Privacy Policy

1. Data We Collect

We collect the following types of personal data:

• Identification data: name, email, phone, tax ID
• Access data: IP address, browser, device, access date and time
• Payment data: credit card information (processed by PCI-DSS certified third parties)
• Lead data: information collected for our clients through landing pages and forms
• Communication data: messages exchanged via chat, email or support

2. Legal Basis and Purpose of Processing

We process your data based on the following legal grounds:

• Contract execution: to provide contracted services
• Consent: for sending marketing communications (when authorized)
• Legitimate interest: for service improvements and fraud prevention
• Legal obligation: for compliance with tax and regulatory obligations

3. Data Sharing

Your data may be shared with:

• Payment processors (Stripe, PayPal) for financial transactions
• Infrastructure providers (AWS, Google Cloud) for hosting
• Analytics tools (Google Analytics) for usage metrics
• Competent authorities when required by law

We do not sell your personal data to third parties.

4. International Data Transfer

Some of our service providers are located outside the European Economic Area (EEA). In such cases, we ensure that the transfer occurs to countries with an adequate level of protection as determined by the European Commission or through approved standard contractual clauses (SCCs).

5. Data Retention

We keep your data for the period necessary for:

• Account data: while your account is active
• Transaction data: 5 years for tax purposes
• Lead data: as defined in contract with our clients
• Access logs: 6 months for security and compliance purposes

6. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access your personal data and obtain information about processing
• Rectification of inaccurate or incomplete personal data
• Erasure of your personal data ("right to be forgotten")
• Restriction of processing in certain circumstances
• Data portability in a structured, commonly used format
• Object to processing based on legitimate interests
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with a supervisory authority

7. Data Security

We implement technical and organizational measures to protect your data:

• SSL/TLS encryption in all communications
• Passwords stored with bcrypt hash
• Role-based access control
• Continuous security monitoring
• Regular backups and recovery plan

8. Cookies and Similar Technologies

We use cookies to improve your experience. You can manage your cookie preferences in your browser settings. Essential cookies are necessary for the site to function.

9. Data Protection Officer (DPO)

To exercise your rights or clarify questions about data processing, contact our Data Protection Officer:

Email: privacy@mais2digital.com.br

10. Changes to this Policy

This policy may be updated periodically. We will notify you of significant changes by email or notice on our website.