VeloxOffer ("VeloxOffer," "we," "us," or "our") operates a performance marketing network, offerwall provider, content locker platform, and reward app ecosystem at veloxoffer.com and related domains (collectively, the "Services").
This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the choices and rights available to you, across all categories of users on our platform: Publishers (Affiliates), Advertisers, Reward App End-Users, and general visitors to offerwalls, content lockers, and smartlinks.
By using the Services, you agree to the collection and use of information as described in this policy.
Who This Policy Applies To
We serve four distinct categories of users, and the data we collect differs depending on your role:
- Publishers (Affiliates): Individuals or businesses who monetize traffic through our offerwalls, content lockers, smartlinks, or white-label reward apps.
- Advertisers: Individuals or businesses who create campaigns to acquire installs, leads, or other user actions.
- Reward App End-Users ("Consumers"): Individuals who complete offers, surveys, or micro-tasks in exchange for points, cash, or other rewards.
- General Visitors: Individuals who interact with an offerwall, content locker, or smartlink without creating an account.
Information We Collect
Depending on your role and interaction with our platform, we collect the following types of information:
2.1 Publishers (Affiliates)
- Registration & Profile: Full name, email address, password (stored using one-way bcrypt hashing), company or website URL, messaging handles (Skype, Telegram, Discord), country of residence, and general regional jurisdiction.
- Identity Verification: Government ID or business verification documents, tax forms, and proof of address, where required to approve payouts.
- Financial & Payout Data: Chosen payout method (PayPal email, cryptocurrency wallet address, or bank/SWIFT details), transaction history, and payout eligibility records.
- Technical & Account Setup Data: Custom domain and DNS/SSL configuration, postback (webhook) URLs, API keys, sub-account credentials, and account activity timestamps.
2.2 Advertisers
- Registration & Account: Company name, contact representative name, email address, password (bcrypt hashed), and billing address.
- Campaign & Tracking Data: Campaign URLs, targeting parameters (country, device family, connection category), conversion goals, postback authentication keys, and delivery endpoint security parameters.
- Financial & Billing Data: Account balance, deposit records (including cryptocurrency transaction hashes and payment gateway references), campaign budgets, and bid data.
- Micro-Task Management Data: Task requirements, uploaded guidelines or logos, review decisions on worker submissions, and user block lists.
2.3 Reward App End-Users
- Account Credentials: Username, email address, password (bcrypt hashed), profile avatar, or Google account identity information (Google ID, name, and verified email) if you sign in with Google.
- Demographic Information: Date of birth and gender, collected to match you with eligible surveys and offers.
- Security & Verification Data: Standard technical diagnostics and session integrity indicators necessary to verify valid engagement, prevent unauthorized access, and protect user balances.
- Activity & Engagement Data: Points/coin balances, completed or reserved micro-tasks, uploaded proof files, screenshots, and notes, daily login streaks, XP and tier levels, and leaderboard rankings.
- Referral Data: Referral codes, referrer/referee relationships, and commission earnings.
- Redemption Data: Selected reward type, payout recipient details (email or wallet address), and fulfillment status.
- Support Data: Support ticket messages, attachments, and dispute or appeal records.
2.4 General Visitors (Offerwall / Content Locker / Smartlink Traffic)
Standard referral tokens, click routing parameters, and session state indicators required to track offer delivery and verify content unlock completion.
How We Use Your Information
We process personal data for the following purposes:
| Purpose | Data Used & Operational Need |
|---|---|
| Conversion attribution (S2S postbacks) | Transaction identifiers, offer parameters, status tokens, and sub-IDs — used to accurately attribute conversions between advertisers, VeloxOffer, and publishers. |
| Micro-task verification | Task requirements, uploaded proof, notes, dispute messages — used to confirm a task was completed before releasing rewards. |
| Offer and survey matching | User identifier, general country, age, and gender — shared with partner networks to match eligible offers and surveys. |
| Streaks, XP, and leaderboards | Check-in timestamps, streak counts, XP totals — used to calculate bonuses and level progress. |
| Referral program | Referral codes and relationships — used to attribute sign-ups and pay commissions. |
| Fraud prevention & platform security | Platform integrity telemetry and verification checks — used to detect unauthorized activity, prevent automated bot actions, and protect account balances and campaign budgets. |
| Rewards & payouts | Delivery email or wallet address, transaction ID, points deducted — used to fulfill rewards and maintain financial records. |
| Account administration | Account and profile data — used to operate, secure, and support your account. |
| Legal & compliance | Identity verification, tax, and transaction records — used to meet legal, tax, and accounting obligations. |
Notice on Data Sale: We do not sell your personal data for third-party commercial exploitation. Where data is shared with partners for service delivery or attribution (see Section 4), we treat this as a service relationship, not a sale, consistent with applicable law.
