Doxzilla

Doxzilla Privacy Policy

Version 1.1. Effective 12 October 2026.

What changed from version 1.0: from 12 October 2026 doxzilla.com uses Google Analytics (measurement) and the Meta pixel (documentary suggestions), only when you accept the category concerned. Details are in clauses 4.2, 5.2, 6, 10.2, 10.3, 10.7 and 11.4. Because providers have been added, the cookie bar will ask you again.

Applies to doxzilla.com, app.doxzilla.com, the Doxzilla apps (iOS and Android) and Doxzilla Learning.

The Thai version is the master text.

The short version

1. The doxzilla.com website is an introduction to the service. It has no forms to fill in and no embedded video. If you do not accept in the cookie bar, the site sends none of your data to any measurement tool or advertising provider.
2. Measurement cookies and documentary suggestion cookies are off by default. They switch on only when you accept, and you can withdraw as easily as you accepted, using the "Change cookie settings" link at the bottom of the website's pages.
3. If you accept documentary suggestion cookies, we use the Meta pixel to show you Doxzilla ads again after you leave our site (retargeting), for example on Facebook. If you do not accept, there is none. We never do this on any Doxzilla Learning page, and we do not use children's data to build advertising audiences. Measurement cookies use Google Analytics to count which pages are read. Both providers are located abroad (clause 5.2).
4. Signing up, paying and watching happen at app.doxzilla.com and in the apps. We collect only what we need to open your account and charge you. We do not store your full card number ourselves.
5. We do not sell your personal data. The receipt email when a charge succeeds, the email when a charge cannot be made, and the reminder before an annual renewal are account emails and are always sent. News from Doxzilla reaches you mainly through notifications in the app, which you choose to allow yourself and can turn off at any time in your device settings. We may also send news by email and by LINE @doxzilla, no more than 2 a month on each channel and not counting service emails, only to people who have given consent separately from signing up, and you can stop at any time (clauses 11.2 and 11.2A).
6. You can ask to see, correct or delete your data, object to its use, or withdraw consent. Message LINE @doxzilla or call 02 735 1000.

1. Who looks after your data

1.1 The data controller (the party that decides what data is collected and why) is Next Step Co., Ltd., 319 Soi Ramkhamhaeng 60, Hua Mak, Bang Kapi, Bangkok 10240, Thailand.

1.2 You can contact us about personal data through:

• LINE @doxzilla
• Telephone 02 735 1000
• Post, at the address in clause 1.1

2. Data we collect

We collect data you give us directly and data that arises from your use of the service.

2.1 Account data: email or phone number, a name if you enter one, a password stored in encrypted form, and temporary OTP codes sent to verify you.

2.2 Subscription data: chosen plan (monthly or annual), start date, charge date, status (active, cancelled, stopped), codes used, and history of cancellations and refund requests.

2.3 Payment data:

• On the website: you enter card details on the page of our payment service provider. We do not see or store the full card number. We receive only the result of the charge and the information needed to manage your subscription, such as a token that stands for the card, the card brand and the last digits of the card.
• In app stores (App Store, Google Play): Apple or Google takes payment and holds your card data. We receive the receipt and subscription status.
• QR scan: we receive confirmation that the money arrived and the details the bank sends so we can match the payment.

2.4 Usage data: viewing history, titles you left part-watched, favourites, audio language chosen, devices signed in (up to 5; if more than 5 sign in, the system automatically removes a device that is not in use, or the device that signed in first), sign-in times, and the number of simultaneous screens.

2.5 Doxzilla Learning data, as far as that service provides it, such as activities done, grade level chosen, and work submitted to activities.

2.6 Device and technical data when you use the member system and the apps: IP address, device model, operating system, app version, the device ID used to send notifications (only if you allow notifications in the app), browser type, data from essential cookies (see section 10), and data used to check whether you are in Thailand (see section 12).

2.7 Data from visiting doxzilla.com:

• The hosting and content delivery provider we use receives the request to open your page, so it sees your IP address, browser type and the time. It uses this to deliver the page and to block attacks. We do not use this data to build reports about individuals.
• The fonts on the site are held on our own site and are not loaded from another provider.
• The site stores your cookie answer, and a few settings you choose, in your own browser, for example which story a Learning page remembers you skipped. This stays on your device and is not sent to us (see section 10).
• Links that bring you from another site in our group, or links that people share, may carry a tail showing the channel they came from (called utm). It contains no name or personal data. We record it only if you accept measurement cookies.
• If you accept measurement or documentary suggestion cookies, Google or Meta (depending on the category you choose) collects more data, as described in clause 10.3.

