Privacy Policy

Effective August 12, 2026

This Privacy Policy explains how GhostFire Digital (“we,” “us”) collects, uses, and protects personal information when you use DARWA™ (“the Service”) at darwa.ai. We keep data collection minimal and do not sell your personal information.

Information We Collect

Account information — your name and email address, collected through our authentication provider when you create an account.
Payment information — processed by our payment provider. We do not see or store your full card details; we retain only what is needed to confirm a purchase and grant your deployment.
Domain inputs — the domain names you enter to preview or deploy an identity.
Communications — messages you send us and transactional emails we send you (receipts, sign-in links, deployment confirmations).
Usage data — aggregate, privacy-first analytics. Our analytics is cookieless and does not track or identify individual visitors.

How We Use It

We use this information to provide and operate the Service, process payments and deliver your deployments, send transactional email, respond to support requests, maintain security and prevent abuse, and understand aggregate usage so we can improve the product. We do not use your information for third-party advertising.

Cookies & Tracking

We use only essential, functional cookies — those required to keep you signed in and to process checkout securely. We do not use advertising or cross-site tracking cookies, and our analytics is cookieless. Because we set no non-essential tracking cookies, no cookie-consent banner is required.

Service Providers

We rely on trusted third-party processors to run the Service — for authentication, payments, transactional email, analytics, security, and hosting. Each processes data only to provide its service to us and under its own privacy terms. We do not sell or rent your personal information.

Data Retention

We keep account and transaction data while your account is active and for as long as needed to meet legal, tax, and accounting obligations. You may request deletion of your account and associated personal data at any time.

Your Rights

Depending on where you live — including the EU/UK (GDPR) and California (CCPA/CPRA) — you may have the right to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to opt out of any “sale” or “sharing” of personal information. We do not sell or share your data. To exercise any right, contact us at the address below.

International Users

We operate from the United States, and your information may be processed in the U.S. and other countries where our service providers operate, which may have different data-protection laws than your own.

Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us data, contact us and we will delete it.

Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Changes

We may update this policy. Material changes will be posted here with a revised effective date.

Contact

For privacy questions or to exercise your rights, contact GhostFire Digital at deploy@darwa.ai.