Privacy Policy
Last updated: August 27, 2025
Welcome to DarkOra (“we,” “our,” or “us”). This Privacy Policy explains how we collect, use, disclose, and protect information when you use our website, products, and services (collectively, the “Services”). This policy is designed to comply with applicable United States privacy laws, including the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), and similar state laws (Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA) to the extent they apply.
1) Scope
This policy applies to information processed through DarkOra’s website and software tools (including licensing and activation systems), as well as customer support and related communications. It does not apply to third-party websites or services that we do not control.
2) Information We Collect
We collect information directly from you, automatically through your use of the Services, and from service providers we engage to operate our Services.
- Account & Authentication Data: email, username, hashed password, and preferences.
- Order & Payment Metadata: products purchased, timestamps, currency/amount, limited billing details (e.g., billing country/ZIP). Payment card data is collected and processed by our payment processors; we do not store full card numbers.
- Licensing & Activation Data: license key, activation/deactivation timestamps, device or hardware identifiers (e.g., hashed hardware/OS IDs), coarse IP-based location (country/region) at activation, and usage counters needed to enforce single-device licensing.
- Usage, Logs & Diagnostics: feature interactions, crash/error logs, performance metrics, and basic device/OS information.
- Support Communications: messages and attachments you send via email or forms, plus related metadata (time, IP).
- Public Content: comments/reviews you post on our site (e.g., WordPress comments), which may include your display name and avatar.
- Cookies & Similar Technologies: see Section 8.
Sensitive data: We do not intentionally collect sensitive personal information (e.g., health, biometric, precise geolocation). Please do not submit such data.
3) How We Use Information
- Provide & Maintain Services: account creation, downloads, updates, license activation, and customer support.
- Enforce Licensing: detect and prevent multi-computer activations and unauthorized use consistent with our Terms & Conditions.
- Security & Fraud Prevention: protect users and our infrastructure, investigate abuse, and prevent spam or attacks.
- Improve Products: fix bugs, enhance performance, and develop new features.
- Transactional Communications: receipts, license emails, and important service notices. Marketing emails are sent only where permitted; you can unsubscribe at any time.
- Legal Compliance: tax, accounting, and responding to lawful requests.
4) U.S. State Privacy Disclosures & Rights
Depending on where you reside, you may have rights under CCPA/CPRA (California), VCDPA (Virginia), CPA (Colorado), CTDPA (Connecticut), and UCPA (Utah), including the right to:
- Know/Access: request details about the personal information we collect and how we use it.
- Delete: request deletion of personal information, subject to exemptions (e.g., legal obligations, security, fraud prevention).
- Correct: request correction of inaccurate personal information.
- Data Portability: obtain a portable copy of certain information.
- Opt Out: opt out of “sale” or “sharing” of personal information and of targeted advertising where applicable.
- Appeal: appeal our decision on your request (VA/CO/CT). See “How to Exercise Your Rights.”
- No Discrimination: we will not discriminate against you for exercising your privacy rights.
Sale/Sharing of Personal Information: We do not sell personal information and do not share it for cross-context behavioral advertising as defined by the CPRA. If our practices change, we will update this policy and provide required opt-out mechanisms.
5) California Notice at Collection
We collect the following categories of personal information for the business purposes described below. We retain data only as long as needed for those purposes or as required by law (see Retention).
| Category (CCPA) | Examples | Business Purpose(s) | Retention (Typical) | Sold/Shared? |
|---|---|---|---|---|
| Identifiers | Email, username, license key, device/hardware IDs (hashed), IP (coarse) | Account, authentication, license enforcement, security | Account life + up to 24 months; logs ~12 months | No |
| Customer Records | Order history, limited billing info (country/ZIP) | Fulfillment, support, fraud prevention, tax/accounting | Up to 10 years where required by law | No |
| Internet/Network Activity | Usage analytics, diagnostics, crash logs | Improve/secure Services | ~12 months (longer if needed for security) | No |
| Geolocation (coarse) | Country/region inferred from IP at activation | License enforcement, fraud prevention | ~24 months after last activation/validation | No |
| Inferences | Non-sensitive product usage trends | Product improvement | ~12 months (aggregated thereafter) | No |
6) How We Share Information
We do not sell personal information. We share it only with:
- Service Providers (Processors): hosting/CDN, security/anti-abuse, email delivery, analytics, license management, and payment processors—only to operate and protect the Services per our instructions.
- Legal & Safety: where required by law or necessary to protect users, the public, or the integrity of the Services.
- Business Transfers: in connection with a merger, acquisition, or asset sale under appropriate safeguards.
7) Retention
- Account data: kept while your account is active and up to 24 months after closure/inactivity unless a longer period is required.
- Orders & tax records: up to 10 years (legal requirement may vary).
- Licensing/activation data: typically up to 24 months after the last activation/validation.
- Logs/diagnostics: typically ~12 months unless needed longer for security or investigations.
- Support tickets: up to 36 months after resolution for quality/audit.
8) Cookies & Similar Technologies
We use cookies and similar technologies to operate our site, remember preferences (e.g., login status and language), secure sessions, support purchases/licensing, and measure basic performance. You can control non-essential cookies via your browser settings; blocking essential cookies may impact functionality.
Common WordPress Cookies
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| wordpress_test_cookie | Checks if cookies are enabled | Session | Strictly necessary |
| wordpress_logged_in_[hash] | Identifies logged-in user session | Session | Strictly necessary |
| wordpress_sec_[hash] | Authentication/security | Session | Strictly necessary |
| wp-settings-[user_id], wp-settings-time-[user_id] | User interface preferences | Up to 1 year | Preferences |
| comment_author_*, comment_author_email_* | Remembers details for future comments | Up to 1 year | Preferences |
| Analytics cookies (if enabled) | Anonymous usage and performance | Varies (e.g., up to 24 months) | Analytics (consent-based where required) |
9) Security
We implement technical and organizational measures appropriate to the risks of our processing, including encryption in transit, access controls, and security monitoring. No online service can guarantee 100% security; please use a strong, unique password and protect your credentials.
10) Children’s Privacy
Our Services are not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided personal information, contact us to request deletion.
11) Automated Checks & Profiling
To enforce our single-device license model and prevent abuse, our licensing systems may perform automated checks at activation and periodically (e.g., validating device identifiers, license keys, and usage counters). These checks are used only for license eligibility, anti-fraud, and service integrity.
12) Your Privacy Choices & How to Exercise Your Rights
To submit an access, deletion, correction, portability, opt-out, or appeal request, email us from the address associated with your account and describe your request. We will verify your identity (e.g., via email verification or account login) before responding.
- Email: [email protected]
- Authorized Agents (CA): authorized agents may submit a request by email with proof of authorization and user verification.
- Response Times: we typically respond within 45 days (may extend as permitted by law).
- Appeals (VA/CO/CT): if we deny your request, you may appeal by replying to our decision email with “Appeal” in the subject; we will review and respond within the timeframes required by applicable law.
13) Do Not Track
There is no consistent industry standard for responding to browser “Do Not Track” signals. We will update this policy if our approach changes.
14) Third-Party Links
Our website may contain links to third-party sites or services. Their privacy practices are governed by their own policies.
15) Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the latest revision. Material changes will be posted on this page, and we may notify you by email or in-product notice where appropriate.
16) Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact: [email protected]
