TThe Lost Prayer

Legal

Privacy Policy

Last updated

This Privacy Policy explains what information we collect when you purchase The Lost Prayer and use the members area (the “Service”), how we use it, who we share it with and the choices you have. We keep it deliberately short: we collect only what is needed to deliver what you bought and to keep your account safe.

1. Who We Are

The Service is operated by Nexa Digital LTDA (CNPJ 57.542.168/0001-46) (“The Lost Prayer”, “we”, “us” or “our”), Rua Antonio Basil Schroeder, 37, Barreiros, São José, SC, 88110-400, Brazil. We are the data controller for the personal information described in this policy. You can reach us at thelostprayer.support@gmail.com.

2. What We Collect

  • E-mail address and name — sent to us by our checkout (KashPay) when your purchase is confirmed. Your e-mail address is your username and the address we deliver your access details to.
  • Purchase details — the order reference, product, amount, currency and payment status (paid, refunded or charged back) as reported by our checkout and our payment processor (Stripe). We never receive or store your full payment card number.
  • Account data — a securely hashed version of your password (we cannot read it), your account status and the dates you created your account and last signed in.
  • Reading progress — which items you have opened and marked as completed, and when, so the Service can show you where you left off.
  • Technical and security data — your IP address, browser type (user-agent) and timestamps, recorded in security logs when you sign in, request a password reset or download a file.
  • Support correspondence — anything you choose to send us when you write to thelostprayer.support@gmail.com, and our replies. Routine questions are read and answered with the help of an AI service provider (see Sections 3 and 8).

3. Why We Use It

We use your information to:

  • create your account and deliver the content you purchased;
  • send you transactional e-mails: your access details, password resets and important notices about your account;
  • remember your reading progress;
  • protect the Service and its content — for example by rate-limiting sign-in attempts, detecting shared or misused accounts and stamping downloadable PDFs with the purchaser’s e-mail address as a watermark;
  • answer your support requests. Routine questions about signing in, passwords and using the members area may be answered by an automated AI assistant that works only from your message, earlier messages in the same conversation and the account linked to the address you wrote from. Its replies are signed by our support team and do not carry a separate notice each time. If you ask whether you are writing to a person, a person answers, and you can always ask for a person by replying. Questions about payments are answered by our automated assistant under fixed rules set by our team; refunds and cancellations are decided by our team, never by the assistant.
  • comply with legal obligations and enforce our Terms of Service.

We rely on the performance of our contract with you, our legitimate interest in keeping the Service secure, and our legal obligations as the bases for this processing. We do not send marketing e-mails from the Service and do not use your information for advertising.

4. E-mail Delivery

Transactional e-mails are sent through a third-party e-mail delivery provider acting on our behalf. That provider processes your e-mail address, name and the content of the message solely to deliver it, and may retain delivery logs (such as whether a message bounced) for a limited period.

5. How to Unsubscribe

We only e-mail you about your purchase and your account — your access details, password resets and important notices about the Service. We do not send newsletters or marketing e-mails.

To stop receiving e-mails from us, write to thelostprayer.support@gmail.com from the address you want removed, with “Unsubscribe” in the subject line. We will stop e-mailing that address within 10 business days, usually much sooner, and will not e-mail it again except for a message you ask for yourself (such as a password reset) or one the law requires. Unsubscribing does not cancel your purchase or your access: you can keep signing in.

Payment receipts and other messages about the payment itself may be sent by our checkout (KashPay) or our payment processor (Stripe) on our behalf; to stop those, write to us at the address above. To delete your account and your personal information altogether, see Section 9.

6. Cookies

The Service sets a single strictly-necessary session cookie that keeps you signed in. It contains no personal information beyond an internal account reference, is marked HTTP-only and secure, and expires after a limited period or when you sign out. We do not use advertising, analytics or tracking cookies, and we do not allow third parties to set cookies through the Service. Because this cookie is essential for the Service to work, it does not require your consent; blocking it will prevent you from signing in.

7. Retention

We keep your account and purchase records for as long as your access is active, and afterwards for as long as needed to handle refunds, chargebacks, disputes and our bookkeeping and tax obligations. Security logs are kept for a limited period and then deleted or anonymised. If you ask us to delete your account (see Section 9), we remove your personal information except where we must keep it to meet a legal obligation.

Support e-mails and our replies are kept in our support mailbox for as long as we may need them to help you. The separate records our support assistant keeps — the text of your message, of our reply and any notes about it — are emptied after a limited period, and you can ask us to delete them, and the e-mails themselves, at any time (see Section 9).

8. Sharing

We never sell your personal information and we do not share it with advertisers. We share it only with service providers that help us run the Service, and only to the extent needed:

  • our checkout (KashPay) and payment processor (Stripe), which process your payment and tell us your purchase was completed;
  • the e-mail delivery provider that sends our transactional e-mails;
  • our AI provider (Anthropic), which processes the text of the support e-mails you send us, and the account details needed to answer them, solely to help us prepare our replies. Under its commercial terms it does not use this information to train its models and keeps it only for a limited period;
  • the hosting and database providers that store and serve the Service.

These providers are bound by contract to protect your information. We may also disclose information when required by law, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of assets (in which case we will notify you).

9. Your Rights

Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to ask for it to be deleted, to receive a copy in a portable format, or to object to or restrict certain processing. To exercise any of these rights, e-mail thelostprayer.support@gmail.com from the address linked to your account. We will respond within the time required by applicable law and may ask you to verify your identity first. Deleting your account ends your access to the content.

If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data-protection authority. If you are a California resident, the rights above cover the rights to know, delete and correct under the CCPA/CPRA; we do not sell or share personal information for cross-context behavioural advertising.

10. Children

The Service is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us at thelostprayer.support@gmail.com and we will delete it.

11. Security

We protect your information with measures appropriate to its sensitivity: passwords are stored only as salted hashes, connections are encrypted in transit (HTTPS), the session cookie is HTTP-only and secure, sign-in attempts are rate-limited, and access to our systems is restricted to the people who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we will notify you and any relevant authority as required by law if a breach affects your information.

12. International Transfers

We are based in Brazil and our service providers may process data in Brazil, the United States or other countries. Where required, we use appropriate safeguards such as standard contractual clauses to protect information transferred from other regions.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post any changes on this page and update the “Last updated” date above; if the changes are material we will make reasonable efforts to notify you by e-mail or through a notice inside the Service.

14. Contact

Questions or requests about this policy or your personal information can be sent to:

Nexa Digital LTDA (CNPJ 57.542.168/0001-46)
Rua Antonio Basil Schroeder, 37, Barreiros, São José, SC, 88110-400, Brazil
E-mail: thelostprayer.support@gmail.com