Privacy Policy — Dark Energies

01. Company Entity & Scope

This Privacy Policy sets forth how Dark Energies LLC ("Dark Energies", "Company", "we", "us", or "our"), a legal entity registered in the United States, collects, utilizes, stores, and safeguards personal information obtained through our official website (darkenergies.in), direct communications, and commercial client engagements.

Dark Energies specializes in high-velocity professional digital engineering services, including Mobile App Development, Custom Software Development, Website Development, and Google Ads Management. This policy applies to prospective clients, active clients, business partners, and website visitors worldwide.

US Business Registration Notice

Dark Energies is organized and registered under the corporate laws of the United States. We adhere to federal commercial standards, applicable US state privacy acts (including the California Consumer Privacy Act / CCPA as amended by the CPRA), and international data protection regulations (including GDPR).

02. Information We Collect

We collect only the minimum required information necessary to evaluate project briefs, execute technical contracts, process commercial payments, and manage performance advertising campaigns:

Contact & Identification Data: Full name, professional email address, corporate telephone or WhatsApp number, company name, and jurisdiction.
Project Brief & Technical Specifications: Project scopes, repository links, technical architectural preferences, budget targets, timeline requirements, and integration specs submitted via our Project Estimator or contact forms.
Financial & Invoicing Records: Company billing address, Tax ID / EIN, and transaction records. Note: Direct payment processing is executed through secure, PCI-DSS compliant financial banking institutions and processors (such as Mercury Bank and Stripe). Dark Energies never stores raw credit card numbers or sensitive banking credentials on our local servers.
Advertising & Analytics Data: Campaign performance metrics, Google Ads account access tokens (delegated via official OAuth permissions with zero password sharing), conversion IDs, and GA4 telemetry for clients utilizing our Google Ads Management service.
Automated Device & Usage Logs: IP address, device type, browser user-agent, operating system, referring URL, and interaction timestamps.

03. Business & Commercial Purpose of Processing

Dark Energies processes personal and business data strictly under lawful business bases:

Contract Execution: Scoping, engineering, testing, deploying, and maintaining custom mobile apps, enterprise software, and websites under formal Statements of Work (SOW).
Campaign Optimization: Managing and optimizing Google Ads campaigns, keyword bidding strategies, conversion tracking, and ROAS performance analytics.
Commercial Operations & Billing: Issuing formal invoices, processing ACH/wire payments, managing bank account reconciliations, and fulfilling US accounting obligations.
Client Communication: Providing sprint status reports, technical architectural consultations, customer support, and milestone deliverables.
Security & Abuse Prevention: Protecting our web infrastructure and client applications against unauthorized intrusion, denial of service, and fraudulent activity.

04. Zero Sale & Non-Disclosure Guarantee

We Do Not Sell Personal Information

Dark Energies LLC has never sold, rented, leased, or monetized personal information, client source code, or business data to third-party data brokers or advertisers, and will never do so under any circumstances.

All codebases, proprietary business logic, client specifications, and digital assets shared during engineering or advertising management remain the confidential property of the respective client, protected under our binding Non-Disclosure Agreements (NDAs).

05. Subprocessors & Cloud Infrastructure

To provide enterprise-grade delivery, Dark Energies engages vetted third-party service providers and cloud infrastructure vendors subject to strict data processing agreements:

Cloud Hosting & Serverless Edge: Amazon Web Services (AWS), Google Cloud Platform (GCP), and Cloudflare for edge routing and secure server hosting.
Fintech & Banking Partners: Mercury Technologies, Inc. (business banking infrastructure) and Stripe, Inc. (merchant processing) for secure domestic and international wire/ACH processing.
Marketing & Attribution: Google LLC (Google Ads API, Google Tag Manager, Google Analytics 4) for client advertising campaigns under explicit delegated authority.
Code Collaboration & CI/CD: GitHub and GitLab for private version control and automated deployment pipelines.

06. Security Posture & Data Retention

We deploy multi-layered defense-in-depth security architectures:

Encryption Standards: Data in transit is enforced with TLS 1.3 encryption; static records and databases utilize AES-256 bit encryption.
Access Controls: Role-based access control (RBAC), multi-factor authentication (MFA) mandatory on all internal engineering tools, and principle of least privilege.
Retention Schedule: Project records and financial documentation are maintained for the statutory period required by US corporate and tax regulations (typically 7 years). Technical staging data, transient test databases, and temporary server logs are purged upon milestone acceptance.

07. Your Legal Privacy Rights

Depending on your jurisdiction (including California CCPA/CPRA, Virginia VCDPA, Colorado CPA, and European Union GDPR), you possess the following rights:

Right to Know & Access: You may request disclosure of the specific categories and pieces of personal information collected about you.
Right to Rectification: You may request the correction of inaccurate or incomplete records.
Right to Erasure / Deletion: You may request the deletion of your personal data, subject to statutory US commercial and financial record-retention requirements.
Right to Data Portability: You may request an export of your information in a structured, machine-readable format.
Non-Discrimination: We will never discriminate against you, alter pricing, or degrade service quality for exercising your statutory privacy rights.

To exercise any privacy right, email our Data Compliance Desk at support@darkenergies.in. Requests are authenticated and responded to within 30 days.

08. Cookies & Telemetry

Our website uses strictly necessary cookies to ensure secure session operation and minimal anonymous analytical cookies (Google Analytics 4) to monitor page response times and navigation flows. You may disable cookies in your browser settings without impairing your ability to browse our services or contact our engineering team.

09. Contact Information & Data Compliance

If you have questions, regulatory inquiries, or wish to submit a privacy verification request, please reach our designated compliance officer directly: