Privacy Policy

Article 1 (Purpose)

DORODORA (the "Platform") values personal information and complies with privacy and data protection laws applicable in the regions where the service is provided. This Privacy Policy explains what personal information the Platform collects, why it is used, how long it is retained, when it is shared or processed by third parties, and what rights users may exercise.

Article 2 (Personal Information Collected)

The Platform collects the following personal information to provide the service.

1. When signing up with OAuth
   • Authentication provider name, such as Google, Twitch, or Discord
   • Unique provider identifier (Provider ID)
   • Email address
   • Username or nickname
2. When setting up a donation page or profile
   • Donation page address
   • Nickname and bio
   • Profile image and cover image
   • Channel URLs such as YouTube, Twitch, Kick, X, and Instagram
   • Donation currency, minimum donation amount, alert settings, and TTS settings
3. Information collected automatically during use
   • Access country code based on HTTP headers
   • Cookies and session information
   • Donation checkout information and TTS audio stored in browser cache
4. Payment and settlement information
   • PayPal merchant identifier (Merchant ID)
   • Supporter and creator identifiers
   • Payment ID, amount, currency, platform fee, PayPal fee, and settlement amount
   • Donation nickname, donation message, TTS voice identifier, and TTS audio URL

Article 3 (Purposes of Collection and Use)

Collected personal information is used only for the following purposes.

1. Member identification and authentication
2. Creation of donation pages, profile display, and account settings management
3. Delivery of donation and TTS message services
4. Payment processing, settlement, refunds, and dispute handling
5. Service operation, improvement, and prevention of misuse
6. Service notices and related communications

Article 4 (Retention and Use Period)

Personal information is deleted without undue delay, or separated into information that is difficult to restore, when the purpose of collection and use is fulfilled or when an account is deleted. The following records may be retained for the periods below.

1. Payment and settlement records
   • Retained for 5 years from the transaction date for applicable law, tax and accounting processing, and dispute handling. A longer period may apply if required by applicable law or necessary for disputes, audits, investigations, or legal requests.
2. Service use and security records
   • Retained only as long as needed for security, misuse prevention, service stability, and legal obligations, and generally no longer than 3 months unless a security incident, dispute, legal request, or investigation requires a longer period.
3. Browser cache checkout information and TTS audio
   • Retained for up to 12 hours or until the user deletes browser storage.

1. After the retention purpose is fulfilled or the required retention period expires, the information is deleted without undue delay.

Article 5 (Third-Party Provision)

1. The Platform does not provide personal information to third parties in principle, except where the user has given prior consent or where required by law.
2. The minimum information necessary for payment processing is transmitted to PayPal and is handled under PayPal’s privacy policy.

Article 6 (Entrusted Processing)

The Platform entrusts personal information processing as follows to provide the service.

Article 7 (Deletion of Personal Information)

1. When an account is deleted, basic account information, profile information, donation settings, authentication sessions, uploaded images, and block information are deleted or separated into replacement information.
2. Donation and payment records needed for payment, settlement, refund, audit, investigation, or dispute handling are retained with restricted access for the necessary period and then deleted without undue delay.
3. Electronic files are deleted in a manner that makes restoration difficult.

Article 8 (User Rights and How to Exercise Them)

1. Users may request access, rectification, deletion, suspension, restriction, objection, portability, and withdrawal of consent regarding their personal information under applicable law.
2. Users may manage personal information directly through account settings or the account deletion feature.
3. The Platform takes necessary action within the period required by applicable law and notifies the user of the result.
4. Some requests may be limited to the extent permitted by law for identity verification, legal obligations, payment, settlement, dispute handling, or service security.

Article 9 (Cookies)

1. The Platform uses cookies for authentication, session maintenance, security checks, and PayPal connection flow management.
2. Checkout information and TTS audio generated during donation payment may be stored in the user’s browser CacheStorage for up to 12 hours to complete payment processing.
3. Users may refuse cookies through browser settings, but some features such as login may be limited.
4. Where separate consent is required for cookies or similar technologies, the Platform provides notices and choices required by applicable law.

Article 10 (Security Measures)

The Platform takes the following measures to protect personal information.

1. No password collection: the Platform uses OAuth authentication and does not collect or store user passwords.
2. Access control: access to personal information is limited to the minimum necessary personnel.
3. Security systems: security systems are operated to respond to external intrusion such as hacking.
4. Encrypted transmission: all communications are encrypted through HTTPS.

Article 11 (Privacy Contact)

The Platform designates the following contact for matters related to personal information processing, complaints, and remedies.

• Team: DORODORA Operations Team
• Contact: support@dorodora.com

Article 12 (Changes to This Policy)

1. This Privacy Policy may be revised due to changes in applicable law or service policy, and changes will be announced through the service screen.
2. The revised policy takes effect 7 days after notice.