Privacy Policy

Last updated: 30 October 2026 · DarkPlus — 64.645.952 Nicolas Santos Alves (CNPJ: 64.645.952/0001-45)

Jump to: Introduction Data We Collect How We Use It Legal Basis Retention Sharing Your Rights Security Contact

In short

We collect the minimum needed to deliver and support what you bought. We never sell your personal data. You can ask us for a copy of it, or ask us to delete it, at any time — write to niicolassantos0@gmail.com and we will answer within 15 days.

1. Introduction

DarkPlus is the trading name of 64.645.952 Nicolas Santos Alves, an individual entrepreneur registered under CNPJ 64.645.952/0001-45, with registered office at R. General Vicente de Paulo Dale Coutinho, 942, Cidade Náutica, São Vicente – SP, CEP 11.350-190, Brazil ("DarkPlus", "we", "us", "our").

This Privacy Policy explains how we collect, use, store, share and protect personal data when you visit darkplus.online, buy one of our digital products, or contact us (together, the "Services"). It applies to everyone who uses the Services, wherever they are located.

We are the controller of this data within the meaning of Brazil's Lei Geral de Proteção de Dados (LGPD, Law 13.709/2018). By using the Services you confirm that you have read this policy. If you do not agree with it, please stop using the Services.

2. Data We Collect

We collect only what we need, and we tell you what it is for.

Category	Examples	Where it comes from
Identification	Full name; for Brazilian invoices, CPF or CNPJ	You, at checkout
Contact	Email address, phone number, billing address	You, at checkout or via the contact form
Order	Products purchased, price paid, currency, date, invoice number, refund history	Generated when you buy
Payment	Payment method type, last four digits of a card, authorisation status	Our payment processor — we never receive the full card number
Access	Download and login records for the products you own	Generated as you use the Services
Technical	IP address, browser and device type, operating system, referring page, pages viewed	Collected automatically — see our Cookie Policy
Correspondence	Messages you send us and our replies	You, when you write to us

We do not knowingly collect sensitive personal data as defined by Article 5, II of the LGPD (racial or ethnic origin, religious belief, political opinion, union membership, health, sex life, genetic or biometric data). Please do not send us such data.

3. How We Use Your Data

Delivering your purchase — sending access links, files and licence keys to the email address used at checkout.
Processing payment — passing the data a payment processor needs to authorise and settle the transaction.
Invoicing and bookkeeping — issuing receipts and tax documents and keeping the records Brazilian law requires.
Support — answering your questions, resending lost files, handling refund requests and resolving disputes.
Service messages — telling you about an updated edition of a product you own, a billing problem, or a change to these policies.
Marketing — sending offers and new-release announcements only if you have opted in. Every such message has a one-click unsubscribe link.
Security and fraud prevention — detecting fraudulent orders, abuse of licences and unauthorised access.
Improving the Services — understanding, in aggregate, which pages and products people use.

We do not use your personal data to make decisions about you by purely automated means that would produce legal effects, and we do not build advertising profiles from it.

4. Legal Basis for Processing

Under Article 7 of the LGPD, each use above rests on one of the following bases:

Performance of a contract (Art. 7, V) — everything needed to sell, deliver and support a product you bought.
Compliance with a legal obligation (Art. 7, II) — tax, accounting and consumer-law record keeping.
Consent (Art. 7, I) — marketing emails and non-essential cookies. You may withdraw consent at any time, without affecting what was lawful before you withdrew it.
Legitimate interests (Art. 7, IX) — fraud prevention, platform security and aggregate service analytics, balanced against your rights and freedoms.
Exercise of rights in proceedings (Art. 7, VI) — where we need to establish, exercise or defend a legal claim.

If you are in the European Economic Area or the United Kingdom, the equivalent GDPR bases (Articles 6(1)(b), (c), (a) and (f)) apply to the same activities.

