Privacy Policy

GeneX Plugins ("we", "us", "our") is an independent digital products store operated by Fabricio (GeneX), based in Brazil. We are the controller of the personal data you provide when using gxplugins.com.

For privacy-related inquiries, contact us at privacy@gxplugins.com.

We collect the following categories of personal data:

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

• Contract performance: to process your purchase, deliver the product, and provide customer support.
• Account management: to authenticate you and maintain your purchase history.
• Legitimate interest: to detect fraud, maintain security, and improve the store.
• Legal obligation: to comply with Brazilian tax and consumer protection law.

We use a minimal set of cookies:

We do not use advertising cookies, cross-site tracking cookies, or third-party analytics scripts.

We share data with third parties only to the extent necessary to operate the store:

• Payment processors (e.g., Stripe) — receive your payment details to process transactions. They are bound by their own privacy policies and PCI-DSS compliance obligations. We never see or store your full card number.
• Hosting provider — your data is stored on servers that may be located outside Brazil; we select providers with adequate data protection standards.
• Legal authorities — we may disclose data when required by Brazilian law or valid court order.

We retain your personal data for as long as your account is active or as needed to provide services and comply with legal obligations (typically 5 years for financial records under Brazilian tax law). You may request deletion at any time — see Section 7.

Under the Brazilian General Data Protection Law (LGPD), you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your data, subject to legal retention obligations.
• Portability — receive your data in a structured, machine-readable format.
• Information — be informed about the third parties with whom we share your data.
• Objection — object to processing carried out on the basis of legitimate interest.
• Revocation of consent — where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, email us at privacy@gxplugins.com. We will respond within 15 business days.

We use industry-standard measures to protect your data, including password hashing (scrypt with unique per-user salt), HTTPS-only transmission, and httpOnly session cookies.

In the event of a confirmed security incident that may result in risk or damage to data subjects, we will notify the Autoridade Nacional de Proteção de Dados (ANPD) and affected users within 2 (two) working days of becoming aware of the incident, as required by LGPD Art. 48 and ANPD Resolution nº 02/2022. The notification will describe the nature of the data affected, the risks involved, and the measures taken.

Our store is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately for deletion.

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated effective date. For material changes, we will notify registered users by email where feasible.

As required by LGPD Art. 41, GeneX Plugins has designated a Data Protection Officer (Encarregado de Proteção de Dados):