PRIVACY POLICY — DP HOST
This English version is a courtesy translation. The Portuguese version is the legally binding text and prevails in case of any difference.
Document under legal review. Values in square brackets may still change.
Last updated: Oct 18, 2026
This policy explains how DP HOST (DP TECNOLOGIA LTDA, CNPJ (Brazilian company registration number) 50.591.161/0001-75, Rua Zildênia, 1166, Sala 01, Amador, Eusébio/CE, CEP 61769-180, Ceará, Brazil) processes personal data, in accordance with Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018).
1. Controller and contact (data protection officer)
- Controller: DP HOST.
- Contact of the data protection officer (DPO) for privacy matters: Dennys Pontes — contato@dphost.com.br.
2. Data we collect
| Category | Examples | When |
|---|---|---|
| Registration | name, CPF/CNPJ (Brazilian individual or company tax ID), email, phone number, address | when you create your account and order a service |
| Payment | invoice history, payment method and payment status (full card details are held by the payment processor, not by us) | when you pay |
| Use of the service | IP address, date and time of access, client area login records, technical VPS data (assigned IP, plan, status) | when you use the service |
| Support | ticket and email messages | when you contact us |
| Website browsing | cookies and usage data | when you visit the website |
| Virtual assistant (AI chat) | the questions you type in the chat, the answers generated, and your IP address (used only to limit usage and prevent abuse) | when you use the assistant on the website |
We do not access the content of the Customer's VPS, except in the situations set out in the Terms of Service.
3. What we use it for (and the legal basis)
| Purpose | Legal basis (LGPD, Art. 7) |
|---|---|
| Providing the service, creating and managing VPS, billing and issuing tax invoices (nota fiscal) | performance of a contract; compliance with a legal obligation |
| Support and communication about the service (invoice notices, maintenance) | performance of a contract |
| Security, prevention of fraud and abuse | legitimate interest; legal obligation |
| Retention of access logs | legal obligation (Brazilian Internet Civil Rights Framework, Marco Civil da Internet) |
| Answering questions through the virtual assistant and recommending a suitable plan, at the visitor's request | legitimate interest |
| Marketing and news (only if you authorize it) | consent (can be withdrawn at any time) |
4. Who we share it with
- Infrastructure provider (data centers in São Paulo, Brazil, and in Miami, USA), to operate the VPS.
- Payment processors and financial institutions.
- Email platforms, website hosting and support tools.
- Artificial intelligence provider for the virtual assistant: Anthropic (Claude API), which receives the chat messages in order to generate the answers. See section 5.
- Cloudflare: sits in front of the website, the virtual assistant and the client area, to protect them against attacks and deliver content faster. For this reason, all traffic to these addresses passes through it, including what you type in forms (such as registration, login, tickets and chat messages), as well as your IP address and the pages requested. It may process this data outside Brazil.
- Google Fonts: only in the virtual office (dphost.com.br/escritorio), to load the page fonts; it receives the IP address of anyone who opens the office.
- Google reCAPTCHA: protects some client area forms (registration, contact, opening a ticket, password recovery, domain search and order checkout) against bots. To do so, Google receives the IP address, browser and device data, and information about how the page is used, and may set its own cookie. Most of the time nothing appears; if Google is suspicious, it shows a challenge, with an audio option. Google's Privacy Policy and Terms of Service apply. Google may process this data outside Brazil.
- Accountant/tax invoicing.
- Authorities, when there is a legal order.
We do not sell personal data.
5. Virtual assistant powered by artificial intelligence
The website offers a virtual assistant (the “Ask a question” button) that answers questions about DP HOST's plans and rules and can recommend a plan. Using it is optional.
The characters in the virtual office (dphost.com.br/escritorio, closed to the public for now), when it is open, also chat with visitors using artificial intelligence and follow the same rules below. In their case, the messages are processed by Google (Gemini API, free tier): Google states that it may use the content of these conversations to improve its products, which may include review by humans (terms at ai.google.dev/gemini-api/terms). They only know the office's public information, and the conversation is not stored on our server: it stays only in your browser while the page is open.
- How it works: the answers are generated automatically by artificial intelligence, based on the website content and these policies. They may contain errors and do not replace the official documents or support by email or ticket. The assistant does not make decisions about you, your account or your contract.
- Who processes the messages: Anthropic (Claude API), which receives each question in order to generate the answer. Processing may take place outside Brazil, including in the United States. On their way to our server, the messages also pass through Cloudflare (section 4).
- Use by Anthropic: we use Anthropic's paid service, which states that it does not use the content of conversations to train its models. Anthropic may retain the data for a limited period, for example for security and abuse prevention, in accordance with its commercial terms and privacy policy.
- Do not enter personal data in the chat (such as your CPF, documents, passwords, card or health data). As an extra safeguard, messages that appear to contain a CPF, CNPJ, email address, phone number or card number are not sent to the AI. For matters about your account, use the email contato@dphost.com.br or a ticket.
- How long: on our server, the conversation is kept only in memory and is deleted after up to 1 hour without use or when the service restarts; we do not save it to a file. At Anthropic, for the period set out in its terms.
6. International transfer
When the Customer chooses the Miami (USA) data center, the VPS and the data stored on it are located in the United States; in the São Paulo data center, they are located in Brazil. The Customer makes this choice when placing the order. Virtual assistant messages are processed by the artificial intelligence provider, which may process them in the United States (section 5). Other providers, such as Cloudflare and Google reCAPTCHA (section 4), may also process data outside Brazil. In these cases, we will adopt the safeguards provided for in the LGPD (Art. 33).
7. How long we keep it
- Registration and financial data: for as long as the contract lasts and for the period required by tax/accounting law (as a rule, [5] years).
- Access logs: for the period required by law.
- Marketing data: until consent is withdrawn.
- Virtual assistant conversations: see section 5.
8. Your rights (Art. 18 of the LGPD)
You may request: confirmation of the processing; access; correction; anonymization, blocking or deletion of unnecessary data; portability; information about sharing; revocation of consent; and objection to irregular processing. Send your request to contato@dphost.com.br. We respond within [15] days. You may also file a complaint with the Brazilian National Data Protection Authority (ANPD).
9. Security
We use encryption (HTTPS), access control, a firewall and other technical and organizational measures. No system is 100% secure. In the event of a relevant incident, we will notify the data subjects and the ANPD as required by law.
10. Cookies
The website uses essential cookies so that it can work. Analytics or marketing cookies, if they are ever used, depend on your consent, requested through a cookie notice on your first visit, where you can choose Accept or Essential only. To review your choice, clear the website's cookies and site data in your browser. To count website visits, we use Cloudflare Web Analytics, which does not use cookies and does not track individual visitors; it does not run in the client area. In the client area, Google reCAPTCHA may set its own cookie, which is necessary for protection against bots (section 4).
11. Children and adolescents
The service is intended for people aged 18 or over or legally emancipated minors. We do not knowingly collect data from minors.
12. Changes
We may update this policy. Relevant changes will be announced by email or in the client area.