INFORMATION SECURITY POLICY
Effective Date: June 14, 2026
ARTICLE I
PURPOSE AND SCOPE
This Information Security Policy (the "Security Policy") is adopted and maintained by DOBYOW LLC, a Florida limited liability company doing business as DomainsNoBroker.com (the "Company"), for the purpose of establishing the Company's practices, standards, procedures, rights, and responsibilities concerning the security, integrity, availability, confidentiality, and protection of information processed through DomainsNoBroker.com and all related services, applications, systems, databases, communications platforms, and technological infrastructure (collectively, the "Platform").
This Security Policy applies to all visitors, users, subscribers, buyers, sellers, contractors, service providers, employees, agents, affiliates, and other individuals or entities accessing or utilizing the Platform.
This Security Policy shall be interpreted in conjunction with the Company's Terms and Conditions, Privacy Policy, Cookie Policy, Subscription Agreement, and any other policies incorporated by reference.
Nothing contained herein shall be construed as creating a guarantee, warranty, fiduciary obligation, or absolute duty on the part of the Company to prevent all unauthorized access, cybersecurity incidents, data breaches, fraud, service interruptions, or other security-related events.
ARTICLE II
SECURITY OBJECTIVES
The Company endeavors to implement commercially reasonable administrative, technical, organizational, and physical safeguards designed to protect information processed through the Platform.
The Company's information security objectives include:
the protection of confidential information;
the protection of personal information;
the protection of account credentials;
the protection of Platform infrastructure;
the preservation of system integrity;
the prevention of unauthorized access;
the mitigation of cybersecurity risks;
the maintenance of operational continuity;
the detection of fraudulent activity;
and the protection of users and business partners from unlawful or unauthorized conduct.
Users acknowledge that no security system, technology, infrastructure, network, software application, database, or transmission method can be guaranteed to be completely secure.
Accordingly, the Company does not warrant or represent that the Platform is immune from cybersecurity threats, unauthorized access, malicious attacks, or security incidents.
ARTICLE III
INFORMATION SECURITY GOVERNANCE
The Company reserves the right to establish, modify, enforce, suspend, or update security procedures, technical controls, access controls, authentication mechanisms, monitoring systems, compliance requirements, and security standards at any time without prior notice.
The Company may implement security measures including, without limitation:
multi-factor authentication;
identity verification procedures;
access management controls;
session monitoring systems;
intrusion detection systems;
firewall protections;
malware prevention systems;
security logging mechanisms;
data encryption technologies;
network monitoring technologies;
security auditing procedures;
and fraud detection systems.
The implementation of any particular security measure shall not create any contractual obligation to maintain such measure indefinitely.
The Company reserves the right to replace, remove, enhance, or modify security controls at its sole discretion.
ARTICLE IV
ACCOUNT SECURITY RESPONSIBILITIES
Users are solely responsible for maintaining the confidentiality and security of all account credentials, passwords, authentication codes, recovery methods, and login information associated with their Accounts.
Users shall not disclose credentials to unauthorized persons or permit third parties to access their Accounts.
Users shall immediately notify the Company upon becoming aware of:
unauthorized access;
credential compromise;
suspected fraud;
security incidents;
identity theft;
or any other unauthorized use of an Account.
Users shall be responsible for all activities occurring under their Accounts unless otherwise required by applicable law.
The Company shall not be liable for losses resulting from a User's failure to maintain appropriate account security practices.
ARTICLE V
ACCESS CONTROL
Access to Company systems, information, services, databases, and infrastructure shall be limited to authorized individuals possessing a legitimate business or operational need for such access.
The Company reserves the right to restrict, suspend, terminate, or modify access privileges whenever deemed necessary for security, compliance, legal, operational, or risk-management purposes.
Access rights may be granted, modified, monitored, audited, restricted, or revoked at any time.
The Company reserves the right to implement authentication requirements, verification procedures, access reviews, and other security measures designed to limit unauthorized access.