2.8 What you send us: messages and pictures sent through LINE @doxzilla, email or telephone, for example a screenshot of a problem.

2.9 Choices you give us, such as your agreement to receive news by email and by LINE (with a record of when you agreed or withdrew, through which channel, and on which wording), your cookie answer, and your choice to allow or turn off notifications in the app (related data is in clauses 11.2 and 11.2A).

2.10 We do not intend to collect sensitive data under section 26 of the PDPA (for example religion, health, biometric data). If you tell us such things yourself, we use them only as needed to help you.

2.11 Some data is required: email or phone number, and payment data, because they are needed to make the contract. Without them we cannot open an account or provide the service. Other data is optional. Reading the introduction pages requires no data from you at all.

3. What we use it for and the legal basis

Thai law lets us collect and use data only with a recognised basis. Ours are: necessary for the contract with you, compliance with law, our legitimate interests, and your consent.

3.1 Consent is separate from accepting the Terms of Service, and we do not make consent a condition of the core service. If you do not accept measurement or documentary suggestion cookies, do not agree to news by email or LINE, or do not turn on notifications in the app, you can still read the site, sign up and watch as normal. You can withdraw consent at any time, as easily as you gave it.

3.2 We do not decide your rights by automated means alone without a human review.

3.3 If we want to use data for a new purpose different from what is stated here, we will tell you first, and ask for consent if the law requires.

3.4 Children's data and data in member accounts (viewing history, learning data) is never used for the marketing and advertising rows above.

4. Who we share data with

We do not sell your personal data. We share what is needed with:

4.1 Service providers who act for us (data processors, who follow our instructions and keep data confidential), namely:

• payment service providers and the acquiring bank
• hosting, cloud, and video and web delivery network providers
• email, OTP and SMS providers
• error-reporting and usage analytics providers in the member system and apps
• customer support tool providers
• development and system maintenance contractors, to the extent they need access to data to do their work

4.2 Website measurement providers and advertising platforms, only when you accept cookies in that category. We currently use 2: Google (Google Analytics) for measurement and Meta (the Meta pixel) for documentary suggestions. These providers receive data that your browser sends to them directly, and may use it under their own policies too, for example to improve their advertising systems. We choose the settings that limit the providers' own use as far as they allow. The details are in clause 10.3. If we add another, we will amend this policy and ask for your consent again first.

4.3 App stores. If you subscribe through an app, Apple or Google looks after your payment data under its own policy. Apple's and Google's systems on your device also act as the notification service that delivers the app's notifications to your device, receiving the device ID and the notification text so they can reach that device.

4.4 LINE. If you add us as a friend or message LINE @doxzilla, the messages sit in LINE's system under LINE's policy. We see the messages and profile information you send to the official account. Please never send card numbers or passwords on LINE. We see your display name, profile picture and LINE user ID (an ID that LINE gives each person), as far as your LINE settings let an official account see them. We use LINE @doxzilla to answer questions you send us, and to send news, no more than 2 a month, only to people who have agreed to receive it under clause 11.2A. Adding us as a friend does not by itself count as agreeing to receive news.

4.5 Banks and providers involved in the charges you authorise.

4.6 Government bodies and courts when the law or a lawful order requires it.

4.7 Legal advisers, accountants and auditors, as needed.

4.8 A buyer, if the company sells or transfers the business. Data goes with the business, the recipient must follow this policy, and we will tell you.

5. Sending data abroad

5.1 Some of the cloud, email and usage analytics providers we engage may be located outside Thailand. Your data may therefore be sent or stored there. The LINE provider, which receives and holds your data when you add us as a friend or message our official account, is also located outside Thailand. That data sits in LINE's system under LINE's policy. The Apple and Google notification systems are also located outside Thailand. The device ID and notification text passing through them sit in their systems under their policies.

5.2 The measurement provider and advertising platform in clause 4.2 are Google and Meta, whose parent companies are in the United States. Data may be processed in data centres in the United States or other countries they use. If you switch on measurement or documentary suggestion cookies, the data your browser sends to these providers will be in another country, where data protection standards may differ from Thailand's. We send it relying on appropriate safeguards under section 29 and the Personal Data Protection Committee's notification on protecting personal data sent abroad, for example standard contractual clauses that give you rights and remedies you can enforce. Before we switch on any provider, we check that it has these safeguards in place. If it does not, we do not use that provider. The cookie settings window also tells you about transfers abroad. You can ask about the safeguards under clause 5.4, and you can switch the cookies off at any time.

