DNX PRIVACY POLICY
Version 1.1
Effective Date: 27th October 2026
This Privacy Policy ("Privacy Policy") explains how Media Revolution Inc., a Florida corporation doing business as DNX ("DNX," "we," "our," or "us"), collects, uses, discloses, stores, transfers, protects, and otherwise processes Personal Information in connection with our websites, applications, registrar services, marketplace services, brokerage services, APIs, enterprise services, and all other products and services we provide (collectively, the "Services").
This Privacy Policy forms part of the DNX Terms of Service and applies to every individual who accesses or uses the Services, including registrants, customers, brokers, buyers, sellers, visitors, enterprise customers, developers, and authorized users.
Where additional privacy notices apply to specific Services, those notices supplement this Privacy Policy.
ARTICLE 1
Scope
This Privacy Policy applies whenever DNX processes Personal Information in connection with:
Domain name registration services;
Domain renewals and transfers;
ICANN registration obligations;
Brokerage services;
Marketplace transactions;
Escrow services;
Enterprise services;
Hosting services;
DNS services;
Email services;
SSL certificate services;
Artificial intelligence services;
APIs and developer services;
Customer support;
Marketing communications;
Business development activities;
Website operation;
Security monitoring;
Fraud prevention;
Regulatory compliance; and
Any future products or services offered by DNX.
This Privacy Policy applies regardless of the technology used to access the Services, including websites, mobile applications, APIs, software, automated systems, and other online interfaces.
ARTICLE 2
Definitions
For purposes of this Privacy Policy:
2.1 Personal Information
"Personal Information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an identified or identifiable individual.
Where applicable law distinguishes between "Personal Information," "Personal Data," or similar terminology, those terms shall be interpreted consistently with the applicable legal requirements.
2.2 Processing
"Processing" means any operation performed on Personal Information including collection, recording, organization, storage, adaptation, retrieval, consultation, use, disclosure, transmission, dissemination, restriction, deletion, destruction, or any combination thereof.
2.3 Controller
Where applicable under GDPR or UK GDPR, DNX acts as the "Controller" for Personal Information processed to provide the Services unless another relationship is expressly identified.
2.4 Processor
Where DNX processes Personal Information solely on behalf of an enterprise customer under written instructions, DNX may act as a "Processor" as defined under applicable data protection law.
2.5 Registrant Data
"Registrant Data" means Personal Information processed in connection with domain name registrations, renewals, transfers, and ICANN-required registration records.
Registrant Data may be subject to additional processing obligations imposed by ICANN, registry operators, and applicable law.
ARTICLE 3
Information We Collect
Depending upon how you interact with the Services, DNX may collect the following categories of information.
3.1 Information You Provide
You may provide information including:
Name;
Business name;
Employer;
Job title;
Postal address;
Billing address;
Shipping address;
Email address;
Telephone number;
Account credentials;
Government-issued identification where required;
Tax identification information;
Payment information;
Brokerage instructions;
Marketplace listings;
Customer support communications;
Domain portfolio information;
DNS configurations;
Verification documentation;
Identity verification records;
Transaction instructions;
Marketing preferences; and
Any other information voluntarily submitted to DNX.
Some information DNX collects, such as government-issued identification, financial account information, and precise identity-verification data, may be treated as “sensitive” Personal Information under Applicable Law. Where identity verification involves biometric information (for example, facial-geometry or liveness checks performed by a verification provider), DNX will collect and process that information only with the consent required by Applicable Law and in accordance with applicable biometric-privacy laws. DNX uses sensitive Personal Information only for the purposes described in this Privacy Policy, such as verification, fraud prevention, security, and legal compliance.
3.2 Information Collected Automatically
When you use the Services, DNX may automatically collect technical information including:
IP address;
Device identifiers;
Browser type;
Operating system;
Referring URLs;
Pages visited;
Time and date of access;
Session information;
Log files;
API usage information;
Device characteristics;
Language settings;
Cookie identifiers;
Network information;
Authentication events;
Security logs;
Error reports; and
Diagnostic information.
