LGPD Compliant - Law 13,709/2018

Privacy Policy

Our commitment to protecting your personal data and transparency in all our operations

Updated on January 19, 2026

Risk-based protection

Technical and administrative measures aligned with security best practices.

Guaranteed Rights

Access, correction, and portability guaranteed

Transparency

You always know how we use your data

LGPD Compliant

Compliance with Law 13,709/2018

1. Controller Identification

Vindula Internet Ltda.

CNPJ: 20.486.227/0001-04

Address: Avenida Paulista, 491

Bela Vista - São Paulo/SP

CEP: 01.311-909

Email: privacy@vindula.com.br

Phone: (11) 2626-8537

DPO: dpo@vindula.com.br

WhatsApp: (11) 94785-4875

2. Data Collected and Purposes

Registration Data

Full name, business email, CPF, phone, job title, and company

Purpose: Account creation and management

Legal basis: Contract performance (Art. 7, V, LGPD)

Browsing Data

IP address, access logs, cookies, and session data

Purpose: Security and experience improvement

Legal basis: Legitimate interest (Art. 7, IX, LGPD)

Communication Data

Messages, support tickets, and service history

Purpose: Support and service delivery

Legal basis: Contract performance (Art. 7, V, LGPD)

System Usage Data

Usage metrics, preferences, and personalized settings

Purpose: Personalization and continuous improvement

Legal basis: Contract performance (Art. 7, V) and/or legitimate interest (Art. 7, IX), depending on the platform usage context.

3. Your Rights (Art. 18 LGPD)

LGPD grants you several rights regarding your personal data. You may exercise any of them by contacting our DPO.

Confirmation

Know whether we process your data

Access

Obtain a copy of your data

Correction

Correct inaccurate data

Deletion

Delete unnecessary data

Portability

Transfer data to another service

Revocation

Withdraw consent given

4. Data Sharing

When we share your data:

  • With infrastructure partners: AWS, Google Cloud, Cloudflare (hosting and security)
  • By legal obligation: When required by law or court order
  • With your consent: For specific integrations you authorize

Important: We never sell your data to third parties.

5. Security and Protection

Technical Measures

  • Encryption and access controls appropriate to risk
  • Authentication and credential management per internal policies
  • Logical segregation of environments and data
  • Monitoring and incident detection
  • Backup and recovery based on criticality

Organizational Measures

  • Training and awareness on privacy and security
  • Information security and data governance policies
  • Incident management and continuity processes
  • Contracts with data protection clauses
  • Impact assessments when applicable

6. Data Retention and Deletion

Retention Period

We keep your data for the period necessary to fulfill processing purposes and legal, contractual, and regulatory obligations, and we delete or anonymize it when no longer needed.

Data Deletion

You can request deletion of your data at any time via dpo@vindula.com.br. We will delete your data except when there is a legal obligation to keep it.

Note: Financial and tax data are kept for 5 years under tax law.

7. Cookie Policy

We use cookies to improve your experience, analyze traffic, and personalize content.

Essential Cookies: Necessary for the website to function
Analytics Cookies: Help us understand how visitors use the site
Marketing Cookies: We currently do not use marketing cookies. If we do, consent will be requested beforehand.

8. Contact and Rights Requests

Data Protection Officer (DPO)

E-mail: dpo@vindula.com.br

LGPD Portal: vindula.com.br/lgpd

Address: Avenida Paulista, 491 - Bela Vista, São Paulo/SP

National Data Protection Authority

If you have questions or complaints, you can also contact ANPD:

www.gov.br/anpd

Vindula Internet Ltda.

Last updated: January 19, 2026

Version: 2.0

LGPD Compliant