This policy explains how we collect, use, store, protect and share personal data and sensitive information in the context of digital services, IMEI, Server, Remote, File, credit wallet, payments, API and physical sales.
Personal data and sensitive data processed
We may process registration, authentication, contact, document, address, IP, browser agent, session logs, order history, uploaded files, technical identifiers such as IMEI/serial, payment data, receipts, support records and data required for API integrations. Some information requires enhanced care because it may involve identification, security, fraud prevention, operational validation or technical service execution.
Legal bases and purposes
Processing takes place for contract performance, legal or regulatory obligations, fraud prevention, credit protection, security, legitimate operational interest and, when required, consent. Data is used to create accounts, validate access, process digital/physical orders, release balance, prevent abuse, provide support, audit transactions and operate API integrations.
Data protection compliance
The platform follows data protection principles such as purpose limitation, adequacy, necessity, transparency, security, prevention and accountability. The data subject may request confirmation of processing, access, correction, anonymization, blocking, deletion, portability when technically applicable and information about data sharing.
Sharing with providers, gateways and APIs
Data may be shared with digital service providers, payment gateways, anti-fraud systems, carriers, support tools, hosting, email providers, third-party APIs and authorities when legally required. Sharing is limited to what is necessary to process orders, ensure security, confirm payments, deliver products/services or comply with legal duties.
Security, logs and abuse prevention
We may record IP, approximate location, device, login attempts, password changes, 2FA, API keys, webhooks, wallet events and administrative actions. These records help detect unauthorized access, fraud, abusive automation, API misuse and operational disputes.
Retention and deletion
Data is retained for the time required to perform contracts, audits, security, legal obligations, defense of rights, financial history and order traceability. When no operational or legal need remains, data may be deleted, anonymized or blocked according to technical capacity and applicable duties.
Cookies and preferences
We use cookies and similar technologies for login, sessions, language, currency, preferences, security, abuse prevention, statistics and experience improvements. Customers may manage preferences when controls are available, without affecting essential authentication and security cookies.
Data subject rights
The data subject may request access, correction, updates, review of consents, information about use, export when applicable and deletion when there is no retention obligation. Requests may require identity validation to prevent improper data exposure.
Support channels
Requests related to this policy must be submitted through the platform’s official channels, preferably from the authenticated customer panel. When applicable, include the order number, account email, payment identification, screenshots, files or technical details needed for review.