3.3 Transaction Information
We may collect information relating to:
Domain registrations;
Renewals;
Transfers;
Marketplace purchases;
Marketplace sales;
Brokerage engagements;
Escrow transactions;
Payment history;
Refund requests;
Subscription activity;
Enterprise agreements; and
Other commercial transactions involving the Services.
3.4 Communications
We collect communications exchanged with DNX, including:
Customer support requests;
Live chat communications;
Email correspondence;
Telephone communications where recording is permitted by law;
Survey responses;
Feedback submissions; and
Security reports.
3.5 Information from Third Parties
DNX may receive information from:
Registry operators;
ICANN;
Payment processors;
Identity verification providers;
Fraud prevention providers;
Sanctions screening providers;
Public databases;
Marketing partners;
Enterprise customers;
Business partners; and
Other lawful sources.
ARTICLE 4
Legal Bases for Processing
Where required by applicable data protection law, including the General Data Protection Regulation ("GDPR") and the UK GDPR, DNX processes Personal Information only where an appropriate legal basis exists.
Depending on the circumstances, DNX may process Personal Information because:
4.1 Performance of a Contract
Processing is necessary to:
establish and administer Accounts;
register, renew, transfer, or manage Domain Names;
provide Marketplace Services;
provide Brokerage Services;
process payments;
administer escrow transactions;
deliver enterprise services;
provide customer support;
provide APIs and developer services;
perform security monitoring; and
otherwise fulfill contractual obligations.
4.2 Compliance with Legal Obligations
DNX processes Personal Information where necessary to comply with Applicable Law, including obligations relating to:
ICANN Registrar Accreditation Agreements;
registry operator agreements;
court orders;
subpoenas;
lawful governmental requests;
tax obligations;
anti-money laundering requirements;
sanctions compliance;
fraud prevention;
accounting obligations;
record retention requirements; and
consumer protection laws.
4.3 Legitimate Interests
Where permitted by law, DNX may process Personal Information to pursue legitimate business interests, including:
improving the Services;
securing the Services;
preventing fraud;
investigating abuse;
enforcing contractual rights;
protecting Customers;
protecting intellectual property;
conducting analytics;
improving customer support;
developing new products;
performing internal reporting;
business planning;
corporate governance; and
defending legal claims.
When relying upon legitimate interests, DNX considers the rights and freedoms of affected individuals and balances those interests appropriately.
4.4 Consent
Where required by Applicable Law, DNX relies upon your consent before:
sending certain marketing communications;
placing non-essential cookies;
processing certain categories of Personal Information; or
conducting other processing activities requiring consent.
Where consent is the legal basis for processing, you may withdraw consent at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.
ARTICLE 5
How We Use Personal Information
DNX may use Personal Information to:
create and administer Accounts;
verify identity;
authenticate users;
process payments;
register Domain Names;
manage DNS services;
provide Marketplace functionality;
facilitate Brokerage Services;
administer escrow transactions;
deliver enterprise services;
provide APIs;
respond to customer inquiries;
investigate fraud;
detect abuse;
maintain security;
monitor system integrity;
comply with Applicable Law;
satisfy ICANN requirements;
satisfy registry requirements;
improve the Services;
perform analytics;
personalize user experiences;
send administrative communications;
provide security alerts;
send service announcements;
conduct customer satisfaction surveys;
develop new Services;
protect the rights of DNX and others; and
fulfill any other purpose disclosed at the time information is collected.
DNX does not sell Personal Information in exchange for monetary consideration as that term is commonly understood. However, certain disclosures relating to advertising technologies or analytics providers may constitute a "sale" or "sharing" under certain privacy laws, and individuals may exercise applicable opt-out rights where required.
ARTICLE 6
ICANN Registration Data
As an ICANN-accredited registrar, DNX processes Registrant Data in accordance with:
the ICANN Registrar Accreditation Agreement;
applicable ICANN Consensus Policies;
registry operator requirements;
applicable Registration Data Policies;
Temporary Specifications and successor policies; and
Applicable Law.
