Privacy Policy

Who is responsible

Dotti Studio is operated by DARK DOTTI NEGOCIOS DIGITAIS LTDA, registered under CNPJ (Brazilian company registration number) 64.021.917/0001-55, the controller of the personal data of the account and of the platform's operation, as it decides the purposes and means of that processing.

This contact handles support and privacy requests. Do not send passwords, API keys, or full card details by email.

Data and purposes

The data processed depends on the features you use. Not every account uses all the functions below.

Account and access

Name, email, authentication data, permissions, and registration status are used to create and protect the account, review access, and make the contracted products available. Optional profile information, such as photo, bio, and links, makes up your profile in the features where it is displayed.

Productions and use of the platform

Scripts, audio, images, settings, titles, channels, and video metadata make it possible to run the requested features. The Robot records the associated machine, operating system, version, last signal, production steps, and production events. These records help with monitoring, support, and cost calculation.

When available in your account, lessons record progress and ratings; community features record posts, interactions, and messages with their attachments. Administrators have access to operational information and audit logs for management, support, and security.

Payments

Kiwify processes new payments. Dotti records checkout, subscription, and order identifiers, plan, amounts, status, and access period. Payment details are entered in Kiwify's environment, not in a card form maintained by Dotti. Earlier Stripe records, including their customer and transaction identifiers, are preserved.

Kiwify processes the purchase on behalf of DARK DOTTI NEGOCIOS DIGITAIS LTDA, the recipient of the payments for this offer.

For earlier payments processed by Stripe, the recipient identified in this policy is NETUNO CRIAÇÕES DIGITAIS LTDA. This role does not replace the platform operator identified in Who is responsible.

Legal bases for processing

Account creation, billing, and execution of the requested features are based on the contract or on the procedures necessary for entering into it. Compliance with legal obligations and the regular exercise of rights may require specific records. Security and abuse-prevention measures may rely on legitimate interest, provided they respect necessity and the rights of those who use the platform. When required, consent must be specific and revocable; this policy does not replace it.

The processing of data of children and adolescents must respect their best interests and the applicable legal requirements. If there is data of minors in the account or in materials submitted, the parent or guardian may use the contact in this policy to request guidance, correction, or deletion, as the case may be.

Google sign-in and connections

Sign in with Google

Sign-in requests basic identification, email, and profile (openid email profile). Google and Supabase take part in authentication. The account identifier, the email, and the basic profile data made available, such as name and photo, allow us to recognize you and to create or access your account. Dotti does not receive your Google password.

Signing in with Google does not grant access to your Gmail, your private videos, or all of your Drive files.

Optional connections

Connecting a YouTube channel is separate from sign-in and requests read access to the channel, audience metrics, and revenue metrics for the corresponding dashboards. The platform stores the channel link and the encrypted credential to query that data while the connection remains authorized. The metrics queried may remain in a temporary cache for display.

These features use the YouTube API Services. The processing carried out by Google is also explained in the Google Privacy Policy.

The Drive connection, when available and chosen by you, requests the drive.file permission, limited to files created or opened with the application. This feature uploads the produced video to your Drive account and stores information about the connection and the folder used. The upload depends on the connection, the permissions, and the space available on Google.

You can revoke permissions on the connections page of your Google Account. Disconnecting in Dotti removes the integration credential from the platform, but does not delete files already uploaded to your Drive and does not replace revocation on Google.

To request deletion of data already received from these integrations, use the privacy channel. Disconnecting an integration, revoking permissions, and deleting previously stored data are measures with different effects.

Deleting the data kept by Dotti does not delete your videos or other data on YouTube. To remove them from YouTube itself, use that service's controls.

Limited use of Google data

Dotti undertakes to comply with the Google API Services User Data Policy in the use and transfer of data received from Google APIs, including the Limited Use requirements where applicable. This data may only serve the stated functions, with sharing restricted to the permitted cases, such as authorized execution of the feature, security, and legal obligation. Human reading is also restricted to the cases permitted in that policy.

These rules prohibit selling the data and using it for advertising or credit assessment. For Drive, the Google Workspace data policy also applies, which prohibits using its data to develop or train generalized AI models. This specific rule is not equivalent to a statement about the practices of all AI providers used in other Dotti features.

