Platform policy
Operational rules and safeguards
These are the operational rules currently enforced or prepared by the Tolvixa implementation. Formal legal terms, privacy notices and jurisdiction-specific language should receive legal review before production publication.
Marketplace safety
Only products that are approved and published may appear publicly. Product files must pass the configured security workflow before they can be made downloadable.
Payments and accounting
Tolvixa does not store raw card data. Orders, platform fees, affiliate commissions, refunds and chargebacks are recorded through the commerce and ledger foundations. Live provider processing remains disabled until production credentials are configured.
Affiliate attribution
Affiliate attribution is accepted only from a valid active tracking click for the same product. Campaign Sub-ID data is preserved on the order, and duplicate order creation is protected with idempotency keys.
Commissions
The current product decision uses a seven-day affiliate commission hold. Refunds and chargebacks reverse affected financial entries and commissions according to the implemented commerce rules.
Vendor conduct
Vendors must submit accurate product information and may not bypass product moderation, file quarantine, malware scanning, buyer entitlement checks or other platform safety controls.
Account security
Users are responsible for protecting their credentials. Tolvixa applies password requirements, signed sessions, authorization checks and rate limiting, with additional production controls enabled as infrastructure is connected.
External integrations
External payment, email, storage, scanner and automation integrations remain disabled when their credentials or security configuration are unavailable. Tolvixa does not substitute fabricated credentials or endpoints.