Privacy Policy

This Privacy Policy explains how Suporte oDarkly.com (“we”), operator of odarkly.com, processes personal data under Brazil’s LGPD (Law 13.709/2018), the Marco Civil da Internet, and, where applicable, the EU GDPR.

Controller: Suporte oDarkly.com. Data-subject contact: contact@odarkly.com. Add legal name, tax ID, address, and DPO before large-scale commercial operation.

1. Data we collect

• Account: name, email, hashed password, language, and UI preferences.
• Product use: projects, prompts, generated scripts/images/audio, voice/style settings, technical logs (IP, time, user-agent), and credit use.
• Payment: billing identifiers and subscription status. Full card numbers stay with the payment processor.
• Support: messages you send us.
• Cookies / local storage: session, language, theme, and avatar. No third-party ad cookies in the logged-in app unless we say so later.

We do not ask for sensitive data. Do not put health, biometrics, or similar data in prompts.

2. Legal bases (LGPD)

• Contract: account, generation, credits, support, editor.
• Legal obligation: tax records, lawful orders, minimum security logs.
• Legitimate interests: security, fraud prevention, aggregated product metrics — balanced against your rights.
• Consent: marketing emails if you opt in, and any non-essential cookies if introduced.

3. Sharing

We share data only as needed: hosting/database, AI providers that receive prompts and generation files, payment processors, and authorities with a valid order. We do not sell your email list. Some subprocessors are outside Brazil; we use contractual and security measures consistent with LGPD arts. 33–36 and, if applicable, GDPR Chapter V.

4. International transfers

AI and payment providers often run in the United States or the EU. Prompts and generation files may be processed there. Do not include third-party personal data without a legal basis.

5. Retention

We keep the account while it is active. Projects remain until you delete them or the account ends, plus a backup window (typically up to 90 days), unless a longer legal duty applies (tax records can last up to 5 years). Security logs may be kept as needed to investigate incidents.

6. Your rights

Under LGPD arts. 18 and 9 you may request confirmation, access, correction, anonymization, portability, deletion of unnecessary data, information on sharing, withdrawal of consent, and objection to legitimate-interest processing. Email contact@odarkly.com from your account address. We will answer within a reasonable time, usually 15 days, extendable once as the law allows. You may also complain to Brazil’s ANPD.

7. Security

We use reasonable measures (HTTPS, password hashing, session controls). No system is perfectly secure. We will notify ANPD and affected people when LGPD requires it after a relevant incident.

8. Children

The Service is not for anyone under 18. If we learn an account belongs to a minor, we may close it and delete data except where the law requires retention.

9. Cookies

We use cookies or local storage for login, language, theme, and avatar. Clearing the browser ends the session.

10. Automated processing

Content generation is automated by AI models. It is not an automated decision that affects credit, employment, or a similar essential right under LGPD art. 20. If that changes, we will update this policy.

11. Changes

We may update this Policy. The date at the top is the current version. Material changes will be shown in the product or by email when a new consent is required.

12. Privacy contact

contact@odarkly.com. Name the DPO here once appointed.