ARTICLE VI
DATA SECURITY
The Company endeavors to implement commercially reasonable safeguards designed to protect information against unauthorized access, acquisition, disclosure, alteration, misuse, destruction, loss, or corruption.
Such safeguards may include encryption technologies, secured communications protocols, access restrictions, security monitoring systems, backup systems, disaster recovery measures, data segmentation controls, and infrastructure security protections.
Notwithstanding the foregoing, the Company does not guarantee the absolute security, confidentiality, integrity, or availability of information transmitted to, stored by, or processed through the Platform.
Users acknowledge that information transmitted over the Internet may be susceptible to interception, loss, alteration, delay, or unauthorized access.
All transmissions are undertaken at the User's own risk.
ARTICLE VII
ENCRYPTION AND SECURE COMMUNICATIONS
The Company may utilize encryption technologies and secure communications protocols designed to protect information transmitted between Users and the Platform.
Such technologies may include SSL/TLS encryption, encrypted storage mechanisms, encrypted backups, and other security technologies deemed appropriate by the Company.
The use of encryption technologies shall not be construed as guaranteeing immunity from unauthorized access, decryption, interception, disclosure, or compromise.
The Company reserves the right to determine the type, strength, implementation, and deployment of encryption technologies utilized by the Platform.
ARTICLE VIII
FRAUD DETECTION AND SECURITY MONITORING
The Company reserves the right to monitor Platform activity for the purpose of detecting, investigating, preventing, and responding to fraud, abuse, unauthorized access, cybersecurity threats, suspicious behavior, regulatory violations, and other security-related concerns.
Such monitoring may include:
account activity monitoring;
login activity monitoring;
device analysis;
IP address monitoring;
transaction monitoring;
automated fraud detection systems;
identity verification procedures;
behavioral analytics;
and security investigations.
By using the Platform, Users expressly consent to such monitoring activities.
The Company may take any action reasonably necessary to protect the Platform, including restricting access, suspending accounts, rejecting transactions, or reporting activity to governmental authorities.
ARTICLE IX
SECURITY INCIDENT RESPONSE
The Company maintains the right to investigate any actual, suspected, or potential security incident affecting the Platform.
A security incident may include unauthorized access, attempted intrusion, malware infection, denial-of-service attack, credential compromise, fraud, system disruption, data exposure, or any event that may adversely affect the security of the Platform.
Upon identifying a security incident, the Company may implement containment, mitigation, remediation, recovery, notification, preservation, forensic, legal, or compliance measures deemed appropriate under the circumstances.
The Company reserves the right to cooperate with law enforcement agencies, regulators, governmental authorities, cybersecurity professionals, forensic investigators, and legal counsel in connection with any security incident.
Nothing contained herein shall obligate the Company to disclose details of security controls, vulnerabilities, investigative methods, or incident response procedures where disclosure could adversely affect security.
ARTICLE X
DATA BREACHES AND SECURITY INCIDENT NOTIFICATION
The Company reserves the right to determine, in its sole and reasonable discretion, whether any actual, suspected, or alleged cybersecurity event constitutes a reportable security incident, personal data breach, system compromise, unauthorized disclosure, or other security-related event requiring notification under applicable law.
Where notification is required by applicable law, the Company shall endeavor to provide such notification within the timeframe prescribed by applicable legal requirements.
The Company reserves the right to delay notification where reasonably necessary to comply with law enforcement requests, protect the integrity of an investigation, preserve evidence, mitigate ongoing threats, or comply with legal obligations.
Users acknowledge that notification obligations may vary depending upon jurisdiction, regulatory requirements, and the nature of the incident.
Nothing contained herein shall be construed as an admission of liability, negligence, fault, wrongdoing, or legal responsibility arising from any security incident.
ARTICLE XI
THIRD-PARTY SERVICE PROVIDERS
The Company may engage third-party vendors, cloud service providers, hosting providers, payment processors, communication providers, cybersecurity providers, data storage providers, software developers, analytics providers, and other contractors in connection with the operation of the Platform.
