Skip to content
Sign up

// Legal documents

Privacy Policy

Version of 2026-11-12

[REVISAR COM ADVOGADO] This document is a draft and will be reviewed by a lawyer before launch. The Portuguese version prevails.

This policy explains how Vitrin handles personal data under Brazil's General Data Protection Law (LGPD, Law 13.709/2018). The controller is Softvision [REVISAR COM ADVOGADO: legal name, CNPJ, address and data protection officer contact].

1. Data from card owners

We collect what you give us to provide the service:

  • Account: name, email, password (stored irreversibly) and language.
  • Card: photo, cover, name, profession, bio, location and the contacts you choose to publish.
  • Chat with Maria: text answers and voice messages. Voice messages are deleted automatically 30 days after the request is sent.
  • Billing: your CPF or CNPJ is sent directly to Asaas to issue charges. We only keep the Asaas customer and subscription IDs and the payment status.

2. Data from card visitors

We don't identify visitors and we don't store IP addresses. To count unique visitors we use a daily, non-reversible code that changes every day and cannot tell who the person is.

We only record aggregated data: date, source (link, QR code or WhatsApp), language, device type and button clicks.

3. How we use data

  • To build, publish and keep your card online (performance of contract).
  • To send emails about your request, your card and your subscription.
  • To show visit stats in your dashboard.
  • To bill the subscription and meet legal and tax obligations.

4. Who we share it with

We don't sell personal data. [REVISAR COM ADVOGADO: international data transfer].

  • Asaas, for subscription billing.
  • Artificial intelligence and speech-to-text providers, when our team uses them to build the card, with the chat answers only.
  • Hosting, email and CDN providers that run the service.

5. Your rights

You can access, correct and delete your data from your dashboard. When you delete your account, we erase everything, including photo and audio files. For other requests under article 18 of the LGPD, write to [REVISAR COM ADVOGADO: officer email].

6. Cookies

We only use cookies needed for login and language preference. Public cards don't use tracking cookies.

7. Security and retention

We take technical measures to protect data, such as encrypted connections and restricted access. We keep data while the account exists, except where the law requires longer retention.