Privacy Policy

Data Controller

Fefade is responsible for the processing of personal data. For questions, requests, or matters related to privacy and data protection, please contact us through the channels provided on this page.

Legal basis for data processing

We process personal data based on the legal grounds established by the LGPD, according to the purpose and circumstances of the processing. These grounds may include the user's consent, performance of a contract or related procedures, compliance with legal or regulatory obligations, the exercise of legal rights, and legitimate interests, while respecting the rights and fundamental freedoms of data subjects.

What personal data do we collect?

The data we collect may vary depending on the features and services used by the user.

• Information provided by the user: name, email address, phone number, and other information voluntarily provided by the user.
• Account and authentication data: information required to create, manage, and authenticate an account, including user identifiers and information related to login sessions.
• Browsing data: IP address, date and time of access, pages or screens accessed, browser type and version, and technical information related to the connection.
• Device data: device type, operating system, technical information, and identifiers necessary for the operation, security, and diagnosis of the services.
• Usage data: interactions with features, resources used, performance information, and error logs.
• Support data: information voluntarily provided by the user when contacting us for assistance or support.

Why do we use your data?

• To create, maintain, manage, and authenticate user accounts.
• To provide the features, functionality, and services requested by the user.
• To provide customer support and respond to user requests.
• To send communications related to the operation, security, changes, and use of our services.
• To analyze service usage, fix problems, improve performance, and develop new features.
• To detect, prevent, and investigate fraud, abuse, unauthorized access, and other activities that may compromise security.
• To comply with legal and regulatory obligations and to exercise or defend legal rights in administrative or judicial proceedings.

Cookies and similar technologies

We may use cookies, local storage, and similar technologies to maintain user sessions, store preferences, ensure the proper operation of our services, improve security, analyze feature usage, and improve application performance.

• Essential cookies and technologies may be used when necessary for the operation of our services.
• We may use storage technologies to maintain user preferences and settings.
• When applicable, we may use analytics technologies to understand service usage and performance.

Data sharing

Fefade does not sell users' personal data. Data may be shared when necessary for the operation, maintenance, hosting, storage, authentication, security, support, and provision of our services, as well as to comply with legal obligations or requests from competent authorities.

We may use technology providers and service providers that process certain data on our behalf according to their respective functions and agreements. These providers may include hosting, storage, authentication, infrastructure, security, and other services necessary for the operation of the application.

International data transfers

Some technology providers used to operate our services may be located outside Brazil or may use infrastructure located in other countries. When personal data is transferred internationally, we will adopt the measures and safeguards required by applicable law, including the provisions of the LGPD.

Data retention period

We retain personal data for as long as necessary to fulfill the purposes described in this policy, while the account remains active, or while there is a legitimate purpose for retaining it. After this period, data may be deleted, anonymized, or retained when necessary to comply with legal obligations, exercise legal rights, prevent fraud, or fulfill another legally permitted purpose.

Information security

We adopt technical and administrative measures designed to protect personal data against unauthorized access, destruction, loss, alteration, disclosure, or improper processing. These measures may include access controls, authentication mechanisms, infrastructure protection, technical logs, and other safeguards appropriate to the nature of the data and services. Despite these measures, no system connected to the internet can guarantee absolute security.

Account and data deletion

When available, users may request account deletion through the mechanisms provided in the application. Deletion may result in the removal of data associated with the account, except for information that must be retained to comply with legal obligations, prevent fraud, maintain security, exercise legal rights, or fulfill other purposes permitted by law. If the application does not provide a direct deletion option, users may request deletion through the contact channel indicated in this policy.

Children's and minors' data

Our services are not intentionally directed at children or individuals who do not have the legal capacity to use certain services without the participation of their legal guardians when required by law. If we identify that personal data has been collected improperly, we may take steps to delete such information, subject to applicable legal obligations.

Your rights under the LGPD

• Confirmation of whether your personal data is being processed.
• Access to your personal data.
• Correction of incomplete, inaccurate, or outdated data.
• Anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data.
• Data portability, subject to applicable regulations.
• Deletion of personal data processed based on consent, when applicable.
• Information about public or private entities with which your data has been shared.
• Withdrawal of consent when processing is based on consent.
• Objection to processing in circumstances permitted by applicable law.

To exercise your rights, you may contact us through the channel indicated in this policy. We may request additional information to verify the identity of the requester and protect personal data.

Data Protection Officer (DPO)

For questions, requests, or to exercise your rights regarding the processing of personal data, please contact our Data Protection Officer (DPO):

Applicable law

This Privacy Policy is governed by Brazilian law, particularly Law No. 13,709/2018, the General Data Protection Law (LGPD).

Policy updates

This Privacy Policy may be updated periodically to reflect changes to our services, data processing practices, or applicable legislation. When relevant changes are made, we may notify users through the channels available in the service. The latest version will always be available on this page.