Privacy Policy

Last updated: March 29, 2026

This Privacy Policy describes how DOLLA BOY ("we", "us", "our") collects, uses, and protects your personal information when you use our website and services at dollaboy.com and its subdomains (the "Service").

1. Information We Collect

Information you provide

• Account information: name, email address when you sign up, claim a free kit, or make a purchase
• Payment information: processed by third-party payment providers — we do not store your card details
• Partner program data: crypto wallet address, payout network preference, partner application details
• Communications: emails you send us, support requests, beat submissions

Information collected automatically

• Usage data: pages visited, click patterns, referral source and campaign parameters (e.g. UTM), browser type, device info (Microsoft Clarity and Google Analytics 4 after you grant analytics consent; GA4 uses Google Consent Mode until then)
• IP address: used for rate limiting, fraud prevention, and analytics
• Cookies and local storage: session management, CSRF protection, referral tracking, and consent-gated analytics (see our Cookie Policy)

2. How We Use Your Information

• To deliver purchased products and free kits to your email
• To process partner commissions and payouts
• To send transactional emails (order confirmations, download links, magic login links)
• To send marketing emails (product updates, promotions) — only with your consent, unsubscribe anytime
• To prevent fraud, abuse, and enforce our terms
• To improve our Service and measure marketing performance through consent-based analytics (Microsoft Clarity and Google Analytics 4)

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your data based on:

• Contractual necessity: to fulfill your orders and deliver products
• Legitimate interest: to prevent fraud, improve our service, and manage the partner program
• Consent: for marketing emails and non-essential cookies

4. Data Sharing

We do not sell your personal data. We may share information with:

• Payment processors: to handle transactions securely
• Email service providers: to deliver transactional and marketing emails
• Analytics providers: Microsoft Corporation (Clarity), loaded only after analytics cookie consent, and Google (Google Analytics 4) with Consent Mode — full GA4 measurement after consent; processing is subject to their respective privacy policies
• Law enforcement: when required by law or to protect our rights

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Specifically:

• Account data: retained until you request deletion (we may retain data necessary to fulfill legal obligations, resolve disputes, or enforce agreements — such as active partner commissions or pending orders)
• Order records: retained for 5 years for accounting and legal compliance
• Partner commission data: retained for 5 years after the last transaction
• Marketing preferences: updated immediately upon unsubscribe

6. Your Rights

Depending on your location, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Withdraw consent for marketing at any time
• Object to processing based on legitimate interest
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email us at support@dollaboy.com.

7. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of any sale of personal information. We do not sell personal information.

8. International Transfers

Your data may be processed in countries outside your own. We ensure appropriate safeguards are in place in accordance with applicable data protection laws.

9. Security

We implement industry-standard security measures including HTTPS encryption, secure session management, CSRF protection, and rate limiting. However, no method of transmission over the internet is 100% secure.

10. Children

Our Service is not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance.

12. Contact

For privacy-related questions or requests: