# Privacy policy

> How Cartpy intends to handle personal data — in plain language, structured around Brazil's LGPD (Law No. 13,709/2018).

> **IMPORTANT**: This document is a draft — The text below is under legal review and is not yet the approved version of Cartpy's privacy policy. It describes the practice we are building, but it is not a final legal commitment. The approved version will be published on this same page with its own revision date. (Minuta / Draft revision of August 3, 2026)

- **Language**: en
- **Canonical public URL**: [https://cartpy.com/en/privacidade](https://cartpy.com/en/privacidade)
- **Corresponding llms.txt manifest**: [https://cartpy.com/en/llms.txt](https://cartpy.com/en/llms.txt)

## Data Collected / Dados Coletados

Cartpy processes only necessary data categories:

- **Producer Account Data**: Name, email, and authentication credentials to protect account access.
- **Company Data**: Business name, CNPJ/CPF, and tax address for legal identification and compliance.
- **Sales Operations**: Products, offers, order histories, and shipping details to execute physical sales journeys.
- **Store Buyer Data**: Customer names, contacts, and delivery addresses. Cartpy processes buyer data on behalf of the producer in the operator role defined by LGPD.
- **Payment Gateway Credentials**: API keys connected by the seller, stored with encryption and used solely for transaction routing.

## LGPD Legal Bases / Bases Legais da LGPD

Personal data processing relies on explicit LGPD legal grounds:

1. **Contract Execution**: Operating user accounts, checkout flows, orders, and physical deliveries.
2. **Legal & Regulatory Obligations**: Preserving tax records and transactional logs under Brazilian law.
3. **Legitimate Interest**: Fraud prevention, platform protection, and transaction security.
4. **Consent**: Optional communications and specific authorizations (revocable at any time).

## Payment Provider Sharing / Compartilhamento com Provedores

Data is shared exclusively with the seller's connected payment provider (Pagar.me, Mercado Pago, Asaas, PagBank, Stripe) to process transaction orders. Cartpy does not sell personal data or share data with third parties for advertising purposes.

## Rights of Data Subjects under LGPD / Direitos do Titular

Data subjects hold statutory rights under LGPD, including:

- Confirmation of data processing existence
- Access to maintained personal data
- Correction of incomplete, inaccurate, or outdated data
- Request for anonymization, blocking, or deletion of unnecessary data
- Data portability to another provider
- Information regarding third-party data sharing
- Revocation of consent

## Data Subject Channel / Canal do Titular

The official Data Protection Officer (DPO) contact channel will be published on this page upon final legal approval of Cartpy's privacy structure.

## Data Retention and Disposal / Retenção de Dados

- Account and operational data are retained while the account remains active.
- Tax and transactional records are preserved for statutory retention periods mandated by Brazilian law.
- Data no longer requiring active use or legal retention is safely deleted or anonymized.

## Security Practices / Segurança

Payment gateway credentials are encrypted at rest. Internal data access is restricted by permission controls and logged for security auditing.

## Related Cartpy pages

- [Terms of use](https://cartpy.com/en/termos.md)
- [Home](https://cartpy.com/en.md)

---

View the full HTML version of this page at: [https://cartpy.com/en/privacidade](https://cartpy.com/en/privacidade)