ZoxerTech Privacy Policy

Welcome to ZoxerTech (accessible at https://zoxertech.me and related endpoints, services, APIs, and subdomains, collectively referred to as "ZoxerTech", "ZOXER", "we", "our", or "us").

This Privacy Policy describes how we collect, process, maintain, protect, and disclose information when you visit our website, download automated bot codes, generate session credentials, configure Termux environments, generate AI imagery and voice synthesis, host images, or interact with our support infrastructure.

By accessing or using any aspect of ZoxerTech, you acknowledge that you have read, understood, and agree to the practices outlined in this policy. If you do not agree with any part of this policy, please discontinue use of our platforms immediately.

We strive to collect only the minimal data strictly necessary to provide our developer tools and community services.

A. Information You Voluntarily Provide

• Support & Inquiry Details: When you submit a ticket via our Support Hub, we collect your name, email address, inquiry subject, and the textual message you provide.
• Tool Inputs: Text strings provided to our AI Voice Generator (Neural TTS), AI Prompt Hub, Fancy Font transformer, or ASCII converter.
• Pairing Phone Numbers: When utilizing the WhatsApp 8-digit Pairing Code generator, you submit your WhatsApp phone number with country code for real-time authentication handshake processing.
• Uploaded Media: Images uploaded to our cloud image host for bot hosting and sharing purposes.

B. Information Collected Automatically

• Technical & Diagnostic Data: Internet Protocol (IP) address, browser version and user agent, operating system type, screen resolution, referring URLs, and network latency logs.
• Usage & Performance Metrics: Timestamp of requests, rate-limiting counters, payload sizes, and error tracking diagnostics to defend against malicious traffic, automated scrapers, and denial-of-service attacks.

Because WhatsApp bot automation involves cryptographic keys and device pairing, we adhere to strict architectural safeguards:

• Session Generators & Pairing Codes: Our 8-digit pairing code generator operates as an ephemeral websocket/HTTP bridge directly communicating with Baileys authentication endpoints. The generated session key (`creds.json` or base64 session string) is presented on your screen for your personal download and deployment. We do not persist copies of your session secrets in any centralized database.
• Self-Hosted Bot Execution: Downloaded bot packages (e.g. Mazari Bot, Zoxer Mini, or custom scripts) execute locally on your hardware, Termux Android environment, or your personal VPS. We have no remote backdoor access into your running bot instances.
• WhatsApp Account Recovery Forms: The unban generator tools generate structured advisory appeal text for you to submit to WhatsApp official support. We never store personal identification documents or passport records.

ZoxerTech provides generative artificial intelligence tools including AI Image Generation, Neural Text-to-Speech (AI Voice), and Prompt Engineering utilities:

• Prompt Processing: Prompts entered into AI generation tools are transmitted via encrypted TLS connections to our serverless inference workers and trusted AI model APIs (e.g. Cloudflare Workers AI, Hugging Face, Pollinations).
• No Model Training On User Inquiries: Your private text queries and generated media outputs are not indexed, stored, or repurposed by ZoxerTech to train generative models.
• Ephemeral Audio & Images: Generated audio previews and synthesized images are streamed back to your browser session. Unless explicitly saved to our public image host by the user, these generated assets are not permanently archived.

Our Cloud Image Host tool allows bot developers and users to upload media assets for bot menu banners, stickers, and profile images:

• Public Accessibility: Any image uploaded to the image host generates a unique public URL. Anyone with possession of the URL can view the asset. Do not upload personal, confidential, or sensitive documents.
• Strict Zero-Tolerance Material: We enforce automated hash filtering and human review against child sexual abuse material (CSAM), violent extremism, phishing assets, and illegal malware. Any violating content is permanently erased immediately and reported to relevant legal authorities.
• Retention & Expiry: Hosted images may be subject to automated cleanup after inactivity or expiration periods based on server capacity limits.