Registrant Data may include:
registrant name;
organization;
postal address;
email address;
telephone number;
administrative contact information;
technical contact information;
billing contact information;
registration dates;
nameserver information;
registrar identifiers;
transaction history; and
other information required for the registration and administration of Domain Names.
Certain Registrant Data may be disclosed through Registration Data Directory Services (RDDS), WHOIS replacement services, or other disclosure mechanisms where required or permitted by Applicable Law and applicable ICANN policies.
DNX may also disclose Registrant Data to:
registry operators;
ICANN;
data escrow providers;
dispute resolution providers;
law enforcement agencies;
governmental authorities;
courts;
registry service providers;
technical operators; and
other entities authorized by Applicable Law or ICANN policy.
ARTICLE 7
Cookies and Similar Technologies
DNX uses cookies and similar technologies that are necessary to operate our Services and provide features you request. These technologies allow us to authenticate your account, maintain and secure your session, prevent fraud and unauthorized requests, complete sign-in, remember items in your cart, retain information while you complete a transaction, and remember settings you choose.
Our authentication cookies contain opaque session identifiers rather than access or refresh tokens. They allow your browser to be associated with session information held securely on our servers. We also use short-lived cookies to protect sign-in and security processes, and a cart identifier that may remain for up to 30 days so that your cart can be retrieved. We may use browser storage for the same essential purposes, including checkout and transfer drafts, cart state, and interface preferences.
These cookies and similar technologies are essential to provide the Services you request. We do not provide an on-site control for disabling them. You can configure your browser to block or delete them, but sign-in, cart, checkout, security, and other requested features may then stop working correctly.
DNX does not use cookies or similar technologies for analytics, profiling, targeted advertising, or cross-context behavioral advertising. We do not sell personal information or share it for cross-context behavioral advertising.
We may disclose information to domain registries, payment providers, fraud-prevention and security providers, infrastructure providers, and other service providers where necessary to provide our Services, comply with law, enforce our agreements, or protect DNX and its users. Those operational disclosures are described elsewhere in this Privacy Policy and are not disclosures for cross-context behavioral advertising.
If we introduce a technology that requires consent or a legal opt-out in the future, we will provide the required information and choice before using it for that purpose.
ARTICLE 8
Analytics and Advertising
DNX does not use cookies or similar technologies for analytics, profiling, targeted advertising, or cross-context behavioral advertising. DNX does not sell Personal Information or share it for cross-context behavioral advertising.
The operational disclosures described in Article 10 are made where necessary to provide the Services, comply with law, enforce our agreements, or protect DNX and its users. They are not disclosures for cross-context behavioral advertising.
If we introduce technology requiring consent or a legal opt-out, we will provide the required information and choice before using it for that purpose.
ARTICLE 9
Marketing Communications
DNX may send marketing communications concerning:
new Services;
Marketplace opportunities;
Brokerage Services;
industry updates;
educational content;
promotional offers;
product announcements;
webinars;
events; and
newsletters.
Where required by Applicable Law, marketing communications will be sent only with the appropriate legal basis.
You may opt out of marketing communications at any time by using the unsubscribe mechanism included in the communication or by updating your Account preferences.
Administrative notices relating to security, billing, legal compliance, or operation of the Services are not considered marketing communications and may continue after marketing preferences have been withdrawn.
ARTICLE 10
Disclosure of Personal Information
DNX may disclose Personal Information where reasonably necessary to operate the Services.
Recipients may include:
Affiliates;
registry operators;
ICANN;
payment processors;
banks;
escrow providers;
cloud infrastructure providers;
hosting providers;
identity verification providers;
fraud detection providers;
sanctions screening providers;
customer support vendors;
professional advisers;
auditors;
insurers;
governmental authorities;
courts;
law enforcement agencies;
purchasers of all or part of DNX's business; and
other service providers engaged by DNX.
DNX requires service providers processing Personal Information on its behalf to maintain appropriate confidentiality and security obligations consistent with Applicable Law.
ARTICLE 11
International Data Transfers
Because DNX serves customers worldwide, Personal Information may be transferred to, processed in, or accessed from countries outside the jurisdiction in which it was originally collected.
