Privacy Policy

1. Data We Collect

We collect different categories of data depending on use:

• Account data: name, email, phone, and company details provided at signup.
• Payment data: processed by Stripe; we do not store full card numbers.
• Usage data: pages visited, actions in the platform, logs, and IP address.
• Submitted content: information you add to the Service’s tools.

2. How and Why We Use Your Data

We process personal data for the following purposes, always under an LGPD legal basis:

• to provide, maintain, and improve the Service (performance of a contract);
• to process payments and manage subscriptions (performance of a contract);
• to send operational and support communications (contract / legitimate interest);
• to comply with legal and regulatory obligations (legal obligation);
• to send marketing communications, where authorized (consent).

3. Data Sharing

We do not sell personal data. We may share it with providers that support the operation of the Service (sub-processors), which process data under our instructions and applicable law, such as:

• Stripe – payment processing;
• infrastructure, hosting, and email providers;
• analytics and customer support tools.

4. Cookies and Tracking Technologies

We use cookies and similar technologies for authentication, security, remembering preferences, and measuring usage. You can manage cookies in your browser settings; disabling some of them may affect Service features.

5. Storage and Security

We adopt reasonable technical and administrative measures to protect data against unauthorized access, loss, or improper alteration. No system is entirely immune to risk, but we work continuously to mitigate it.

6. Data Retention

We retain personal data for as long as necessary to fulfill the purposes described and our legal obligations. Once the relationship ends, data may be anonymized or deleted, except where retention is required by law.

7. Your Rights as a Data Subject

Under the LGPD, you may at any time request:

• confirmation that processing exists and access to your data;
• correction of incomplete, inaccurate, or outdated data;
• anonymization, blocking, or deletion of unnecessary or non-compliant data;
• data portability to another provider;
• information about sharing and withdrawal of consent.

8. International Data Transfers

Some sub-processors may process data outside Brazil. In such cases, we adopt appropriate safeguards to ensure a level of protection compatible with the LGPD.

9. Data Protection Officer (DPO) and Contact

To exercise your rights or ask questions about data processing, contact our Data Protection Officer at privacidade@guessless.com.br.

10. Changes to This Policy

This Policy may be updated to reflect changes in the Service or the law. The current version will always be available on this page, with the date of the last update.