Privacy Policy

This policy explains which personal data we process when you use TLDix (tldix.com), why we process it, and your rights under the GDPR and similar laws (including Turkey’s KVKK).

1. Controller

The controller is TLDix. For any privacy question or request, email hello@tldix.com.

2. Data we collect

Data	When	Purpose
Username, email, password hash	When you create an account	Account management and sign-in
Domains, SSL, hosting and licenses you track	When you add them	Monitoring expiry dates and sending alerts
Email address (tracking without an account)	When you follow a domain	Sending alerts about that domain only
Contact form messages	When you write to us	Answering your request
Plan and payment details	When you upgrade	Managing your subscription (we never store card numbers)
IP address, browser data, server logs	When you visit	Security, abuse prevention, debugging

3. Cookies and similar technologies

• Session cookie (necessary): keeps you signed in and remembers your language; deleted when the browser closes.
• Browser extension session cookie (necessary, signed-in users only): lets the Chrome extension work with your account.
• Referral cookie (30 days): credits an affiliate partner if you arrived through their link.
• Theme preference: your light/dark choice is kept in your browser’s local storage.
• Google Analytics 4 (analytics): visit statistics; IP addresses are anonymised by Google.

4. Service providers we share data with

We never sell your data. We share it only as needed to run the service with: our hosting provider, our email delivery provider, Whop (payments) and Google Analytics. Some of these providers may process data outside your country.

5. Retention

• Account data: while your account exists; deleted within 30 days of a deletion request.
• Follow-only email addresses: until you unsubscribe or tracking ends.
• Contact messages: up to 2 years.
• Payment records: for the period required by law.

6. Your rights

You can access, correct, delete, restrict or object to the processing of your data, and request a portable copy. Email hello@tldix.com; we reply within 30 days. You may also complain to your local data protection authority.

7. Changes

When we update this policy we change the date at the top, and we email registered users about significant changes.

8. Claude connector

If you connect TLDix to Claude (by Anthropic), we process the tool calls Claude makes and their inputs, such as a domain you look up or a renewal you add. We do not receive or store your Claude conversations. Sign-in uses OAuth on tldix.com, so your password is never shared with Claude. We store only hashes of access and refresh tokens; access tokens expire after one hour and refresh tokens after 60 days without use. Items added or removed through Claude are recorded in your activity log. You can disconnect at any time under Panel → Integrations → Claude, which revokes the tokens immediately. Details: tldix.com/claude.