Privacy Policy

1. Introduction

Arkana Studios (CNPJ 20.838.138/0001-71), headquartered in Brazil, values the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store and protect your information when you access our website or engage our services.

By using our website or contacting us, you acknowledge that you have read and understood this policy.

2. Information We Collect

2.1 Information you provide

• Full name
• Email address
• Company name
• Messages submitted through our contact form

2.2 Information collected automatically

• IP address
• Browser type and device information
• Pages visited and time spent
• Cookie and similar technology data (see Section 7)

We do not collect sensitive personal information (e.g., Social Security numbers, financial account numbers, health data, or biometric data).

3. How We Use Your Information

• To respond to your contact requests and proposals
• To deliver services you have contracted
• To improve our website and user experience
• To comply with legal obligations
• To prevent fraud and ensure platform security

We do not sell, rent, trade or share your personal information with third parties for their own marketing purposes.

4. Legal Basis for Processing

Depending on your jurisdiction, the legal bases for processing your personal data include:

• Consent — when you submit our contact form or accept cookies
• Legitimate interest — to improve our services and send relevant communications
• Legal obligation — when required by applicable law or competent authority
• Contract performance — to fulfill services you have engaged

5. Sharing of Information

We may share your data only in the following situations:

• With essential service providers (e.g., hosting, analytics) under confidentiality agreements
• To comply with legal, judicial or regulatory requirements
• In the event of a merger, acquisition or corporate restructuring, with continued data protection guarantees

6. Your Privacy Rights

6.1 Rights for all users

Regardless of your location, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your personal data, subject to legal retention requirements
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest
• Withdrawal of consent — withdraw consent at any time, without affecting lawfulness of prior processing

6.2 Additional rights for California residents (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know — to know what personal information we collect, use, disclose and sell
• Right to Delete — to request deletion of personal information we collected from you
• Right to Correct — to request correction of inaccurate personal information
• Right to Opt-Out of Sale or Sharing — we do not sell or share your personal information for cross-context behavioral advertising
• Right to Limit Use of Sensitive Personal Information — not applicable as we do not collect sensitive personal information as defined by CPRA
• Right to Non-Discrimination — we will not discriminate against you for exercising any of your CCPA/CPRA rights

To exercise your California rights, contact us at [email protected]. We will respond within 45 days as required by law.

6.3 Additional rights for residents of other US states

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA) and other states with comprehensive privacy laws have similar rights to access, correct, delete and opt out of certain uses of their personal data. Contact us at [email protected] to exercise these rights.

7. Cookies

We use strictly necessary cookies for website functionality. When you accept cookies via our banner, we also use analytics cookies to understand how visitors use our website. You may decline non-essential cookies at any time without affecting your ability to use the site.

We do not use cookies for targeted advertising or sell cookie data to third parties.

8. Email Communications (CAN-SPAM Compliance)

Any commercial email we send complies with the CAN-SPAM Act. Each message clearly identifies Arkana Studios as the sender and includes a mechanism to opt out of future communications. We will honor opt-out requests within 10 business days.

We do not send unsolicited commercial email. We only contact you if you have expressly requested information from us or have a prior business relationship with Arkana Studios.

9. Data Retention

We retain personal data only as long as necessary to fulfill the purposes described in this policy or as required by applicable law. Contact form data is retained for up to 2 years unless you request earlier deletion.

10. International Data Transfers

Arkana Studios is based in Brazil. If you access our services from outside Brazil, your data may be transferred to and processed in Brazil. We implement appropriate safeguards to ensure your data receives equivalent protection wherever it is processed.

11. Data Security

We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, loss or disclosure. However, no transmission over the internet is completely secure. We encourage you to contact us immediately if you suspect any unauthorized use of your data.

12. Data Protection Officer

Our Data Protection Officer can be reached at:

Arkana Studios — DPO
[email protected]

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the date at the top of this page. Continued use of our website after changes constitutes acceptance of the updated policy.

14. Contact Us

For questions, requests or complaints related to this Privacy Policy:

• General inquiries: [email protected]
• Privacy / DPO: [email protected]