5.3 For other transfers abroad, we first check that the destination country or recipient has adequate data protection standards under the rules set by the Personal Data Protection Committee, for example by using standard contractual clauses, or that a section 28 exception applies, such as necessity for the contract with you (section 28(3)). We put protective measures in place in line with sections 28 and 29.

5.4 If you would like to know what safeguards we use, contact us as in clause 1.2.

6. How long we keep data

We keep data only as long as needed for its purpose and for the periods the law requires. After that we delete it or make it unidentifiable.

7. How we keep data safe

7.1 We have appropriate technical and organisational security measures, for example limiting who can access data, encrypting data where appropriate, and reviewing our measures when technology changes, as section 37 requires.

7.2 Providers who receive data from us as processors must sign contracts to keep it confidential and use it only on our instructions.

7.3 If data is breached and there is a risk to your rights, we notify the Office of the Personal Data Protection Committee without delay and, where feasible, within 72 hours of becoming aware. If the risk is high, we will also tell you, with advice on what to do (section 37(4)).

7.4 Help us look after it: use a password that is hard to guess, keep it within your household, and sign out on devices you no longer use.

8. Your rights

Under the Personal Data Protection Act B.E. 2562 (2019) you may:

• ask to see and get a copy of your data (section 30);
• receive your data in a readable, reusable format and ask us to send it to another controller where technically possible (section 31);
• object to collection, use or disclosure, especially for direct marketing, which we stop at once (section 32);
• ask us to erase, destroy or anonymise data when section 33 applies;
• ask us to restrict use of data when section 34 applies;
• ask us to correct data so that it is accurate and up to date (sections 35 and 36);
• withdraw consent at any time (section 19), without affecting what was done before withdrawal;
• complain if you believe we have not complied with the law (section 73).

8.1 How to exercise them: message LINE @doxzilla or call 02 735 1000, and tell us the email or phone you signed up with. We may verify your identity first so your data does not reach someone else. We act without delay and within 30 days of receiving the request (section 30 sets this for access requests; we apply the same limit to other requests).

8.2 There is no charge for normal use of these rights.

8.3 We may refuse only where the law or a court order allows, or where acting would harm others' rights. Each time we refuse, we record the reasons and tell you.

8.4 If you ask us to delete your account, we delete data we do not need to keep. Data that tax and accounting law requires us to keep is kept for the periods in section 6.

8.5 Cancelling your subscription is not the same as deleting your account and data. If you want deletion, please tell us separately.

8.6 You can withdraw cookie consent yourself, at once, using the "Change cookie settings" link at the bottom of the doxzilla.com website's pages. You do not need to tell us. Details are in clause 10.8.

9. Children and minors

9.1 The account holder must be an adult: 20 years old or older, or of legal age under Thai law. Children aged 3 to 18 watch inside the account of a parent or guardian, who provides the data and decides for them.

9.2 We do not let children sign up on their own, and we do not intend to collect data directly from a child without the parent's knowledge. If you find a child has sent data on their own, tell us and we will delete it.

9.3 Data about children (viewing history, learning data, and work submitted to activities, if any) belongs to the parent's account. We keep only what is needed to provide the service and learning, do not use it for marketing, do not profile for advertising, and do not disclose it to outsiders other than providers in clause 4.1.

9.4 We never use children's data to build advertising audiences. This means we send no data about a child, or from an account a child watches in, to any advertising platform, and we do not let any advertising platform learn from a child's use.

9.5 Pages for children carry no measurement and no retargeting. Every Doxzilla Learning page (learning.html and all pages under learning, including the Doxzilla Cartoon section and the guides) has no measurement tools and no advertising pixels at all, whatever you answer in the cookie bar. If we are unsure whether children use a page, we treat it as a children's page and do not track its visitors.

9.6 The introduction pages of doxzilla.com are written for parents, who are adults. If you are under 20, please ask a parent or guardian to answer the cookie bar for you. We set retargeting ads to reach adults as far as the platforms allow.

9.6A Doxzilla's in-app notifications, news by email and by LINE, and social media follows are for people aged 20 or over. If the device used for the app, or the account used to receive news, belongs to someone under 20, a parent or guardian should set it up and give consent (clauses 11.2 and 11.2A).

9.7 A child's rights under the law (access, correction, erasure, withdrawing consent) can be exercised by the parent or guardian. Once the person is of legal age, they exercise their own rights.

9.8 The law treats anyone under 20 as a minor and sets different consent rules by age. For young children, a parent's consent is always required (section 20). So we always ask the parent for consent on a child's data.

