Privacy Policy

The data controller is [legal entity / Tax ID], headquartered at [address]. The data protection officer (DPO) can be contacted at [data protection officer email].

Depending on how the platform is used, we process:

• Registration and contact data: name, email, WhatsApp, country, profile type and messages sent.
• Identity attributes provided by the holder: image, voice, face, avatar and the like — which are personal data and may, depending on the case, constitute sensitive personal data (including biometric data).
• Usage and licensing data: authorizations, scopes, terms, territories and consent records (Identity License).
• Minimal technical browsing data necessary for the operation and security of the site.

Processing requires an appropriate legal basis under the LGPD, which may vary by operation: consent (in particular for identity attributes and sensitive/biometric data), performance of a contract and preliminary procedures, compliance with a legal obligation and legitimate interest, where applicable.

The purposes include: enabling identity registration and consent; organizing licensing and compensation; communicating with holders and companies; complying with legal obligations; and preventing fraud and misuse.

When processing is based on consent, it will be specific and highlighted, and may be revoked at any time through the indicated channels, without affecting the lawfulness of the processing carried out before revocation or the commercial uses already authorized and executed in good faith during the term of the authorization.

We may share data with:

• Licensed companies, strictly within the scope authorized by the holder.
• Partner lawyers and firms, when necessary for the provision of legal services.
• Processors and infrastructure providers (for example, hosting and database), under confidentiality and security obligations.
• Authorities, when required by law or by a competent order.

We adopt technical and organizational measures to protect the data. Authorizations are documented in consent records with integrity elements (for example, a hash) and an audit trail, so as to make each authorization traceable.

Because licenses may provide for use in different territories (for example, Brazil, the USA, Europe or worldwide), international data transfers may occur, always subject to the LGPD requirements for such operations.

Under art. 18 of the LGPD, you may request: confirmation that processing exists; access to the data; correction of incomplete, inaccurate or outdated data; anonymization, blocking or deletion of unnecessary data or data processed in noncompliance; portability; information about sharing; and revocation of consent. To exercise your rights, contact [data protection officer email].

We keep the data for as long as necessary for the stated purposes and to comply with legal and regulatory obligations. Once the purposes are fulfilled, the data is deleted or anonymized, except in cases of retention permitted by law.

The institutional site uses the minimum cookies necessary for its operation and security. The platform is not intended for minors without proper legal representation and authorization.

This Policy may be updated; the current version is always published on this page, with the date of the update. Questions about privacy: [data protection officer email].