Privacy Policy

This policy explains what data Norvik collects, why, and how you can control it, in accordance with Brazil's General Data Protection Law (Lei nº 13.709/2018 — LGPD).

1. What we collect

We only collect what's needed to run the store and deliver your purchases:

• Name and e-mail, when you create an account or check out;
• Password, stored only as a cryptographic hash — never in plain text;
• Google sign-in data, if you choose that login method (name, e-mail and profile photo, as authorized by you to Google);
• Order history and purchased items;
• Payment data — processed directly by Stripe. Norvik never receives or stores your card number.

2. Cookies

We only use strictly necessary cookies to keep you signed in and remember your cart. We don't use advertising cookies, cross-site tracking, or third-party analytics.

3. How we use your data

• Process orders and release download links;
• Authenticate access to your account;
• Send order-related communications (confirmation, downloads);
• Comply with legal and tax obligations.

We don't sell or share your data with third parties for marketing purposes.

4. Sharing with third parties

We only share data with providers essential to running the store:

• Stripe, for payment processing (card and Pix);
• Google, only if you choose to sign in with your Google account.

5. Your rights

Under the LGPD, you may at any time:

• Request access to or a copy of your data;
• Correct incomplete or outdated data;
• Request deletion of your account and associated data;
• Withdraw consent previously given.

To exercise any of these rights, contact us at contato@norvik.art.

6. Data retention

We keep your account data while your account is active. Order data is kept for the period required by Brazilian tax law. Download links expire automatically after the configured period (72 hours by default) and a limited number of uses.

7. Contact

Questions about this policy can be sent to contato@norvik.art.