10. Cookies and similar technologies

10.1 A cookie is a small file a website stores on your device so it can recognise you. Similar technologies include storage inside the browser (localStorage) and pixels (small scripts that tell a provider someone opened this page). In this policy we call all of them cookies.

10.2 The cookies we use at doxzilla.com fall into 3 types:

10.3 Providers actually in use now. From 12 October 2026 doxzilla.com uses 2 providers, only on the introduction pages, and only when you accept the category concerned. Neither is used on any Doxzilla Learning page or at app.doxzilla.com.

If we add a new provider, or add one in a category you already accepted, we will amend this clause, give it a new effective date and ask for your consent again.

10.4 How the site asks for consent:

• A small bar at the bottom of the screen. It does not cover content and does not force an answer before you read the site.
• The OK and No thanks buttons are the same size and visual weight, and a Settings button lets you choose type by type.
• Measurement and documentary suggestion cookies are off by default. No box is pre-ticked.
• If you say no thanks, you can read the site and sign up as normal.

10.5 The scripts for measurement tools and pixels load only after you accept. Until then your browser sends no request to any measurement or advertising provider's domain.

10.6 Pages with no measurement and no pixels at all:

• Every Doxzilla Learning page, including the Doxzilla Cartoon section and the guides, as set out in clause 9.5.
• The sign-up, payment, member account and viewing pages at app.doxzilla.com and in the apps. We do not install advertising pixels or measurement tools for marketing there.

10.7 Data we do not send to measurement tools and pixels: your name, email, phone number, account data, viewing history and learning data. We do not upload member email lists or phone numbers to advertising platforms to build audiences. What the providers receive from your browser is the page you opened, the time, device and browser type, IP address, identifiers in cookies, and the utm tail on the link showing the channel, as browsers ordinarily send. Details for each provider are in clause 10.3.

10.8 You can withdraw consent or change settings as easily as you gave it:

• Click "Change cookie settings" at the bottom of the doxzilla.com website's pages, then decline or switch off a category.
• When you withdraw, the site stops loading the measurement tools and pixels concerned and deletes cookies it set itself in that category.
• Data that already reached a provider before you withdrew is kept by the provider under its own policy. You can ask the provider to delete it, or switch off ads based on site visits, in the ad settings of your account with them, or tell us and we will help you find the way, as in clause 1.2.
• Your cookie answer is remembered per browser and per device. If you use several devices, set it on each.

10.9 You can also block or delete cookies in your browser settings, but parts of the site may not work.

10.10 The measurement and documentary suggestion cookies in this policy apply to the introduction site doxzilla.com. At app.doxzilla.com and in the apps we do not install advertising pixels (clause 10.6). If we later want to use a tool there that needs non-essential cookies, we will ask for consent first and amend this policy.

11. Email, marketing messages and retargeting

11.1 Account emails, such as sign-up confirmation, the receipt when a charge succeeds, the notice when a charge cannot be made, reminders before annual renewal, cancellation confirmation and notices of changes to terms, are sent to the email of the account you signed up with. They are part of the service. We always send them.

11.2 News by email and by LINE. The main way we send you news is through in-app notifications (clause 11.2A). In addition, if you have given consent, we may send news by email and by LINE @doxzilla, such as new documentaries, promotions, changes to the service and links to other sites in the group. We send no more than 2 news messages a month on each of these two channels. This limit does not include in-app notifications (clause 11.2A) or service emails under clause 11.1, such as receipts, emails about a failed charge and notices of changed terms.

• Separate consent. The tick box for news by email is not pre-ticked and is not tied to signing up. If you do not tick it, you can still sign up and watch as normal.
• On LINE. When you add LINE @doxzilla as a friend or message us, we first ask whether you want to receive news. We send news only after you agree. If you do not, you can still message us with questions as normal.
• The phone number you give when you sign up is used for your account. It is not used to send news, and we do not send news by SMS.
• Account emails under clause 11.1 are not news and do not wait for this consent.
• We keep the email or LINE user ID of people who agreed as a news list, and use it only to send news under this clause. We do not sell it, let others use it to send their own messages, or use it to build advertising audiences (clause 11.5).
• Under 20. A parent or guardian should give the consent. If we learn that the news list holds a minor who agreed alone, without a parent or guardian, we stop sending and erase the entry as in clause 9.2.
• You can stop at any time under clause 11.3, and we do not send news to anyone who has stopped.

11.2A News through in-app notifications and social media. News from Doxzilla reaches you mainly through these 2 channels. News by email and by LINE is in clause 11.2.

