Privacy notice

Last updated: 2026-09-24

This privacy notice applies to the services operated under the Xovi and AxoloDAO brands.

1. Data controller

Since September 24, 2026, the controller of your personal data is ZENBIT S.A.S. de C.V., a Mexican company, which is responsible for the operation and tax management of payments associated with Xovi.

We want you to clearly know who is responsible for your information and how to contact us. For any matter related to privacy or personal data, you can email us at hola@axolodao.org. We also provide the following contact address: José María Pino Suárez No. 46, Colonia Centro, C.P. 76000, Santiago de Querétaro, Querétaro, Mexico.

If the person or entity responsible for Xovi changes in the future, we will update this privacy notice on this same page. When required by law, we will also request your consent.

2. Personal data we process

Payment and billing (Stripe): name, email address, billing address, RFC when necessary for CFDI, and the last 4 digits of the card. Full card data does not pass through our servers; it is processed directly by Stripe under its own security and compliance standards.
On-chain identity (SIWE): wallet address, which is public by definition, and authenticated session. We do not link your wallet to an email address, RFC, or legal identity, except when necessary to operate the service, process payments, issue tax receipts, respond to requests, or when you provide that data when paying or participating in the platform.
Technical telemetry: IP address, user-agent, and basic technical events to prevent fraud, detect abuse, debug errors, and maintain the security of the service. The IP address we use to limit abuse is not kept beyond the control period.
Cookies, sessions, and similar technologies: we may use technical cookies, local storage, or similar technologies necessary to maintain your session, authenticate your wallet, prevent fraud, operate the site, and debug errors. If in the future we use non-essential analytics, advertising, or third-party cookies, we will inform you and, when applicable, request your consent.
Submitted clips: video clip, timestamp range of the live stream, and the wallet from which the clip was submitted.

3. Important: irreversibility of on-chain operations

Any on-chain operation you make from your wallet is irreversible once confirmed on the corresponding network. Before confirming a transaction, carefully verify the network, token, amount, and destination address. Xovi does not accept on-chain payments.

Your wallet address is public on the blockchain and may be visible to third parties. AxoloDAO cannot delete, modify, or reverse public records confirmed on blockchain networks.

4. Purposes of processing

We process your personal data for the following purposes necessary to provide the service:

Process subscription payments.
Issue tax receipts when applicable.
Authenticate your session and link your participation to your wallet.
Register clips, validations, and other forms of participation within the platform.
Operate, maintain, and provide technical support for the platform.
Prevent fraud, abuse, spam, or misuse of the service.
Respond to requests, clarifications, or communications related to your account or participation.
Send operational communications, such as receipts, service notices, or relevant changes.
Maintain technical, tax, accounting, and security records.

We may also process your data for the following optional purposes:

Send you non-essential communications about updates, activities, or news related to the project.
Invite you to surveys, community dynamics, or activities related to AxoloDAO.
Analyze user participation in aggregate form to improve the product, without individual profiling.

You may object to the processing of your data for optional purposes by emailing hola@axolodao.org.

5. Processors and providers

Stripe Payments Mexico — payment processing.
Vercel — website hosting and operational records.
Neon — relational database for storing sessions, subscriptions, and clips.
YouTube (Google) — live stream hosting.
Privy (United States) — sign-in with email or Google and the Xovi Wallet. It processes your email, your wallet address and the technical data of your connection, such as your IP address. Privy uses its own providers, such as Datadog, for its service's technical logging.
Sentry (United States) — technical error logging for the app. It receives the error data and your browser details, without your IP address or cookies.

If you choose to connect an external wallet, depending on the one you pick your browser may communicate with WalletConnect (Reown), which connects wallets such as Rainbow or Ledger, or with Coinbase, if you pick Base Account. They receive your IP address and your browser details in order to connect the wallet. Xovi remembers that choice in your browser, without identifying you, until you undo it with «Desconectar»; until then, your browser may contact them again on each visit.

6. Data retention

We will retain your personal data only for the time necessary to fulfill the purposes described in this notice and the applicable tax, accounting, contractual, or legal obligations. In Mexico, accounting and tax documentation may require retention for a general period of 5 years under the Mexican Federal Tax Code.

SIWE sessions will be retained for a limited operational period. Submitted clips and participation records will be retained as long as necessary to validate submitted clips, maintain traceability, document the project, improve the system, or comply with legal obligations.

When technically and legally possible, you may request the deletion of your data. On-chain records, such as transactions, attestations, hashes, or public wallet addresses, cannot be deleted or modified by AxoloDAO once confirmed on a blockchain network.

7. ARCO rights and withdrawal of consent

You may request access, rectification, cancellation, or opposition to the processing of your personal data, as well as withdraw your consent when applicable, by emailing hola@axolodao.org.

Your request must include: full name, means to receive a response, the right you wish to exercise, a clear description of the personal data related to your request, and, when applicable, a document proving your identity or legal representation.

We will communicate the adopted determination within a maximum period of 20 business days from the receipt of the request. If the request is granted, it will be made effective within 15 business days following the date on which the response is communicated, in accordance with applicable law.

8. Limitation of use and disclosure

You may request the limitation of the use or disclosure of your personal data, withdraw your consent for non-necessary purposes, or ask to stop receiving non-essential communications by emailing hola@axolodao.org.

9. National and international transfers

To operate Xovi, some processors and providers, such as Stripe, Vercel, Neon, or Google, may process personal data inside or outside Mexico, solely to fulfill the purposes described in this notice.

When the processing constitutes a national or international transfer of data to third parties, it will be carried out in accordance with applicable law, for the maintenance, fulfillment, or operation of the legal relationship between you and the controller, or when necessary to process payments, operate the platform, provide the service, comply with legal obligations, or respond to requests related to your participation.

10. Changes to this privacy notice

Any modification to this notice will be published on this same page. When the change is material or requires consent under applicable law, we will notify you through the available contact channels or through a visible notice on the site.