Such third parties may process, transmit, store, host, or otherwise access information on behalf of the Company.
Although the Company endeavors to engage reputable service providers, the Company does not own or control the systems, infrastructure, security measures, personnel, or operations of such third parties.
Accordingly, the Company shall not be liable for security incidents, service interruptions, data breaches, unauthorized disclosures, cyberattacks, or operational failures attributable to the acts or omissions of third-party service providers.
Users acknowledge and accept the risks associated with utilizing internet-based services and third-party technology providers.
ARTICLE XII
CLOUD INFRASTRUCTURE AND HOSTING SECURITY
The Platform may utilize cloud-based infrastructure, virtualized environments, content delivery networks, managed hosting environments, disaster recovery systems, and geographically distributed technology resources.
The Company reserves the right to select, modify, replace, or discontinue infrastructure providers and hosting environments at any time.
Information processed through the Platform may be stored, transmitted, replicated, backed up, or processed in multiple geographic locations and jurisdictions.
The Company shall not be liable for interruptions, outages, delays, degradation of service, or security incidents arising from infrastructure providers, telecommunications providers, internet service providers, cloud vendors, or other third parties.
Nothing contained herein shall be interpreted as guaranteeing uninterrupted Platform availability.
ARTICLE XIII
BUSINESS CONTINUITY AND DISASTER RECOVERY
The Company may implement business continuity measures, backup systems, redundancy systems, disaster recovery procedures, data preservation mechanisms, and recovery protocols designed to support operational resilience.
The existence of such measures shall not constitute a guarantee that information, systems, services, communications, or functionality can be restored following a disaster, cybersecurity event, infrastructure failure, or force majeure event.
Users acknowledge that data loss, service interruption, and operational disruption may occur despite the implementation of reasonable safeguards.
The Company reserves the right to prioritize restoration activities based upon operational, technical, legal, and business considerations.
ARTICLE XIV
VULNERABILITY MANAGEMENT AND SECURITY TESTING
The Company reserves the right to conduct security assessments, vulnerability testing, penetration testing, code reviews, system audits, infrastructure reviews, and other security-related evaluations.
The Company may engage independent cybersecurity professionals, consultants, auditors, and third-party service providers to assist in identifying, assessing, and remediating vulnerabilities.
Users shall not conduct vulnerability scanning, penetration testing, reverse engineering, security probing, network mapping, or other security testing activities against the Platform without the Company's prior written authorization.
Unauthorized testing activities may result in immediate suspension of access, legal action, referral to law enforcement authorities, or other remedies available under law.
ARTICLE XV
PROHIBITED SECURITY ACTIVITIES
Users shall not engage in any conduct that may compromise, impair, interfere with, disrupt, circumvent, exploit, or adversely affect the security of the Platform.
Without limitation, prohibited conduct includes:
attempting unauthorized access to systems, networks, databases, accounts, applications, or infrastructure;
circumventing authentication controls or access restrictions;
introducing malicious code, malware, ransomware, spyware, viruses, worms, bots, or other harmful software;
conducting denial-of-service attacks, distributed denial-of-service attacks, or similar activities;
intercepting communications or data transmissions;
engaging in credential harvesting, phishing, spoofing, social engineering, or identity theft;
attempting to exploit vulnerabilities or security weaknesses;
interfering with security monitoring systems or audit mechanisms.
Any violation of this Article shall constitute a material breach of the Company's legal agreements and may result in immediate termination of access, civil liability, criminal prosecution, or both.
ARTICLE XVI
USER SECURITY OBLIGATIONS
Users shall exercise reasonable care in protecting their own systems, devices, credentials, communications, and information.
Users are responsible for maintaining appropriate antivirus protection, operating system updates, security patches, firewall protections, password security, and account monitoring procedures.
The Company shall not be liable for losses arising from a User's failure to implement reasonable security measures.
Users shall promptly report any suspected security incident involving their Account or the Platform.
