Privacy Policy

BL4CKDragonz ("we", "us") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, how we use it, and the choices you have regarding your data. This policy is informed by the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados — LGPD), but is not a substitute for professional legal advice.

Account data: When you create an account, we collect your email address and any display name you choose. Your email is provided by our authentication provider and is used to identify you and associate your purchases.

Purchase data: When you buy a music license, we store the order details, including the track purchased, license type, Order ID, License ID, payment status, and the email used at checkout. This data is linked to your account.

Payment data: Payment information (card numbers, billing details) is processed directly by Mercado Pago. We do not receive or store your full payment card details — only the payment status and a transaction reference from the payment provider.

Usage data: We may collect anonymous analytics about how the Site is used, such as page visits and feature interactions, to improve the service.

We use your data to:

• Create and manage your account.
• Process and fulfill your music purchases.
• Generate and deliver your license documents and download links.
• Allow you to re-download purchased content through your account.
• Send you notifications about confirmed purchases.
• Prevent fraud and unauthorized access.
• Comply with legal obligations.

We share data with the following service providers, each under their own privacy and security policies:

• Base44 — our application hosting and database provider. Stores your account data, purchase records, and uploaded files.
• Mercado Pago — our payment processor. Receives your email and payment details to process transactions. Governed by Mercado Pago's privacy policy.
• Cloudflare — provides CDN and serverless worker infrastructure for secure checkout processing.
• Google — provides web fonts used on the Site.

We do not sell your personal data. We only share data with these providers as necessary to operate the Site and process your orders.

We retain your account data for as long as your account is active. Purchase records are retained indefinitely to support license verification and your ability to re-download purchased content. If you wish to delete your account or request data removal, contact us using the information in Section 11. Note that we may retain certain data as required by law or for legitimate business records.

The Site uses essential cookies and tokens to maintain your authenticated session. These are necessary for account access and secure checkout. We do not use advertising cookies. Any analytics collection is anonymous and used solely to improve the Site.

We take reasonable measures to protect your data, including:

• Encryption in transit: All communication between your browser and the Site uses HTTPS (TLS), protecting data while it is being transmitted.
• Access control: Access to your personal data and purchase records is restricted using row-level security policies. Each user can only access their own data; administrators can access all data for order management.
• Secure file delivery: Download links for purchased audio files use short-lived, time-limited signed URLs that expire automatically. The underlying files are not publicly accessible.
• Authentication: Passwords are managed by our authentication provider. We do not store passwords in plain text.
• Server-side validation: Prices, payment status, and file access are verified on the server, not trusted from the browser.

No system is completely secure. While we implement these measures, we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately.

Under the LGPD and similar regulations, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request that we delete your personal data, subject to legal retention requirements.
• Portability: Request a machine-readable copy of your data for transfer to another service.
• Objection: Object to certain processing of your data.
• Withdrawal of consent: Withdraw consent for data processing that relies on it.

To exercise any of these rights, contact us using the information in Section 11. We will respond within a reasonable timeframe.

The Site is not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us so we can remove it.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

If you have questions about this Privacy Policy or wish to exercise your data protection rights, you can reach us through the contact options available on the Site. See also our Terms & Conditions.