Privacy policy

This page is a courtesy translation of the Portuguese (Brazil) version, which is the one that applies. Monad is offered from Brazil, under Brazilian law.

Last updated: November 6, 2026.

This service (monad.dragaonegro.com) and the license server (license.dragaonegro.com) exist to sell and activate the Monad subscription, complete the application's sign-in with Supabase (and with Neon, when credentials are configured) and deliver the installer and updates for Windows. The controller is the service provider (). To talk about your data, write to .

Account, payment and license

• What we ask for: your name, your e-mail and a password, to create your account in the members area. The password is stored only as a scrambled code (hash): not even we can read it.
• What we keep: name, e-mail, password (scrambled), license key, expiry dates, the payment history (amount, date and status), the Mercado Pago subscription number, the record that you accepted the terms (date and version), your choice about news e-mails, the date of the license's last access and a code (hash) of the computer where the license is active, so that it works on one computer only. We do not ask for your ID number, phone or address.
• Payment: it is made through Mercado Pago. Card numbers and bank transfer data stay only with them; we receive just the payment confirmation.
• What we use it for, and on what basis: delivering the service, sending the key and notices about your license and payments (to perform the contract); keeping tax and payment records (to comply with the law); protecting the service against fraud and abuse (legitimate interest); and sending news and offers, only if you tick the dedicated box at sign-up (consent).
• News by e-mail: optional and separate from accepting the terms. You can change your mind in My account, in the members area, or with the unsubscribe link in every news e-mail, and leaving takes effect immediately. Notices about your license and payments are not news and keep arriving.
• Who helps operate it (processors): Mercado Pago (payments, in Brazil), Resend (sending e-mail, in the United States) and the server provider (VPS) where the system runs. They process the data only to provide that service to us.

License verification

• The application checks the license on your computer and, from time to time (about every 6 hours), asks the license server to renew your token.
• That request sends the license token and nothing else: no files, code or data from your projects.
• The server keeps the date of the license's last access, for support and to show whether the application is in use.

How long we keep it

• Account and license: as long as the account exists. Accounts created online that never paid and went a year unused are deleted.
• Payment records: 5 years, the period for tax records; then they are deleted. If you delete your account before that, they stay without your name and e-mail.
• Access and action records (sign-ins, IP address and Mercado Pago notices): 12 months.
• History of the e-mails we sent you: 12 months.
• IP address used to limit excess requests: only in memory, for up to one minute.

Deletion at the end of each period is automatic.

Your rights

Under the LGPD (art. 18), you may at any time:

• Confirm and access your data, and take a copy (portability): in My account, Download my data, a file you can open in any program.
• Correct your name and e-mail: in My account, Details.
• Delete your account: in My account, Delete my account. It happens right away, and the subscription is cancelled. The payment records the law requires us to keep remain without your name and e-mail.
• Withdraw your consent to news e-mails: in My account or with the unsubscribe link.
• Know who we share data with: it is in this policy, under “Who helps operate it”.
• Complain to the Brazilian National Data Protection Authority (ANPD).

If you cannot use the members area, you can ask for any of this by e-mail; we reply within 15 days.

Contact and data protection officer

The channel for privacy and personal-data matters is the e-mail . The data protection officer is the person responsible for the service, through that same channel.

Cookies

The members area uses a single cookie, the session cookie, which is essential to keep you signed in and lasts up to 14 days. This site and the app use no tracking, advertising or analytics cookies, and load no third-party trackers. That is why there is no cookie banner. If this changes, we will ask for your consent first, with the option to refuse.

Children and teenagers

Monad and the account are for people aged 18 or over, and we ask for this declaration at sign-up. We do not knowingly collect data from children. If we learn that an account belongs to a minor, it is deleted. A parent or guardian can ask for this at the e-mail above.

If there is a security incident

If an incident could bring risk or relevant harm to your data, we notify you and the ANPD within a reasonable time, and never later than 3 business days after we confirm the incident. The notice says what happened, which data was affected and what you can do. We keep a response plan covering detection, containment, assessment, notification and record-keeping.

Application updates

• Every hour, and on startup, Monad asks this service for the file with the list of versions and, if there is a new one, downloads its package.
• No data from you, your computer or your projects goes in that request beyond what every web request sends (IP address and the type of application).
• There is no usage tracking in Monad.

What happens at sign-in

• You click connect in Monad and are taken to the provider to authorize.
• The provider sends a one-time code back to this service, which exchanges it for access tokens using the application's credentials.
• The tokens are handed to Monad on your computer, in the return page itself, and are not stored here.
• When the token expires, Monad asks this service to renew it, and the service passes the request on to the provider.

What is recorded

• Tokens, codes and data from your projects are not stored or logged.
• The IP address is kept only in memory for up to one minute, to limit excessive requests.
• The server that hosts this address may keep technical access logs (date, route and IP).

Your data at the provider

You can revoke Monad's access at any time in your account settings at the provider.