, and escrow of domain registration data.
• Communication: To send you administrative notices, transaction receipts, domain expiration warnings, security alerts, and updates to our terms and policies.
• AI Optimization: To process your inputs through our ZIVO AI engine to generate contextual domain suggestions. We do not use your personal identifiable information to train foundational AI models.
• Security and Fraud Prevention: To monitor for, detect, and prevent fraudulent transactions, unauthorized access, abuse of our services, and other illegal activities.
• Business Operations: To conduct data analysis, audits, identifying usage trends, determining the effectiveness of our promotional campaigns, and to evaluate and improve our website, products, services, marketing, and customer relationships.
• Legal Obligations: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

We do not sell, rent, or trade your personal data to data brokers or advertising networks. We only share your information with trusted third parties under strict confidentiality agreements, and only for the purposes outlined in this Policy:

We have implemented a robust, multi-layered security architecture designed to protect your personal information from accidental loss, unauthorized access, use, alteration, and disclosure.

• Encryption in Transit: All data transmitted between your browser and our servers is secured using Transport Layer Security (TLS 1.2 or higher) with modern cryptographic cipher suites.
• Encryption at Rest: Sensitive data stored in our databases, including authentication tokens and personal identifiers, is encrypted at rest using AES-256 encryption.
• Credential Security: We utilize bcrypt with dynamic salting for password hashing. We cannot and do not store plain-text passwords.
• Access Controls: Internal access to user data is strictly limited to authorized personnel who require access to perform their job duties, and such access is logged and routinely audited.
• Authentication: We strongly encourage and support Time-Based One-Time Password (TOTP) Two-Factor Authentication (2FA) for all user accounts to prevent unauthorized access.

Despite our extensive security measures, no system is completely impenetrable. We cannot guarantee the absolute security of our databases, nor can we guarantee that information you supply will not be intercepted while being transmitted to us over the Internet.

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.

• Active Accounts: We retain your profile and contact data for the lifetime of your active account.
• Domain Records: To comply with ICANN regulations, we must retain domain registration records for the duration of the registration and for a minimum period of three (3) years following the expiration or transfer of the domain.
• Financial Records: Transactional data is retained for a minimum of seven (7) years to comply with tax and accounting laws in our operating jurisdictions.
• Account Deletion: Upon your verified request to delete your account, we will systematically anonymize or delete your personal data within 90 days, excluding data we are legally mandated to retain (such as past invoices and expired domain histories).

Domzivo operates on a global infrastructure. Your information, including personal data, may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those from your jurisdiction.

Specifically, our primary servers are located in the United States and the European Union, while our corporate operations are based in Nigeria. If you are located outside these regions and choose to provide information to us, please note that we transfer the data to these regions and process it there.

We ensure that all international transfers of personal data are safeguarded by appropriate legal mechanisms, such as Standard Contractual Clauses (SCCs) or other recognized data transfer agreements, ensuring your data receives an adequate level of protection.

Subject to your geographic location and applicable local laws (such as GDPR, CCPA, NDPR), you may possess the following rights regarding your personal data:

• The right to access: You have the right to request copies of your personal data.
• The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete. You can update most of this information directly from your dashboard.
• The right to erasure ("Right to be Forgotten"): You have the right to request that we erase your personal data, under certain conditions and subject to our legal retention obligations.
• The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing: You have the right to object to our processing of your personal data for direct marketing purposes or where we are relying on a legitimate interest.
• The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, in a structured, commonly used, and machine-readable format.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to all legitimate requests within 30 days.

Our Services are strictly not intended for use by children. We do not knowingly collect, maintain, or use personal information from children under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us immediately. If we become aware that we have collected personal data from children without verification of parental consent, we will take immediate steps to remove that information from our servers.

We reserve the right to update or change our Privacy Policy at any time. Any changes will be effective immediately upon the posting of the revised Privacy Policy on this page. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top.

For significant changes, we will provide a more prominent notice, which may include an email notification sent to the primary email address associated with your account. Your continued use of the Service after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.

If you have any questions, concerns, or complaints about this Privacy Policy or our data collection practices, please contact our Data Protection Team:

• Email: [email protected]
• Mailing Address: Asaba, Delta State, Nigeria
• Support Portal: Log into your Domzivo account and navigate to the Support section to open a secure ticket.

If you are located in the European Economic Area (EEA) or the United Kingdom, and you believe we have not adequately resolved your concern, you have the right to lodge a complaint with your local Data Protection Authority.