Where required by Applicable Law, DNX implements appropriate safeguards for international transfers, which may include:
Standard Contractual Clauses approved by the European Commission;
the UK International Data Transfer Addendum;
adequacy decisions;
contractual safeguards;
technical safeguards;
organizational safeguards; or
other legally recognized transfer mechanisms.
DNX will take reasonable steps to ensure that transferred Personal Information receives a level of protection substantially equivalent to that required under applicable data protection laws.
ARTICLE 12
Data Retention
DNX retains Personal Information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, comply with Applicable Law, satisfy contractual obligations, protect the rights of DNX and its customers, resolve disputes, enforce agreements, and meet applicable regulatory and accounting requirements.
DNX maintains an internal data-retention schedule that sets retention periods by category of Personal Information. By way of illustration, domain registration and transaction records are generally retained for the life of the registration or relationship and for a further period consistent with ICANN data-escrow requirements, tax and accounting laws, and applicable limitation periods; identity-verification and anti-money-laundering records are retained for the period required by Applicable Law; and marketing preferences are retained until you opt out or the record is no longer needed. Specific retention periods are available on request where required by Applicable Law.
Retention periods may vary depending upon the nature of the information, the Services provided, and applicable legal obligations.
DNX may retain Personal Information for longer periods where necessary to:
comply with ICANN requirements;
satisfy registry obligations;
comply with tax or accounting laws;
respond to legal claims;
preserve evidence;
investigate fraud;
enforce contractual rights;
maintain security records;
comply with court orders;
comply with governmental requests; or
satisfy other legal or regulatory obligations.
Following expiration of the applicable retention period, Personal Information will be deleted, anonymized, aggregated, or otherwise securely disposed of unless continued retention is legally required.
ARTICLE 13
Information Security
DNX maintains administrative, technical, organizational, and physical safeguards designed to protect Personal Information against unauthorized access, disclosure, alteration, destruction, misuse, or loss.
Security measures may include:
encryption in transit;
encryption at rest where appropriate;
access controls;
role-based permissions;
multi-factor authentication;
logging and monitoring;
vulnerability management;
intrusion detection;
network segmentation;
backup procedures;
disaster recovery planning;
employee confidentiality obligations;
vendor security assessments; and
periodic security reviews.
No method of transmission or electronic storage is completely secure.
Accordingly, DNX cannot guarantee that Personal Information will never be accessed, disclosed, altered, or destroyed through unauthorized means.
Customers remain responsible for maintaining the confidentiality of their Account credentials and for promptly notifying DNX of suspected unauthorized access.
In the event of a personal-data breach affecting your Personal Information, DNX will notify affected individuals and the competent supervisory or regulatory authorities where, and within the timeframes, required by Applicable Law.
ARTICLE 14
Your Privacy Rights
Depending upon your jurisdiction, you may possess certain rights regarding your Personal Information.
Subject to Applicable Law, these rights may include the right to:
access Personal Information;
obtain confirmation regarding processing;
request correction of inaccurate information;
request deletion of Personal Information;
request restriction of processing;
object to certain processing activities;
withdraw consent;
request data portability;
request human review of certain automated decisions where legally required;
lodge a complaint with an applicable supervisory authority; and
exercise other rights provided under Applicable Law.
DNX will evaluate all requests in accordance with Applicable Law.
Where permitted by law, DNX may decline requests that are manifestly unfounded, excessive, repetitive, fraudulent, or otherwise not legally required.
DNX may require reasonable verification of identity before responding to privacy requests.
ARTICLE 15
California Privacy Rights
Residents of California may possess additional rights under the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), including rights to:
know what categories of Personal Information are collected;
know the sources of Personal Information;
know the business purposes for processing;
know categories of recipients;
request access;
request deletion;
request correction;
limit certain uses of Sensitive Personal Information where applicable;
opt out of the sale or sharing of Personal Information where applicable; and
receive equal service regardless of exercising privacy rights.
DNX will not unlawfully discriminate against any individual for exercising applicable privacy rights.
Authorized agents may submit requests on behalf of California residents where permitted by Applicable Law and subject to appropriate verification.