Failure to promptly report known security incidents may result in increased risk and may limit the Company's ability to investigate or remediate such incidents.
ARTICLE XVII
REGULATORY COMPLIANCE
The Company endeavors to maintain security practices reasonably designed to support compliance with applicable laws and regulations governing information security, privacy, consumer protection, cybersecurity, and data protection.
Compliance efforts may include administrative safeguards, technical safeguards, organizational safeguards, contractual protections, risk assessments, training programs, incident response procedures, and monitoring activities.
The Company does not warrant that its security practices satisfy every legal requirement applicable to every User in every jurisdiction.
Users remain solely responsible for compliance with laws applicable to their own activities.
ARTICLE XVIII
INTERNATIONAL DATA SECURITY
The Platform may be accessed and utilized by individuals and entities located throughout the world.
Information processed through the Platform may be transferred across international borders and stored in jurisdictions different from the jurisdiction in which a User resides.
Users acknowledge that privacy laws, cybersecurity requirements, and data protection regulations may differ among jurisdictions.
By utilizing the Platform, Users consent to the processing, transfer, storage, and protection of information in accordance with the Company's applicable policies and agreements.
ARTICLE XIX
LIMITATION OF SECURITY LIABILITY
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE COMPANY DISCLAIMS ALL WARRANTIES, REPRESENTATIONS, AND GUARANTEES CONCERNING THE SECURITY OF THE PLATFORM.
THE COMPANY DOES NOT WARRANT THAT THE PLATFORM WILL BE FREE FROM CYBERATTACKS, MALWARE, UNAUTHORIZED ACCESS, DATA BREACHES, SERVICE INTERRUPTIONS, SECURITY INCIDENTS, OR OTHER SECURITY-RELATED EVENTS.
TO THE FULLEST EXTENT PERMITTED BY LAW, THE COMPANY SHALL NOT BE LIABLE FOR ANY LOSS, DAMAGE, LIABILITY, COST, EXPENSE, OR CLAIM ARISING FROM OR RELATING TO:
CYBERATTACKS;
DATA BREACHES;
UNAUTHORIZED ACCESS;
ACCOUNT COMPROMISES;
IDENTITY THEFT;
FRAUD;
MALWARE;
RANSOMWARE;
PHISHING ATTACKS;
THIRD-PARTY SECURITY FAILURES;
INFRASTRUCTURE FAILURES;
OR OTHER SECURITY INCIDENTS.
USERS EXPRESSLY ACKNOWLEDGE THAT NO INTERNET-BASED SERVICE CAN PROVIDE ABSOLUTE SECURITY.
ARTICLE XX
MODIFICATIONS TO THIS SECURITY POLICY
The Company reserves the unrestricted right to amend, revise, supplement, replace, modify, or update this Security Policy at any time.
Any modification shall become effective immediately upon publication unless otherwise required by applicable law.
Continued use of the Platform following publication of a revised Security Policy shall constitute acceptance of the revised terms.
ARTICLE XXI
CONTACT INFORMATION
Questions, notices, reports of suspected security incidents, or inquiries regarding this Security Policy may be directed to:
DOBYOW LLC
Doing Business As: DomainsNoBroker.com
Naples, Florida, United States
Email: support@domainsnobroker.com
The Company reserves the right to require reasonable verification of identity prior to responding to any security-related request.
ARTICLE XXII
ACKNOWLEDGMENT
BY ACCESSING OR USING THE PLATFORM, USERS ACKNOWLEDGE THAT THEY HAVE READ, UNDERSTOOD, AND AGREED TO THE TERMS OF THIS INFORMATION SECURITY POLICY.
USERS FURTHER ACKNOWLEDGE THAT NO SECURITY PROGRAM, TECHNOLOGY, OR CONTROL CAN GUARANTEE COMPLETE PROTECTION AGAINST ALL CYBERSECURITY RISKS AND THAT USE OF THE PLATFORM OCCURS SUBJECT TO SUCH INHERENT RISKS.