Services and sharing

The features depend on providers that receive the data necessary for them to run:

• Authentication, database, and files: Supabase and hosting infrastructure; media storage also has an integration with Cloudflare R2.
• Payment: Kiwify, for checkout, subscription management, and financial events. The records of earlier payments processed by Stripe remain preserved.
• AI, voice, and avatar: depending on the feature and the configuration, services such as OpenRouter, OpenAI, Google/Gemini, Anthropic, Moonshot/Kimi, Groq, GenAI Pro, 69labs, ai33 (OpenSpeaker), kie.ai, and HeyGen may receive instructions, scripts, audio, or images. Avatar creation may send your photo and name to HeyGen.
• Channel and media research: services such as vidIQ and media library sources receive the queries necessary for researching and selecting materials.

The providers' rules also apply to the accounts and services you contract directly, including regarding the retention and use of materials submitted. Conditions may vary between providers, plans, and configurations; check these conditions before submitting content. Avoid entering unnecessary personal data in scripts and files sent to AI.

Visibility changes depending on the feature. Profile photos and post images may have a public address. Attachments to private messages use restricted access. The final video produced by the Robot is saved on the production machine; this does not mean that all other Dotti data and files remain only on the computer.

Some providers may process data outside Brazil. International transfers must comply with the cases and safeguards required by the LGPD (Lei 13.709/2018, Brazil's General Data Protection Law) and the applicable regulations. You can request, through the contact in this policy, information about the recipients, the countries of processing, and the safeguards applicable to your data.

Data in the browser

Dotti uses local storage to keep your session and interface preferences, and temporary storage to complete connections and navigation. During Google sign-in, a temporary security cookie links the start of sign-in to the return from it and lasts up to ten minutes.

Signing out ends the session in that browser. Clearing the site's storage may require signing in again and reset preferences. On a shared computer, sign out after use.

Protection and retention

The application uses access control, encryption of integration credentials, and audit logs. No measure eliminates all risks; suspected unauthorized access should be reported through the contact on this page.

Retention depends on the purpose and the need for each category of data:

• Account and profile: while the account is in use and for as long as necessary to handle requests and meet obligations arising from the relationship with you.
• Productions, lessons, and community: for as long as necessary for the features used and the history available in the account, subject to deletion requests and applicable rights.
• Integrations: credentials while the connection is active; data received according to the purpose of the feature and the rules of the respective service. Disconnecting does not automatically delete the entire history.
• Billing, support, and security: only for the period necessary for the legal obligation, the investigation of incidents, support, or the regular exercise of rights that justifies retention.

When the purpose ends, the data must be deleted or anonymized, except in the cases of retention permitted by law. Backup copies and records kept by providers need to be taken into account when assessing a request; there is no promise of instant deletion of all copies.

Deleting a production from the list does not erase the MP4 from your computer. Cost, audit, and billing records are handled separately. Requesting account deletion is also not the same as automatically canceling a subscription: state in your request whether you want both, so that they are handled separately.

Deletion requests may be subject to legal retention limits. The response must state the possible measures, the data that must remain, and the justification, including when the action cannot be taken immediately. A removal from the interface must not be presented as a complete deletion.

Your rights

Under the LGPD (Lei 13.709/2018, Brazil's General Data Protection Law), you can request confirmation and access, correction, information about sharing, portability where applicable, and anonymization, blocking, or deletion in the cases provided for by law. You can also revoke consent, learn the consequences of not providing it, object to irregular processing, and request review of decisions made solely by automated means that affect your interests.

Write to canaldark.boreal1@gmail.com with your account email and what you would like to request. The request is free of charge and can be made even without access to the platform. A proportionate identity verification may be necessary to prevent third parties from accessing your data. You can also turn to the Agência Nacional de Proteção de Dados (ANPD, Brazil's national data protection authority) and to consumer protection bodies.

Requests follow the deadlines and conditions of the Lei Geral de Proteção de Dados Pessoais (Brazil's General Personal Data Protection Law) and the applicable regulations. Submitting a request does not require agreeing to new processing purposes.

Changes to this policy

The version and date of this policy make it possible to identify the applicable text. Relevant changes must be communicated clearly. New purposes or permissions must be disclosed before they are used, with specific consent when required; the mere publication of a new version does not replace it.