How We Share Information
We share personal data only as needed to operate the Services:
- Offerwall & Survey Partners: Providers such as BitLabs, CPALead, AdGate Media, Wannads, Notik, Torox, Revlum, Monlix, and InBrain receive a dynamic user identifier, general country, and, where relevant, demographic criteria to present eligible offers, and receive conversion confirmation upon successful completion.
- Security & Infrastructure Partners: Specialized cybersecurity and fraud-mitigation services assist in safeguarding the network against automated abuse and traffic manipulation.
- Authentication Providers: If you choose to sign in with Google, we receive your Google ID, name, and verified email via Google OAuth.
- Infrastructure & Hosting: We use hosting providers, Cloudflare (for DDoS protection, SSL, and CDN caching), and Upstash/Redis (for rate-limiting and temporary caching).
- Payment Networks: Blockchain networks (e.g., Bitcoin, Litecoin, TRON/USDT), PayPal, and other reward fulfillment partners process payouts and deposits.
- Legal Compliance: We may disclose information where required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of VeloxOffer, our users, or others.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction, subject to standard confidentiality protections.
Cookies, Local Storage & Tracking Technologies
- Essential Session Cookies: Including
laravel_sessionandXSRF-TOKEN, used for account sessions and CSRF protection. - Local/Session Storage: Used for interface preferences (e.g., dark/light theme), active tab state, notification dismissals, and cached filters.
- First-Party Tracking Tokens: Ephemeral click identifiers (e.g., click IDs) passed via URL parameters to track conversions through the affiliate funnel.
We do not use third-party cross-site advertising or tracking cookies. You can control cookies through your browser settings; disabling essential cookies may affect core functionality such as login and security.
Data Security
- All passwords are stored using one-way bcrypt hashing; we never store passwords in plain text.
- All domains, subdomains, and API endpoints are served over HTTPS (TLS 1.3).
- Server-to-server postbacks are validated using secret keys, HMAC signatures, and IP whitelisting.
- Access to sensitive data (financial, identity verification) is restricted to authorized personnel on a need-to-know basis.
No method of transmission or storage is 100% secure, and we cannot guarantee absolute security, but we work to protect your data using industry-standard safeguards.
Data Retention
- Account and financial transaction records are retained as required for legal, tax, and accounting purposes.
- Task proof files (screenshots, URLs, notes) are stored securely and deleted or archived once the applicable review and dispute window has expired.
- Audit and security logs are retained to investigate fraud, chargebacks, and violations of our Terms of Service.
When data is no longer needed for these purposes, we take steps to delete or anonymize it.
Children's Privacy
VeloxOffer and its reward apps are not intended for individuals under 13 years of age (or a higher minimum age, such as 16 or 18, where required by local law or where payout/cryptocurrency features apply). We do not knowingly collect personal data from children below the applicable minimum age. If we learn that we have collected such data, we will take steps to delete it. Parents or guardians who believe a child has provided us with personal data should contact us using the details in Section 12.
Your Rights Under GDPR / UK GDPR (European Users)
If you are located in the European Economic Area or United Kingdom, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erasure ("right to be forgotten"), including account deletion.
- Data portability, to receive your data in a structured, commonly used format.
- Object to or restrict certain processing.
We process your data on the following legal bases: performance of a contract (e.g., delivering rewards, processing payouts), legitimate interests (e.g., fraud prevention, platform security), and consent (e.g., optional profile details, participation in surveys). You may withdraw consent at any time where processing is based on consent.
Your Rights Under CCPA / CPRA (California Residents)
If you are a California resident, you have the right to:
- Know what personal data we collect, use, and disclose.
- Delete personal data we hold about you, subject to certain exceptions.
- Correct inaccurate personal data.
- Opt out of the "sale" or "sharing" of personal data. We do not sell personal data for monetary consideration; data shared with offerwall/ad partners is shared solely for service fulfillment and conversion attribution.
- Non-discrimination for exercising any of your privacy rights.
To exercise these rights, contact us using the details in Section 12.
Fraud Prevention Notice
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to our team:
Support & Inquiries
support@veloxoffer.comRegistered users can also submit inquiries 24/7 directly through the Support Tickets desk inside the dashboard.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the updated policy on this page with a revised "Last Updated" date. Continued use of the Services after changes take effect constitutes acceptance of the revised policy.