1. Who controls the data
C S Cabral Tech Solutions (trade name CSC Tech), a sole proprietorship (empresário individual), CNPJ 53.470.541/0001-40, Rua Quintino Bocaiúva, 625, Sala 04, Torre, João Pessoa/PB, CEP 58.040-320, Brasil. Contact for privacy matters and data-subject requests: admin@csctech.com. We are a small-scale processing agent under Brazil's LGPD and, as such, exempt from appointing a data protection officer (ANPD Resolution 2/2022); the address above serves that role. If you are in the EU or UK, the same address handles GDPR requests.
2. What data and why
- Author name and e-mail: to identify the project, send the access link and the order confirmation. Legal basis: performance of a contract.
- Text, images and uploaded files: to generate the preview, the PDF and the sales page. Legal basis: performance of a contract. Your text may contain sensitive data (health, religion, among others) about you or others: we process it only to provide the service, do not read it for any other purpose and never use it to train AI systems, ours or anyone else's.
- Payment data: for international purchases, Dodo Payments collects your card and billing details under its own privacy policy; we receive only your name, e-mail, the transaction id, amount, date and status. For Brazilian purchases, Asaas processes the card; card numbers are never stored by us. Legal basis: performance of a contract and legal obligation (tax records).
- Contact e-mail and name on the sales page: to identify the author as the seller on the published page. Legal basis: performance of a contract and legal obligation.
- Technical logs (IP address, time, browser) on requests to the site: security, fraud prevention and the Brazilian Internet Act (access logs kept for 6 months). Legal basis: legitimate interest and legal obligation.
- Reports: the reported address, reason, description and the reporter's e-mail, to review and answer. Legal basis: legitimate interest.
We send no marketing e-mail. If we ever do, it will be with your consent and a one-click unsubscribe.
3. Who processes on our behalf
- Vercel (USA): hosting and storage of projects, images and PDFs. Files are stored in a Brazilian region; the platform itself runs on servers abroad.
- Resend (USA): transactional e-mail.
- Dodo Payments: international payments, as merchant of record, under its own privacy policy.
- Asaas (Brazil): payments in Brazilian reais.
This involves international transfers of data to the processors above, made under contract and the safeguards they provide, as required by the LGPD and ANPD Resolution 19/2024. We never sell or share data with third parties for their own purposes.
4. How long we keep it
- Project (text, images, PDFs): for as long as the project exists. Today deletion happens on request, by e-mail, within 10 days. There is no automatic deletion by age; if that changes, this page will say so.
- Payment records: 5 years, for tax and legal-defense purposes.
- Access logs: 6 months (Brazilian Internet Act).
- Reports: as long as needed for the review and the defense of rights.
5. Your rights
At any time you may ask for: confirmation that we process your data; access; correction; anonymization, blocking or deletion of what is unnecessary; portability; information on who we share with; and review of automated decisions (we make none with legal effects on you). Write to admin@csctech.com; we answer within 15 days. You may also complain to Brazil's data protection authority (ANPD) or, in the EU/UK, to your local authority.
6. Cookies
We only use your browser's local storage to remember, on your own device, the projects you created. We use no tracking cookies, ad pixels or analytics tools as of this date. If that changes, we will ask for consent first.
7. Security
Encrypted connections (HTTPS) across the site; files kept in private storage reachable only through the project link; card data sent straight to the payment processor. No system is infallible: if an incident affects your data, we will notify you and the authorities as the law requires.
8. Changes
Material changes get a new date at the top of this page and, for paid projects, an e-mail notice. See also the Terms of Use and the Refund Policy.