• In-app notifications. The Doxzilla app sends a notification every day saying what to watch today. After you download the app, it asks you to turn notifications on. You can allow them or not, and you can turn them off at any time in your device settings. The notification service is Apple's or Google's system, depending on your device.
• What we keep. If you allow notifications, we keep the device ID used to send notifications (an ID that Apple or Google gives your device, used to deliver notifications to that device). If you do not allow them, we do not keep this ID.
• Social media (Facebook, X, TikTok, YouTube, Instagram). If you follow us on those platforms, you are using that platform's service under its own policy. We see only what the platform shows a page owner, such as the account that follows and aggregate statistics. The buttons on doxzilla.com that lead to our social media pages are links. They do not embed the platforms' trackers in the website.
• What we use it for. The device ID is used only to send these notifications.
• Legal basis. Your consent (section 19). Allowing notifications means you consent to notifications as described in this clause. It is not a condition of the core service, and you can withdraw as easily as you gave it.
• Not used for advertising. We do not use the device ID with any advertising platform to build audiences, other than passing it to Apple's and Google's systems to deliver notifications to your device. This matches clause 11.5.
• How long we keep it. For as long as notifications are on for that device and you still use the app. If you turn notifications off, delete the app or close your account, we stop sending and erase the device ID within a reasonable time, or erase it when you ask under section 8.
• How to stop. Turn off Doxzilla notifications in your device settings, or tell us as in clause 1.2, and we will stop sending as soon as we can. For social media, unfollow on that platform.
• Under 20. A member account belongs to an adult. If the device with the app belongs to a child, a parent or guardian should set up notifications and follow on social media instead. If we learn that notifications are going to a device a minor set up alone, we stop sending and erase that device ID as in clause 9.2.

11.3 You can stop news by email and by LINE at any time. By email, use the unsubscribe link at the bottom (every email has one). On LINE, type "stop news", press the unsubscribe button in the chat, or block the account, or tell us as in clause 1.2. We will stop sending as soon as we can, and stopping costs you nothing.

11.4 What retargeting is. If you accept documentary suggestion cookies and open an introduction page on doxzilla.com, Meta remembers that this browser visited our site, and may show you a Doxzilla ad again while you use Facebook or other Meta platforms, or other sites that show Meta ads. We do not know who you are. We see only totals, such as how many people saw and clicked an ad.

11.5 The limits we have set on retargeting:

• Only for people who accepted documentary suggestion cookies.
• Only from opening introduction pages of doxzilla.com. Never from Doxzilla Learning pages, and never from member accounts or viewing.
• We do not use children's data, member data, or email lists, phone lists, LINE friends and notification device IDs to build audiences.
• The audience of past visitors lasts no more than 90 days from the last visit.
• Ads are set to reach adults as far as the platforms allow.

11.6 There are 2 ways to stop seeing retargeting ads. One is to withdraw documentary suggestion cookie consent as in clause 10.8. The other is to choose "not interested" on the ad itself, or to switch off ads personalised by site visits, either on the ad or in the platform's ad settings.

12. Checks to prevent fraud

12.1 When you sign up and pay, we may use your email, phone number, device data and the information returned by the payment service provider to prevent card fraud and unauthorised account access. The legal basis is our legitimate interests. If the system gets it wrong, tell us and we will re-check.

13. Links to other sites, and other sites in the group

13.1 The website and apps link to other sites, such as app stores, LINE, social media and sister sites, which have their own privacy policies. This policy does not cover them.

13.2 The other sites in our group, nextstep.tv, thainesstv.com and tv.co.th, do not use cookies. You therefore do not need to answer a cookie bar there. If amornphat.com uses cookies, that site will ask for your consent separately and say so in its own privacy policy. The cookie choices on doxzilla.com have no bearing on those sites.

13.3 When you click a link from one of those sites to doxzilla.com, the link carries only a tail saying which site it came from (utm_source). It has no name or personal data of yours, and those sites send no data about you to doxzilla.com.

14. Changes to this policy

We change this policy when the service or the law changes. The new version goes on the website with its effective date. If the change affects you, for example using data for a new purpose, we will email you in reasonable time ahead and ask for fresh consent if the law requires. If we add a new measurement or advertising provider, the cookie bar will ask you again before it is switched on.

15. Contact and complaints

Next Step Co., Ltd. 319 Soi Ramkhamhaeng 60, Hua Mak, Bang Kapi, Bangkok 10240 Telephone 02 735 1000 LINE: @doxzilla

If you are not satisfied with our answer, you may complain to the Office of the Personal Data Protection Committee through the channels the Office publishes on its official website.

Read the Terms of Service