Privacy Policy
How DANILO ALVES RODRIGUES LTDA collects, uses and protects your information when you use this website and the CastorStack products.
Who is responsible for your data
The data controller is DANILO ALVES RODRIGUES LTDA, the company that operates this website and the CastorStack products. You can reach us at any time at support@castorstack.com for questions about this policy or about the data we hold about you.
What we collect
Account data you give us when you sign up: name, email address and the password hash used to authenticate you. Order data connected to a purchase: the products bought, the order reference and the invoicing details you enter at checkout. Support data: the content of the messages you send us. Technical data: IP address, browser type and pages visited, kept in server and security logs. Preference data: your language and theme choices, stored locally in your browser.
How we use it
To create and maintain your account, to deliver and support the products you bought, to process orders and issue invoices, to answer your messages, to keep the service secure and prevent abuse, and to comply with our accounting and tax obligations.
Legal basis
We process account and order data to perform the contract between us, technical and security data on the basis of our legitimate interest in operating a safe service, analytics data only with your consent, and accounting records because the law requires us to keep them.
Payments
We never see or store your card details. Purchases are processed by Paddle.com Market Ltd, which acts as merchant of record and as an independent controller of the payment data you provide at checkout. Paddle's own privacy policy is available at paddle.com/legal/privacy. We receive from Paddle only the order reference, the product bought and the billing country and name needed to fulfil and support your purchase.
Cookies and analytics
Essential cookies keep you signed in and remember your language, theme and cookie choice; they are required for the site to work. Analytics through Google Analytics 4 runs only after you accept it in the cookie banner, and you can decline it without losing any functionality. If you accept, Google Analytics sets its own cookies and receives a truncated IP address and the pages you visit.
Who else processes your data
We use a small set of providers that process data on our behalf under contract: Paddle for payments and invoicing, Vercel for website hosting, Microsoft Azure for the application API and database, Google Analytics for consented usage statistics, and our email provider for transactional and support email. They may only process the data for the purposes we instruct.
International transfers
Some of these providers are located outside your country, including in the United States and the European Union. When data leaves the country you are in, the transfer is covered by the standard contractual clauses or the equivalent safeguards offered by each provider.
How long we keep it
Account data is kept while your account is active and for 12 months after you close it. Order and invoicing records are kept for the period required by tax law, normally 5 years. Support messages are kept for 24 months. Security logs are kept for 12 months. Analytics data is kept for 14 months.
Your rights
You can ask us to give you a copy of your data, to correct it, to delete it, to restrict or object to a particular use, or to export it in a portable format. You can also withdraw your analytics consent at any time by clearing your cookies for this site. Write to support@castorstack.com and we will answer within 30 days. If you are not satisfied with our answer, you can complain to your local data protection authority.
Security
All traffic runs over TLS, passwords are stored only as salted hashes, access to production data is restricted to the people who need it, and backups are encrypted. No system is perfectly secure, so if a breach ever affects your data we will notify you and the competent authority as required by law.
Children
The service is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has given us personal data, contact support@castorstack.com and we will delete it.
Changes to this policy
We may update this policy as the service evolves. The date at the bottom of this page always reflects the current version, and material changes are announced by email to account holders before they take effect.
Contact
Questions, requests or complaints about privacy go to support@castorstack.com, or through the contact page of this website.
Last updated: 6 August 2026.