Document Upload & Processing Notice

This Notice explains the terms that apply when you submit a file or its contents to D.O.X Capital through a covered upload feature. "Upload" means any document, image, spreadsheet, statement, form, attachment, extracted text, metadata, or other information you provide through a covered upload channel.

1. Purpose and scope

This Notice supplements the Privacy Policy, Terms of Service, and any service agreement or intake disclosure that applies to the relevant interaction. If a service-specific instruction sets a narrower permitted use than this Notice, the narrower instruction controls for that upload. Nothing in this Notice authorizes a use of personal information that applicable law prohibits.

2. When to use the upload feature

You may use a covered upload feature only for the purpose described next to that feature and only when the requested document is reasonably necessary for that purpose. Permitted file types are PDF, DOCX, JPG, PNG, or TXT, up to 20 MB per file. Submit only the pages, fields, and supporting material that the request calls for. Do not use the feature as general storage, a way to send unsolicited records, or a substitute for an emergency, regulatory, legal-service, health-care, or financial-institution channel. An upload does not by itself create a professional, fiduciary, lender-borrower, broker, attorney-client, accountant-client, employment, or other relationship.

3. Your authority to upload

You may upload a file only if you have the legal right and authority to provide it for the stated purpose. By submitting a file, you represent that:

• the file is yours, or you are authorized by the owner and by each affected person to provide it;
• the submission does not violate a contract, confidentiality duty, court order, intellectual-property right, privacy right, or other third-party right;
• any consent, notice, or authorization required for information about another person has been validly obtained;
• the file is not knowingly false, altered to mislead, unlawfully obtained, or submitted for a fraudulent or abusive purpose; and
• you have reviewed the file for information that is unnecessary for the stated purpose.

If you no longer have authority to provide a file, notify admin@thedoxs.com promptly.

4. Do not upload prohibited or unnecessary information

Unless the upload request expressly identifies a category as required, do not submit highly sensitive, regulated, or unrelated information, including: full Social Security, tax-identification, passport, or driver's-license numbers; complete payment-card or bank-account credentials, passwords, authentication codes, or private keys; medical, genetic, biometric, or health-insurance information; precise geolocation or information about sexual life, religious or political beliefs, union membership, immigration status, or racial or ethnic origin; criminal-history, child-custody, or background-check records; information subject to a protective order, litigation hold, privilege, or nondisclosure duty; information about a minor; trade secrets or third-party files you are not authorized to disclose; or any data not relevant to the specific request shown at the upload point. Do not upload illegal content, malicious code, or material that infringes, defames, harasses, threatens, impersonates, or facilitates fraud.

5. Review and redact before submitting

Open the final file and confirm it is the version you intend to submit. Where the requested purpose does not require a field, redact or remove it before uploading. Visual black boxes are not always permanent redactions — some formats retain selectable text, prior versions, comments, properties, or metadata. Use a reliable redaction method, verify the resulting file, and keep an unmodified copy for your own records.

6. Purposes and limits on use

We process uploads to receive a requested document, verify completeness, extract requested fields, communicate about the request, provide the contracted service, maintain security, detect misuse, comply with a valid legal obligation, or resolve a dispute. An upload is not used for an unrelated purpose merely because the file is technically accessible. We separately evaluate and disclose, and obtain any required consent for, any proposed use for marketing, product development, model training, profiling, eligibility scoring, or a consequential decision. D.O.X Capital does not promise that an upload will be accepted, complete a request, establish identity, prove eligibility, or produce any financing, credit, legal, tax, or other result.

7. Service providers and processing

Uploads may be received or accessed by service providers that perform hosting, security, document management, communications, or professional functions, limited to a lawful and relevant purpose and described in the Privacy Policy where required. Any disclosure to an adviser, auditor, insurer, transaction counterparty, regulator, or court is limited to a lawful and relevant purpose.

8. Security, transmission, and malware validation

We use administrative, technical, and physical safeguards appropriate to the upload workflow. No transmission method, storage system, or security program eliminates all risk; do not upload a document if you are unwilling to accept the residual risk of electronic transmission and processing. We may validate file type, size, and structure and scan files for malware, and may reject, quarantine, restrict, or remove a file when reasonably necessary to protect systems, users, or legal obligations. Use a supported format and do not submit executable files, password-protected archives, macros, scripts, or links the workflow did not request, or attempt to probe, overload, or disable upload safeguards.

9. Automated tools and AI-assisted review

Files may be opened, viewed, organized, transcribed, extracted, compared, or otherwise processed only as disclosed for the workflow, and human access is limited by role and purpose. Where AI-assisted review is used, uploaded content may be processed by an automated system as described in the Automated Document Processing & AI-Assisted Review Disclosure. AI or automated extraction may omit, misread, invent, misclassify, or misinterpret information, especially in low-quality, handwritten, complex, or multilingual files; it is not accurate, complete, or suitable for sole reliance, and no uploaded file is used for an undisclosed consequential decision.

10. Correcting, replacing, or withdrawing an upload

If you submitted the wrong file or discover an error, contact admin@thedoxs.com and identify the relevant request without sending additional sensitive information in the initial message. You may ask to withdraw an upload or revoke consent where applicable by contacting admin@thedoxs.com. Withdrawal ordinarily applies prospectively and may not require us or another recipient to undo processing that was lawful before withdrawal, and may be limited by contractual necessity, recordkeeping duties, fraud prevention, security needs, legal claims, a valid legal hold, or another person's rights.

11. Retention, deletion, backups, and legal holds

We keep upload information only for as long as reasonably necessary for the disclosed purpose and applicable obligations, as described in the Data Retention & Deletion Policy. A deletion request or account closure does not necessarily result in immediate or complete erasure from every system; residual copies may remain temporarily in backups, disaster-recovery systems, or security logs, or may be preserved when required by law, court order, dispute, investigation, or a valid legal hold.

12. Keep your own copy

Unless a service agreement expressly says otherwise, the upload feature is not a records repository, document vault, or backup service. Keep the original or another readable copy, along with any proof of submission the interface provides. A technical confirmation means only that the system recorded the event; it does not establish that the file is accurate, sufficient, accepted for a service, reviewed by a person, or delivered to a third party.

13. Third-party rights

When a file contains another person's information, consider that person's rights before submitting it, and provide any legally required notice and obtain any legally required consent. A person whose information appears in an upload may contact admin@thedoxs.com to ask about applicable rights. Nothing in this Notice limits lawful fair use, protected reporting, whistleblowing, or another nonwaivable right.

14. Point-of-upload acknowledgment

Before submission, each covered feature displays a short, purpose-specific notice identifying the requested categories, the purpose, any sensitive-data or third-party-data implications, the AI status, and links to this Notice and the Privacy Policy, and requires an affirmative acknowledgment separate from acceptance of general terms and from marketing or other unrelated consents.

15. Changes to this Notice

We may revise this Notice to reflect changes in law, services, vendors, or processing. No revision retroactively authorizes processing that was unlawful when performed, and this Notice does not limit any right or remedy that cannot be waived under applicable law.

Contact

Questions about an upload, privacy of an upload, or a security concern may be directed to D.O.X Capital at admin@thedoxs.com. Do not use a support channel for emergencies.