ARTICLE 16
European Privacy Rights
Individuals located within the European Economic Area, the United Kingdom, or other jurisdictions providing similar statutory protections may possess additional rights under applicable data protection legislation.
Where applicable, those rights may include:
access;
rectification;
erasure;
restriction;
objection;
portability;
withdrawal of consent; and
the right to lodge a complaint with the competent supervisory authority.
Where DNX relies upon legitimate interests as a legal basis for processing, affected individuals may object to that processing where permitted by Applicable Law.
DNX will evaluate such objections on a case-by-case basis.
ARTICLE 17
Automated Decision-Making
DNX may use automated systems to assist with:
fraud prevention;
sanctions screening;
payment risk assessment;
cybersecurity;
spam prevention;
abuse detection;
identity verification;
account security; and
operational efficiency.
These automated systems are designed to support, rather than replace, appropriate human oversight where required by Applicable Law.
Where Applicable Law grants rights relating to automated decision-making, DNX will provide those rights in accordance with applicable legal requirements.
Where an automated decision produces a legal or similarly significant effect concerning you and Applicable Law so requires, you may request human review of the decision, express your point of view, and contest the decision. DNX will honor such requests in accordance with Applicable Law.
ARTICLE 18
Children's Privacy
The Services are intended solely for individuals who are at least eighteen (18) years of age.
DNX does not knowingly collect Personal Information directly from children or minors.
If DNX becomes aware that Personal Information has been collected from an individual who was not legally permitted to use the Services, DNX may delete that information and terminate the associated Account where appropriate.
Parents, guardians, or legal representatives who believe Personal Information has been submitted by a child may contact DNX using the contact information provided below.
ARTICLE 19
Third-Party Websites
The Services may contain links to websites, services, applications, or platforms operated by third parties.
DNX does not control those third parties and is not responsible for:
their privacy practices;
security practices;
content;
availability;
accuracy; or
legal compliance.
Individuals should review the applicable privacy policies of third-party providers before providing Personal Information to those providers.
ARTICLE 20
Business Transfers
DNX may disclose or transfer Personal Information in connection with:
mergers;
acquisitions;
corporate reorganizations;
financings;
bankruptcy proceedings;
asset sales;
investments;
joint ventures; or
other corporate transactions.
Any successor entity receiving Personal Information will remain subject to appropriate confidentiality and legal obligations applicable to the transferred information.
ARTICLE 21
Changes to this Privacy Policy
DNX may modify this Privacy Policy from time to time.
Material changes will become effective on the Effective Date identified in the revised Privacy Policy unless a different effective date is required by Applicable Law.
Where required by Applicable Law, DNX will provide appropriate notice before material changes become effective.
Continued use of the Services following the effective date of an updated Privacy Policy constitutes acknowledgment of the revised Privacy Policy to the extent permitted by Applicable Law.
ARTICLE 22
Contact Information
Questions regarding this Privacy Policy or DNX's privacy practices may be directed through the contact methods published on DNX.com.
DNX will designate a specific contact for privacy inquiries, such as a dedicated privacy email address or an online request portal, through DNX.com. Where DNX is required to appoint a representative under Article 27 of the EU GDPR or the UK GDPR, the identity and contact details of that representative will be made available through DNX.com. Individuals in the European Economic Area or the United Kingdom may also contact DNX's data protection officer, where one has been appointed.
Individuals wishing to exercise applicable privacy rights may submit requests using the privacy request procedures made available through the Services or through the contact information designated by DNX for privacy inquiries.
DNX may request additional information reasonably necessary to verify identity before responding to a privacy request.
ARTICLE 23
Governing Law
This Privacy Policy shall be interpreted in conjunction with the DNX Terms of Service.
Nothing in this Privacy Policy limits any rights that individuals may possess under mandatory privacy or consumer protection laws applicable to the processing of their Personal Information.
Where any provision of this Privacy Policy conflicts with mandatory requirements of Applicable Law, the applicable legal requirement shall govern solely to the extent of that conflict, and the remaining provisions shall remain in full force and effect.