Privacy Policy

1. Introduction

Zimmify Private Limited, operating as PogoDomains ("we", "us", or "our"), respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our surprise page platform at pogodomains.com (the "Service").

2. Information We Collect

Information You Provide

• Name/Username: The display name you enter when creating a page.
• Account Information: Your email address, authentication provider, and internal account identifiers used to link verified sign-ins from Google OAuth and email/password into one account.
• Photos: Images you upload for display on your chosen domains.
• Captions: Text captions you provide for your pages.
• Payment Information: Payment details are collected and processed by Dodo Payments for the current web checkout flow, and may be processed by Apple, Google, or other platform billing providers in future native apps. We do not store your full card or bank account details.
• Takedown Requests: The name, email address, report type, domain name, and reason you provide when requesting content removal.

Information Collected Automatically

• Usage Data: Pages visited, features used, and interactions with the Service.
• Device Information: Browser type, operating system, and device type.
• IP Address: Collected for security, fraud prevention, and analytics purposes.
• Checkout Acceptance Metadata: When you confirm the required checkout attestation, we record the timestamp, the exact attestation text and version shown, the legal document versions in effect, your IP address, browser user-agent string, and preferred language header. This record is stored on the booking and in a tamper-resistant audit log to evidence your informed consent.
• Takedown Request Metadata: When you submit a takedown request, we may process your name, email address, report type, complaint details, IP address, and browser user-agent to prevent abuse, investigate the report, contact you, notify the page owner, and protect affected users.
• Product Analytics Events: Anonymous events about how you use the site — which pages you visit, when you leave a page, what you click, and which steps of the booking flow you reach. By default these events are anonymous and do not use cookies: our analytics provider rotates the visitor identifier daily, so analytics cannot recognize you across days or devices. If you accept the analytics consent prompt, we upgrade to cookie-based analytics that can recognize you across visits, and signed-in users are additionally tagged with their internal PogoDomains account ID — we never send your email address or your Google sign-in ID to our analytics provider.

3. How We Use Your Information

• To provide and operate the surprise page service
• To display your uploaded content (including any edits you make) on your chosen domains during the active period
• To protect bookings with optional password or username/password access gates
• To moderate uploaded content for policy compliance using automated systems
• To process payments through our payment provider
• To prevent double-booking and maintain a single source of truth for domain availability
• To respond to takedown requests and support inquiries
• To share complaint details with an affected uploader where needed to investigate or resolve a takedown report
• To prevent fraud and abuse of the Service
• To improve and optimize the Service

4. Content Moderation

Uploaded photos are automatically analyzed by our content moderation system. This automated analysis checks for inappropriate content such as nudity, violence, and other policy violations. We do not use this technology for facial recognition or identification purposes.

5. Data Storage and Retention

• Page Data: Booking records (domain, display name, caption, timing, and access lock settings metadata) are retained for roughly 48 hours after the booking ends, then automatically deleted.
• Photos: Uploaded photos are stored securely and are automatically deleted after the retention period expires.
• Payment Records: Transaction records are maintained by our payment provider in accordance with their data retention policies and applicable tax/legal requirements.

6. Third-Party Services

We use the following third-party services:

• Payment Provider: Dodo Payments acts as the Merchant of Record for the current web checkout flow. Future native apps may use Apple or Google billing where platform rules require it. Your payment information is subject to the relevant provider's privacy policy.
• Cloud Infrastructure: Third-party cloud services for hosting, file storage, database, and content moderation.
• Error Monitoring: Sentry may process technical diagnostics and limited error-session replay data so we can detect, investigate, and fix application failures.
• Product Analytics: PostHog (US region) processes interaction events — page views, clicks, form submissions, and steps you take through the booking flow — so we can understand and improve the Service. By default these events are anonymous and cookieless: no cookies or browser storage are written, and the visitor identifier rotates daily so analytics cannot recognize you across days or devices. If you accept the analytics consent prompt, we upgrade to cookie-based analytics that can recognize you across visits; declining keeps analytics anonymous and cookieless. Events are routed through our own server, not directly to a third-party domain. We do not record sessions, use heatmaps, run advertising, or sell your data. One server-side exception: when a payment succeeds, our payment system also sends a single conversion event tagged with your PogoDomains account ID — regardless of your analytics consent choice — so we can accurately measure paid bookings.

7. Data Security

We implement reasonable technical and organizational measures to protect your information, including encryption in transit (TLS) and at rest. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Request access to your personal data
• Request deletion of your personal data
• Request content removal via our takedown process
• Object to certain processing of your data
• Decline or withdraw analytics consent at any time through the consent banner. Declining keeps analytics anonymous and cookieless. The server-side payment-conversion event described in §6 still fires for completed payments.

To exercise these rights, contact us at contact@pogodomains.com.

9. Cookies

We use essential cookies required for the Service to function, including login sessions, optional dev-environment access gates, and domain unlock sessions for password-protected bookings. We do not use advertising cookies. Product analytics run cookielessly by default; if you accept the analytics consent prompt, our analytics provider additionally sets analytics cookies and localStorage entries to recognize you across visits, and declining or revoking consent prevents these from being written.

10. Minors

The Service is not intended for anyone under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Your continued use of the Service constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions or requests, contact us at contact@pogodomains.com or write to Zimmify Private Limited, Bangalore, Karnataka 560045, India.