5. How Long We Keep It

Data	Retention period	Reason
Account and access records	While your account is active, then 12 months	So you keep access to what you bought
Order, invoice and payment records	5 years after the transaction	Tax and consumer-law obligations in Brazil
Support correspondence	24 months after the thread closes	Continuity of support and dispute history
Marketing contact details	Until you unsubscribe, then deleted within 30 days	Consent-based
Server and security logs	12 months	Security and fraud investigation

When you ask us to delete your data, we do so within 30 calendar days, except for records we are legally required to keep for longer. Those are isolated, access-restricted, and deleted as soon as the obligation ends.

We do not sell, rent or trade your personal data. We share it only with the operators below, only to the extent each one needs, and only under a contract that obliges them to protect it:

Payment processors — to authorise, settle and refund transactions, and to meet their own anti-fraud and anti-money-laundering duties.
Hosting and content delivery providers — to serve this website and deliver your files.
Email delivery providers — to send order confirmations, access links and, where you consented, marketing messages.
Accountants and tax advisers — to issue invoices and file returns, under professional confidentiality.
Public authorities — where disclosure is required by law, a court order, or a request from the Brazilian data protection authority (ANPD) or an equivalent regulator.

If the business is ever sold or reorganised, personal data may transfer to the acquirer. You would be told before that happens and this policy would continue to apply until it was lawfully replaced.

7. International Transfers

Some of the providers above operate servers outside Brazil, including in the United States and the European Union. Where data leaves Brazil, we rely on the transfer mechanisms permitted by Articles 33 to 36 of the LGPD — an adequacy decision, standard contractual clauses, or your specific consent — and we require the same level of protection this policy promises.

8. Your Rights

Article 18 of the LGPD gives you the right to ask us, free of charge, to:

Confirm whether we process data about you, and access a copy of it.
Correct data that is incomplete, inaccurate or out of date.
Anonymise, block or delete data that is unnecessary, excessive, or processed unlawfully.
Port your data to another provider in a structured, machine-readable format.
Delete data processed on the basis of consent.
Learn with which public and private bodies we have shared your data.
Be informed that you may refuse consent, and what happens if you do.
Withdraw consent at any time.
Object to processing carried out on a basis other than consent, where you believe it does not comply with the law.

Write to niicolassantos0@gmail.com with the subject line "LGPD request". We reply within 15 calendar days. We may first ask you to confirm your identity, so that we do not disclose your data to somebody else. If you are not satisfied with our answer, you may complain to the Autoridade Nacional de Proteção de Dados (ANPD) at gov.br/anpd.

9. Security

We apply technical and organisational measures appropriate to the risk, including:

HTTPS/TLS encryption on every page and every form submission.
Encryption at rest for stored order and account records.
Access limited to the people who need it, protected by strong, unique credentials and two-factor authentication.
Payment data handled entirely by PCI-DSS compliant processors — card numbers never reach our systems.
Regular review of accounts, permissions and third-party providers.

No system is completely secure. If a breach occurs that is likely to create a relevant risk or damage to you, we will notify you and the ANPD within a reasonable period, as required by Article 48 of the LGPD.

10. Children

The Services are intended for people aged 18 or over. We do not knowingly collect data from children or adolescents. If you believe a minor has provided us with personal data, contact us and we will delete it promptly.

11. Cookies

We use a small number of cookies, described individually — purpose, provider and lifetime — in our Cookie Policy. Only strictly necessary cookies are set without your consent.

12. Changes to This Policy

We may update this policy to reflect changes in our practices or in the law. The revision date at the top of the page always shows the current version. If a change materially affects your rights, we will tell you by email before it takes effect, where we have your address.

13. Contact

For privacy questions, data subject requests, or to reach the person responsible for data protection at DarkPlus:

Controller: DarkPlus — 64.645.952 Nicolas Santos Alves

CNPJ: 64.645.952/0001-45

Email: niicolassantos0@gmail.com

Phone: +55 (13) 8172-3658

Address: R. General Vicente de Paulo Dale Coutinho, 942, Cidade Náutica, São Vicente – SP, CEP 11.350-190, Brazil

Other Pages