Privacy Policy

Last updated: 2026-07-26

This Privacy Policy explains what personal data UMOX collects, why, and how you can control it.

1. Data We Collect

You give us directly:

• Email address (for login and notifications)
• Site domains and target URLs you register
• USDT-TRC20 wallet address for withdrawals
• Any support messages you send

Collected automatically:

• IP address and approximate country (for fraud prevention and geo-tier calculation)
• Browser type, OS, referrer URL (for analytics)
• Cookies for session management (see section 4)
• Placement impressions and clicks (for advertiser reporting)

2. How We Use Your Data

• To operate the Service (accounts, payments, placement matching)
• To send transactional emails (verify, payout status, disputes)
• To detect fraud and abuse (multiple accounts, PBN patterns)
• To compute site tier scores based on public SEO signals
• To improve the product (aggregated, non-identifying statistics)

3. Third-Party Services

We share limited data with the following processors:

• DeepSeek AI - your page URL and title are sent to DeepSeek so it can generate snippet copy. No personal data of end-users is shared.
• Google Search Console (if connected) - we read (never write) your GSC data via OAuth to verify indexed pages, impressions, and clicks.
• Yandex Webmaster / IndexNow - we submit URLs for indexing on your behalf.
• Google Analytics / GTM / Yandex Metrika / Facebook Pixel - only loaded if the site owner has enabled these in Admin settings.
• SMTP provider (Yandex) - used to deliver emails to you.

4. Cookies

We use a small number of first-party cookies:

• Session cookie (umox-session) - keeps you logged in.
• CSRF token - protects forms from cross-site request forgery.
• Cookie-banner consent - remembers you clicked OK.

We do not use tracking cookies for advertising unless the site admin has enabled them in the Analytics settings.

5. Data Retention

• Account data: kept while your account is active, plus 90 days after deletion.
• Transaction and payout records: kept 7 years (accounting requirement).
• Server logs: 30 days.
• AI-generated snippets: cached 30 days per URL.

6. Your Rights

You may:

• Access your data (log into your dashboard)
• Correct wrong data (via account settings)
• Request deletion of your account (email hello@umox.net; financial records retained per section 5)
• Export your data (JSON on request)
• Object to processing of non-essential data
• Withdraw consent for optional processing

If you are in the EU/UK, GDPR rights apply. If in Russia, 152-FZ applies.

7. Security

Financial secrets (SMTP passwords, API keys, wallet keys where applicable) are stored encrypted at rest. HTTPS is enforced on all endpoints. Passwords are hashed with bcrypt.

8. Children

UMOX is not intended for users under 18. We do not knowingly collect data from minors.

9. Changes

If we materially change this policy, we will notify you by email at least 14 days in advance.

10. Contact

Questions? Reach out at hello@umox.net.