We process the information we collect strictly for the following purposes:

• Service Delivery: To generate requested pairing codes, compile bot scripts, output speech synthesis, and serve downloadable packages.
• Customer Support: To investigate, reply to, and resolve support requests or technical bug reports submitted via our contact forms.
• Infrastructure Protection: To detect, mitigate, and prevent DDoS attacks, spam flooding, abusive API calls, and automated bot scrapers.
• Continuous Optimization: To gauge which scripts, guides, and tools are most popular and optimize server distribution.
• Legal Compliance: To comply with applicable laws, subpoenas, regulatory requirements, and platform terms of service.

ZoxerTech utilizes minimal, essential browser storage mechanisms (including Cookies, localStorage, and sessionStorage):

• Essential Functional Storage: Used to retain client-side preferences (such as theme modes, font generator state, rate-limiting counters, and session generation progress).
• Security Cookies: Cloudflare edge security tokens (such as __cf_bm or clearance tokens) used strictly to differentiate legitimate human users from malicious automated bot attacks.
• No Third-Party Advertising Trackers: We do not employ third-party behavioral advertising cookies, Facebook tracking pixels, or cross-site data broker trackers.

You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. Note that disabling essential storage may cause certain tool state functionalities to reset upon page reload.

To provide our globally distributed, lightning-fast services, we collaborate with reliable cloud infrastructure providers:

Our website also contains social community links to WhatsApp channels, Telegram groups, and YouTube channels. We are not responsible for the privacy practices of external platforms; we advise reviewing their respective privacy policies.

For individuals located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process personal information pursuant to the following lawful bases under Article 6 of the General Data Protection Regulation (GDPR):

• Contractual Performance: When necessary to fulfill your request to generate session codes, serve scripts, or answer support tickets.
• Legitimate Interests: To secure our web application against attacks, ensure uptime, and prevent platform abuse.
• Consent: When you provide clear affirmative consent (such as voluntary support submissions or explicit feedback).
• Legal Obligation: When required to comply with binding court orders or statutory reporting laws.

Regardless of your geographical location, ZoxerTech respects your autonomy and provides comprehensive privacy privileges:

We adhere strictly to data minimization and do not store information longer than required:

• Pairing & Session Credentials: Erased immediately from system memory once delivered to the client terminal. Zero central retention.
• Support Messages: Retained for up to 180 days to maintain context on support tickets, after which inquiries are permanently deleted or anonymized.
• Server Edge Access Logs: Retained by security systems for a rolling window of up to 30 days for forensic inspection before automated scrubbing.
• Image Host Uploads: Maintained until deleted by administrative cleanup, policy violation removal, or server storage recycling.

ZoxerTech implements defense-in-depth security engineering to protect all traffic:

• Encryption in Transit: 100% of network data exchanged between your browser and our servers is secured via Transport Layer Security (TLS 1.3 / HTTPS). Unencrypted HTTP requests are automatically upgraded.
• DDoS & Edge Firewalls: Web Application Firewalls (WAF) and intelligent rate limiters monitor anomalous traffic spikes to prevent unauthorized exploitation.
• Restricted Access: Platform administration interfaces require strict cryptographically validated authentication keys.

While we implement robust industry safeguards, no transmission over the Internet or electronic storage can be guaranteed 100% impenetrable. We encourage all bot developers to protect their local server environments, Termux storage, and API keys.

Our services, bot scripts, and developer tools are intended for individuals who are at least 13 years old (or 16 years old in certain jurisdictions including the European Union).

We do not knowingly solicit or collect personally identifiable information from children under 13 years of age. If we discover that a child under 13 has provided us with personal information without verified parental consent, we will take immediate steps to remove such data from our systems. Parents or guardians who believe their child has submitted personal details may contact us at our support center.

As we release new bot architectures, AI features, and developer utilities, we may periodically revise this Privacy Policy.

Any updates become effective immediately upon posting to this page, accompanied by an updated "Last Updated" date at the top of the document. We recommend visiting this page periodically to remain informed of our privacy commitments.

If you have questions, feedback, or concerns regarding this Privacy Policy, our data handling, or wish to exercise your rights under GDPR/CCPA, please reach out to our team: