PRIVACY POLICY

The controller responsible for processing personal data collected by the Platform is:

Operator: SpacePORT Digital

Official Website: prodeccor.com

DPO Contact: [email protected]

To exercise rights related to your personal data — access, correction, deletion, portability, consent withdrawal — the User must contact the official channel above. Response time: up to 15 (fifteen) business days.

2.1. Data Provided by the User

Full name and email address (registration and authentication)

Billing and payment data (processed by Hotmart as Merchant of Record)

Company information or tax ID (when applicable)

Communications sent to support via email or contact form

2.2. Automatically Collected Data

IP address and approximate geolocation data

Device and browser identifiers (fingerprint)

Access logs, dates, times, and pages visited

Download patterns and volume

Cookies and similar tracking technologies

Session metadata and Platform browsing behavior

2.3. Anti-Fraud Protection Data

To protect Designs against piracy and unauthorized use, the Platform collects and processes:

Digital watermarking (steganographic) embedded in each downloaded file, linked to the User's profile

Detailed download logs, linked to the User's profile and specific file

Data for detecting improper credential sharing

Information on anomalous account usage patterns

⚠ Each downloaded file contains an invisible digital signature that allows tracing its origin if unauthorized distribution is identified. This watermark does not affect print quality.

Creating, maintaining, and authenticating user accounts on the Platform

Providing contracted services (library access, downloads, support)

Payment processing and subscription management

Compliance with legal and regulatory obligations

Prevention of fraud, piracy, and unauthorized use of Designs

Communication of service updates, new designs, and Terms changes

Usage analysis for continuous Platform improvement

Exercise of rights in judicial, administrative, or arbitral proceedings

ℹ The Platform does not process data for third-party behavioral advertising purposes and does not sell personal data to advertisers.

Contract performance: Data necessary for providing contracted services (LGPD art. 7, V; GDPR art. 6(1)(b)).

Legal obligation: Processing required by applicable regulations (LGPD art. 7, II; GDPR art. 6(1)(c)).

Legitimate interest: Fraud prevention, copyright protection, and Platform security (LGPD art. 7, IX; GDPR art. 6(1)(f)).

Consent: For marketing communications and non-essential cookies (LGPD art. 7, I; GDPR art. 6(1)(a)).

5.1. Types of Cookies Used

Essential Cookies: Strictly necessary for authentication, session management, and basic Platform functionality. Cannot be disabled without affecting service.

Analytical Cookies: Allow analysis of usage patterns and User experience improvement. May be declined without affecting basic access.

Security Cookies: Used for device tracking and fingerprinting, exclusively for anti-fraud protection and piracy detection. Considered essential to service integrity.

5.2. Cookie Management

The User may configure their browser to decline non-essential cookies. Declining essential or security cookies may prevent account access and file downloads, without constituting a service failure.

The Platform may display a cookie consent banner on first visit, allowing the User to manage preferences. Choices may be changed at any time in account settings.

ProDECCOR™ does not sell personal data. Sharing with third parties occurs only in the following situations:

Hotmart (Merchant of Record): Payment processing and financial transaction management, bound by a data protection agreement.

Service providers (sub-processors): Hosting, cloud storage, transactional email, and data analysis services supporting Platform operations, all bound by data protection contracts.

Public authorities: When required by competent authority, court order, or legal obligation.

Corporate successors: In case of merger, acquisition, or corporate restructuring, with at least 30 days' prior notice to the User.

Copyright protection: For identification and accountability of Users who violate Platform copyrights, including sharing with authorities and platforms in the context of takedown notices.

ℹ All sub-processors are selected based on adequate data protection guarantees under the LGPD and GDPR, and are subject to contractual confidentiality obligations.

The Platform may store and process data on servers located outside Brazil. In such cases, ProDECCOR™ will adopt adequate measures to protect transferred data, including:

Contracting providers with international security certifications (SOC 2, ISO 27001)

Including Standard Contractual Clauses for data protection

Adopting technical and organizational measures equivalent to those required by the LGPD and GDPR

ℹ The User will be informed of relevant changes in data storage countries through updates to this Policy, with at least 30 days' notice.

Personal data will be retained for as long as necessary for the purposes described in this Policy, observing the following criteria:

Account data: Retained during subscription and for up to 5 (five) years after termination, for legal compliance and litigation defense.

Transaction data: Retained for the period required by applicable tax and accounting legislation (minimum 5 years in Brazil).

Access and download logs: Retained for up to 6 (six) months, extendable in case of active copyright violation or misuse investigations.

Anti-fraud and watermarking data: Retained as long as necessary for piracy investigation and prevention, and may be shared with competent authorities even after account closure.

After the above periods, data will be securely deleted or anonymized, unless retention is required by legal, regulatory, or judicial obligation.

Under the LGPD, GDPR, and other applicable legislation, the User has the right to:

Access: Confirmation of processing and access to personal data held by the Platform.

Correction: Correction of incomplete, inaccurate, or outdated data.

Deletion: Deletion of data processed on the basis of consent, where no other legal basis applies.

Transparency: Information about public and private entities with whom data has been shared.

Portability: Data portability to another service provider, upon formal request, in a structured format.

Withdrawal: Withdrawal of consent at any time, without affecting processing already carried out.

Objection: Objection to processing carried out on the basis of legitimate interest, with justification.

Automated decision review: Review of decisions made exclusively on the basis of automated processing that affect the User's interests.

To exercise any of these rights, the User must send a request to [email protected] with sufficient identification to verify data ownership. Response time: up to 15 (fifteen) business days from receipt.

ℹ ProDECCOR™ may request additional documents to verify the requester's identity before processing access, correction, or deletion requests.

ProDECCOR™ adopts appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction, including:

Encryption of data in transit (TLS/HTTPS) and at rest

Role-based access controls (RBAC) with least privilege principle

Continuous access monitoring and suspicious activity detection

Internal security policies and team training

Periodic security reviews and vulnerability testing

Secure authentication with protection against brute force and credential stuffing

⚠ In the event of a security incident that may affect Users' personal data, ProDECCOR™ will notify affected individuals and the National Data Protection Authority (ANPD) within 72 hours, as required by the LGPD, with a description of the incident and measures taken.

The Platform is intended exclusively for persons aged 18 (eighteen) or older. ProDECCOR™ does not intentionally collect data from minors. If it is identified that a minor's data was collected without parental consent, ProDECCOR™ will promptly delete the data and cancel access. Communications on this matter should be sent to [email protected].

The Platform may contain links to third-party websites and services (Hotmart, Instagram, Facebook, Pinterest, YouTube, and similar). ProDECCOR™ is not responsible for the privacy practices of external platforms and recommends reading the privacy policy of each service accessed.

ProDECCOR™ and its products have no affiliation, sponsorship, partnership, or endorsement from Meta Platforms, Inc., Google LLC, Pinterest, Inc., TikTok (ByteDance), Hotmart, or any other third-party company mentioned in this document. Such mentions are purely descriptive.

ProDECCOR™ may update this Privacy Policy at any time. Material changes will be communicated with at least 30 (thirty) days' notice via registered email or prominent Platform notice. The current version is always available at prodeccor.com/privacy.

Continued use of the Platform after the notice period constitutes automatic acceptance of the updated Policy. If the User disagrees, they may cancel the subscription within the communicated period.

This Policy is governed by Brazilian law, in particular the General Data Protection Law (LGPD — Law No. 13,709/2018) and the Consumer Defense Code (Law No. 8,078/1990).

The courts of the Comarca de Marília, State of São Paulo, Brazil, shall have exclusive jurisdiction for any disputes related to this Policy, with express waiver of any other forum.

For users in the European Union, the GDPR additionally applies, including the right to file a complaint with the local data protection supervisory authority.

For questions regarding this Policy, exercise of rights, or inquiries about personal data processing:

Email: [email protected]

Privacy Page: prodeccor.com/privacy

Response time: up to 15 (fifteen) business days from receipt. For high-complexity cases, this period may be extended by an equal period, with prior notice to the User.

© 2026 ProDECCOR™ — SpacePORT Digital. All rights reserved.