Skip to content
darckwaredarckware

Compliance & Privacy

Privacy, Security and Data Protection

How we process your data with full transparency, security by design, and strict adherence to data protection regulations.

Core Commitment to Privacy

Darckware does not sell, rent, or trade visitor or client personal data with third-party data brokers or advertisers. All data collected serves strictly operational, technical, or customer communication purposes.

1. Telemetry and Anonymous Access

To improve platform performance, usability, and maintain robust defense against abuse, we collect anonymous pageview metrics and header telemetry.

  • IP Address and Geolocation: IP addresses are processed exclusively at the network layer to infer country/timezone and are never displayed publicly in the user interface or stored in unprotected plaintext.
  • Device Identifier: We issue a temporary pseudo-anonymous visitor identifier (dw-visitor-id) stored locally in your browser to maintain session consistency without cross-site tracking.
  • Retention Policy: Raw web traffic logs and view records follow a rotating lifecycle and are automatically purged every 90 days.

2. Interactions with Lara (AI Assistant)

When conversing with Lara, you may optionally provide your name, phone number, email address, and project requirements.

  • Legal Basis: Processing is conducted based on explicit consent and preliminary procedures relating to enterprise technical contracts with Darckware.
  • Interaction Ledger: Messages and inquiries are structured securely and routed into our proposals and support ledger, restricted to authenticated administrators with permanent audit logging.
  • Contact Exclusivity: Contact information submitted to Lara is used solely for technical and commercial follow-ups directly by Darckware.

3. Client Portal and Support Contracts

For enterprise clients authenticated in the customer portal:

  • Passwords are cryptographically hashed using industry-standard bcrypt.
  • Active sessions use short-lived tokens transmitted strictly via cookies marked HttpOnly, Secure, and SameSite=Strict.
  • Ticket histories and technical hour bundle statements remain confidential and isolated to authorized accounts.

4. Data Subject Rights

Under applicable privacy laws (including GDPR and LGPD Article 18), you have the right to:

  • Confirm whether your personal data is being processed.
  • Request access to personal data maintained by Darckware.
  • Request rectification of incomplete, inaccurate, or outdated data.
  • Request anonymization, blocking, or erasure of unnecessary or non-compliant data.
  • Revoke consent at any time through a free and straightforward procedure.

5. Exercising Your Rights

You can request data inquiries, updates, or account deletion directly through Lara or by opening a request in the administrative console:

Last updated: September 2026 · Darckware