Legal

Privacy Policy

Last updated: October 6, 2026

Short version: we collect as little as we can, we use it to run the course and measure our ads, and we never sell your personal data. The long version is below.

1. Who we are

Avatar School (the “Site”) is operated by DEIMOS TECH LTDA, CNPJ 58.740.607/0001-98, a company based in Brazil, with registered address at Q 202, Lote 7, Bloco A, Sul (Águas Claras), Brasília – DF, 71937-720, Brazil (“we”, “us”). We are the data controller for the personal data described here. Contact: contatosuportecm@gmail.com.

2. What we collect

When you visit the Site. We use measurement pixels (Meta Pixel, loaded through UTMify). They record things like the pages you view, the button you click, your approximate location, device and browser type, IP address, and the ad or link that brought you here (UTM parameters, click IDs). The Site also loads fonts from Google Fonts, an animation script from the jsDelivr CDN, and our measurement script looks up your public IP address through ipify; each of those services receives your IP address when your browser loads them. We set one functional cookie of our own, lang, which remembers the language you chose. It is not used for marketing.

When you buy. The checkout is run by Digistore24 Inc., our authorized retailer and merchant of record. Digistore24 collects and processes your payment details. It passes us your name, email address and order details (product, price, date, order ID, and whether the order was refunded). We never see your full card number.

When you write to us. If you email support, we keep your message and our reply.

3. Why we use it

To deliver what you bought and answer support or refund requests.
To measure and improve our advertising and the Site (for example, to know which ad led to a purchase).
To prevent fraud and abuse, and to meet legal, tax and accounting obligations.

Where GDPR applies, our legal bases are performance of a contract (delivery and support), our legitimate interests (security, and measuring our own ads through measurement pixels) and legal obligation. Our products are not sold in the EU, the UK, Switzerland or Norway.

4. Who we share it with

Digistore24 — payment, taxes, delivery email and refunds. Its own privacy policy applies to the data it collects.
Meta Platforms — the Meta Pixel (and conversion events sent through it) lets Meta measure ads and show them to relevant audiences.
UTMify — ad attribution and conversion tracking.
ipify — the measurement script asks it for your public IP address.
Google Fonts — serves the Site’s fonts and receives your IP address when they load.
jsDelivr — a CDN that serves an animation script and receives your IP address when it loads.
Vercel — hosts the Site and may process technical data such as IP addresses in server logs.
Authorities, advisors or a buyer of our business, when the law requires it or in a corporate transaction.

We do not sell your personal information for money. Some ad-measurement sharing (such as with Meta) can count as “sharing” for cross-context behavioral advertising under California law; you can opt out as described in section 7. We treat a Global Privacy Control (GPC) signal as an opt-out of sharing for ads where the law requires it.

Because we are in Brazil and some of these providers are elsewhere, your data may be transferred internationally. Where required, we rely on the safeguards our providers offer, where required.

5. Cookies and pixels

We use measurement pixels (Meta Pixel via UTMify) on the basis of our legitimate interest in measuring our ads. They set cookies to recognize your browser across visits. You can block them with your browser, a blocker extension, or Meta’s ad settings, and delete cookies in your browser settings. The lang cookie is functional only. Blocking them does not stop you from reading the Site or buying.

6. How long we keep it

Order and support records: as long as needed to provide support, handle refunds and chargebacks, and meet tax and accounting rules (generally up to 5 years). Measurement data: kept by each provider under its own retention settings, and by us only as long as it is useful for measuring campaigns. Support emails: up to 3 years after the last message. We then delete or anonymize it.

7. Your rights

California (CCPA/CPRA). You can ask us to tell you what personal information we collected and how we used and shared it, to delete it, to correct it, and to opt out of “sharing” for cross-context behavioral advertising. To opt out, email contatosuportecm@gmail.com with the subject “Do not share”, or turn on Global Privacy Control in your browser. We will not discriminate against you for using these rights. An authorized agent can make a request for you.

EEA and UK (GDPR / UK GDPR). You can ask for access, correction, deletion, restriction, portability, and object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it at any time. You can also complain to your local data protection authority.

Brazil (LGPD). You can confirm that we process your data and ask for access, correction, anonymization, deletion, portability, information about sharing, and revocation of consent. You can complain to the ANPD.

To use any of these rights, email contatosuportecm@gmail.com. We may need to verify your identity, and we reply within 45 days (30 days where GDPR applies) or sooner if the law says so.

8. Children

Avatar School is not meant for anyone under 18. We do not knowingly collect data from minors. If you think a minor gave us data, write to us and we will delete it.

9. Security

We use reasonable technical and organizational measures, including encrypted connections (HTTPS). No system is 100% secure, so we cannot guarantee absolute security.

10. Changes

If we change this policy, we will post the new version here and update the date above.

11. Contact

Questions or requests: contatosuportecm@gmail.com.