Privacy Policy

1. Controller

Suntinus Consultoria em Tecnologia da Informação Ltda (CNPJ 66.540.542/0001-65) is the controller of personal data processed on holding sites and services and, where applicable, for ParcAI, GapRadar, and Eventoando.

Data Protection Officer / contact: contato@suntinus.com.br

Product-specific policies (when they exist) complement this document. ParcAI: parcai.com.br/privacy. Hub: /legal.

2. Data we collect

• Account and contact: email, name, login identifiers (magic link, OAuth).
• Service use: technical logs, IP, device, pages/actions, product metrics.
• User content: messages, files, and data you send to products (e.g. AI chat), per each service’s purpose.
• Payments: processed by Stripe; Suntinus does not store full card numbers. We may receive email, subscription status, and customer/invoice IDs.

3. Purposes and legal bases

• Perform the contract / provide the service (LGPD art. 7, V).
• Legal and tax obligations, including NF issuance when required (art. 7, II).
• Legitimate interest in security, fraud prevention, and product improvement, with impact assessment when needed (art. 7, IX).
• Consent, when required (e.g. optional marketing).

4. Sharing

We may share data with:

• Infrastructure and AI providers (hosting, email, LLM), under contract;
• Stripe (payments);
• Accounting / Contabilizei and digital signature tools (e-cert) for NF;
• Authorities, when legally required.

We do not sell personal data.

5. International transfers

Some processors may be outside Brazil. We use LGPD-compatible safeguards (contractual clauses, adequate vendor policies).

6. Retention and security

We keep data as long as needed for the purposes and legal duties. We apply reasonable technical and organizational measures (access control, encryption in transit, segregation). No system is 100% secure; report incidents to contato@suntinus.com.br.

7. Your rights (LGPD)

You may request confirmation of processing, access, correction, anonymization, portability, deletion (when applicable), information on sharing, and withdrawal of consent. Requests: contato@suntinus.com.br. You may also contact ANPD.

8. Cookies and analytics

Sites may use essential cookies and, when applicable, analytics (e.g. PostHog / Cloudflare). You can control cookies in the browser; blocking essentials may affect login.

9. Children

Services are not directed at under-18s without adequate parental consent. If we find an improper account, we may remove it.

10. Changes

This policy may be updated. The date at the top is the current version. Material changes will be communicated via product channels or email.