This policy explains how personal data is handled on the SeuSaaS website and in the customer area. The company identified above is the data controller: it determines the purposes and means of processing. This policy does not replace the consent choices presented while browsing.
1. Data we process
- Account and access: name, email, protected credentials, security verifications, sessions, and profile information you choose to provide.
- Purchase and delivery: purchase reference, payment email, product, amount, currency, payment status, and activation and download records.
- Support: name, email, messages, and information you send when contacting us, requesting support, or exercising your rights.
- Operation and security: IP address, browser and device information, access records, errors, and actions relevant to protecting accounts and the service.
- Website usage, when authorized: pages visited, traffic sources, general device characteristics, and events such as checkout initiation, confirmed payment, login, and activation. This data may contain pseudonymous browser and session identifiers; it is not necessarily anonymous.
We do not store full card numbers or card security codes. Payment details are handled directly by the payment processor. Avoid including sensitive data, passwords, or unnecessary information in support messages.
2. Purposes and legal bases
We process data to answer inquiries, process purchases, grant access, deliver the product, and provide support, based on performance of a contract or preliminary steps requested by you.
Records needed for tax, accounting, or other legal requirements are processed to comply with those obligations. We may also retain information needed to establish, exercise, or defend legal rights.
We use proportionate information to protect accounts, prevent fraud, and keep the service secure, based on legitimate interests and subject to necessity, transparency, and your rights. This basis does not replace the consent required for optional analytics.
Google Analytics 4 is activated only after your explicit consent. Refusing analytics does not prevent browsing, purchasing, or accessing your account. We do not use this integration for personalized advertising or sell your personal data.
3. Service providers and sharing
We share necessary data with providers supporting the operation: Vercel, for hosting and infrastructure; Neon, for the database; Resend, for transactional emails; Stripe, for payments; and Google Analytics 4, for usage measurement when authorized.
The payment processor may also process data for its own security, fraud prevention, and legal obligations under its terms. Data is shared with authorities when required by law or a valid order. Any corporate reorganization must preserve applicable data protection obligations.
When chat is available, we use Crisp to provide support. The service receives technical browser and connection information and the messages you send. If you are signed in, your name, email, internal identifier, and language may be associated with the chat session to provide support context. Chat works independently of analytics permission; we do not send marketing events or advertising segments to Crisp. Email support remains available. Conversations and related technical data are retained in Crisp for support and security under the needs described in this policy; cookie expiry does not determine when conversations are deleted.
4. International processing
Our providers may process data in other countries. International transfers are subject to Brazil's General Data Protection Law (LGPD) and applicable legal mechanisms, which may include contractual clauses and other safeguards. You may request information about transfers related to your use of the service through the contact on this page.
5. How long we retain data
We keep data for as long as needed for the stated purposes, considering the contractual relationship, pending requests, fraud prevention, legal obligations, and legal claims. Closing or disabling an account does not immediately erase all financial records, security records, or backups.
GA4 event and user data retention is configured to 14 months; new activity may reset the user retention period. This is separate from cookie expiry and does not apply in the same way to aggregate reports. Browser storage durations appear in the Cookie Policy.
6. Your rights
Where provided by the LGPD, you may request confirmation of processing, access and correction; anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data; portability under applicable regulations; information about sharing; and deletion of data processed with consent, subject to lawful retention exceptions.
You may also withdraw consent, obtain information about the option and consequences of not giving consent, object to unlawful processing, and request review of decisions based solely on automated processing that affect your interests, where applicable. You may submit a complaint to Brazil's National Data Protection Authority (ANPD) and consumer protection bodies.
7. Making a request
Email andrews.ribeiro.gomes@gmail.com with your request and the email associated with your account or purchase. This channel remains available without account access. We may request proportionate information to verify your identity and prevent disclosure to other people.
Requests are assessed and answered within applicable legal deadlines. Where available in the account, export or deletion options submit a request for handling; they do not automatically deliver data or erase it in full. If retention duties or another legal restriction apply, we will explain the reason and the scope of our response.
8. Cookies, security, and changes
You can review consent at any time through Privacy preferences in the footer. Withdrawal stops new analytics submissions but does not undo requests already sent or automatically erase previously collected data.
We apply technical and organizational protections, including access controls and credential protection. No system is risk-free; relevant incidents will be addressed and communicated as required by law.
The service is not directed at children. Contact us if you identify children's data submitted inappropriately. We may update this policy to reflect changes to the service or the law. The date above identifies the current version; material changes will be communicated through available channels, with renewed consent when required.