Privacy Policy
DRAFT FOR LEGAL REVIEW. Items in brackets must be confirmed or filled in before publishing.
Last updated: [date]
1. Who we are
This policy explains how PESSOA & TENTONI IT CONSULTING LTDA, Brazilian Tax ID (CNPJ) 42.063.235/0001-72, which operates the Tentoni Labs brand (“Tentoni Labs”, “we”), processes personal data under the Brazilian General Data Protection Law (Law No. 13,709/2018, “LGPD”). Address: [address]. Contact: contato@tentonilabs.com.br.
2. Our roles
- Controller: for data of people who visit this site, contact us or create an account in our products.
- Processor: for buyer and order data that our customers (sellers) process inside our products. In that case we process data only on the customer’s instructions; the customer is the controller.
3. Data we process
- Contact: name, e-mail and the message you send.
- Account and billing: name, e-mail, company, tax ID and billing details.
- Usage and security: IP address, browser, access dates and times, and technical logs.
- Integrations: access credentials and tokens for the marketplaces the customer authorizes, stored in a protected way.
- Data processed on behalf of customers: orders, invoices and buyer data (name, tax ID, address, phone) and, in Tentoni Fiscal, the issuing company’s A1 digital certificate.
4. Purposes and legal bases
| Purpose | Legal basis (LGPD art. 7) |
|---|---|
| Answering messages and providing support | Performance of a contract / pre-contractual steps; legitimate interest |
| Providing, billing and maintaining the products | Performance of a contract |
| Security, fraud prevention and logs | Legitimate interest; legal obligation |
| Keeping tax documents | Compliance with a legal or regulatory obligation |
| Optional communications | Consent, which can be withdrawn at any time |
5. Who we share data with
- Marketplaces and tax authorities (SEFAZ): only what is needed and as authorized by the customer’s integration.
- Infrastructure and service providers: hosting and cloud (Oracle Cloud), network and DNS (Cloudflare), e-mail delivery (Resend), payments (Mercado Pago). [confirm final list]
- Authorities, when legally required or by court order.
We do not sell personal data.
6. International transfers
Some providers may store or process data outside Brazil (for example, the United Kingdom and the United States). We apply the safeguards provided by the LGPD. [confirm locations and mechanisms]
7. Retention
- Tax documents and XML: for the legal retention period. [confirm period]
- Account data: while the account is active and for as long as needed for legal obligations.
- Technical logs: [period].
8. Your rights
You may request confirmation of processing, access, correction, anonymization, portability, deletion, information about sharing, and withdrawal of consent (LGPD art. 18). Write to contato@tentonilabs.com.br. If you are a buyer of one of our customers, please contact the seller first, as they control your data.
9. Security
We use encryption in transit, least-privilege access, isolation of digital certificates and audit logs. [confirm and complete]
10. Cookies
This site [does not use tracking cookies]. [update if an analytics tool is added]
11. Data Protection Officer
[name or channel of the person in charge of personal data processing]
12. Changes to this policy
We may update this text. The last update date is shown at the top.