Privacy Policy
Guidelines on the collection, use, storage, sharing and protection of personal data when using the Flavry platform, in compliance with Brazil's General Data Protection Law (LGPD).
1. Data controller
The controller of the personal data processed in connection with this platform is Flavry Tecnologia Ltda, registered under CNPJ 65.105.673/0001-51.
This policy describes how we process the personal data of customers, users and visitors under Brazil's General Data Protection Law (Law No. 13,709/2018).
2. Data we collect
We may collect data provided directly by the user, data generated during use of the platform and technical data required for security and operations.
- Registration data: name, email, phone number and company details.
- Access data: IP address, device information, authentication logs and session logs.
- Operational data: information about products, inventory, orders, sales and customers entered by the user.
- Billing and subscription data: subscribed plan, billing history and payment status.
3. Purposes and legal bases (LGPD)
We process personal data to perform the contracted services, comply with legal obligations, prevent fraud, improve the platform and support customers.
- Performance of a contract and related pre-contractual procedures.
- Compliance with a legal or regulatory obligation.
- Regular exercise of rights in administrative, arbitration or judicial proceedings.
- Legitimate interest for security, fraud prevention and product improvement, subject to impact and proportionality assessment.
- Consent, when required by applicable law.
4. Data sharing
Data may be shared with operators and partners that are essential to providing the service, always subject to security and confidentiality requirements.
We do not sell personal data.
- Infrastructure and hosting providers.
- Payment and billing processors.
- Authentication, support and communication tools.
- Public authorities, when disclosure is legally required.
5. Storage and retention
Data is stored in environments protected by technical and organizational controls compatible with market standards.
We keep data only for as long as necessary to fulfill the purposes described here, while also observing legal, regulatory and rights-defense requirements.
6. Data subject rights
Under the LGPD, data subjects may request confirmation of processing, access, correction, anonymization, portability, deletion, information about sharing and review of automated decisions, when applicable.
Requests will be assessed in accordance with legal requirements, deadlines and any applicable regulatory limitations.
8. Information security
We adopt administrative and technical measures to protect personal data against unauthorized access, loss, alteration, destruction or improper processing.
No system is completely immune to risk, but we continuously improve our controls and monitoring.
9. International data transfers
International data transfers may occur when technology or infrastructure providers are located outside Brazil.
In such cases, we adopt contractual safeguards and mechanisms compatible with applicable law to ensure an adequate level of protection.
10. Changes to this policy
This Privacy Policy may be updated periodically to reflect legal, regulatory and operational changes.
The date of the latest update will always be indicated on this page.
11. Privacy contact
To exercise your rights or handle privacy and data protection matters, contact us at:
Email: [email protected]