CNPJ: 40.904.977/0001-58
Dr. José Bento Corrêa, nº 545, complemento 727Porto Alegre — RS · CEP 91450-030[email protected]
Responsible and comprehensive
A WordPane Administração de Sistemas Ltda., CNPJ 40.904.977/0001-58, is responsible for decisions about registration, contracting, billing and customer service data. The channel for data protection matters is [email protected].
This policy covers the WordPane Cloud website, the app panel.WordPane.cloud and solution-related service. It does not replace the application policy that a client hosts, nor that of external services accessed by links. Each flow needs to be considered according to the controller for treatment decisions.
Which data enters the services
| Background | Data involved | Purpose |
|---|---|---|
| Account and hiring | Identification, contacts, company data or billing requested in the registration | Create account, authenticate access and execute contracting |
| Credits and recovery | Value, date, status, transaction identifier, vouchers and consumption extract | Register recharges, charge consumption and ascertain divergences |
| Server and panel | Resource name and identifiers, region, technology, configurations, events and technical records | Provide and manage infrastructure and investigate faults |
| Service | Messages, contacts and information sent about the request | Answer questions, prepare proposals and resolve requests |
| Navigation | Technical data of connection, such as IP, browser, schedule and requests processed by the infrastructure | Deliver pages and protect operation |
Send only the data required for service. Do not include sensitive data, third-party documents, passwords or secrets in a briefing. Registers and files of hosted applications may contain personal data from end-users as per the application configured by the client.
Professional e-mail: domain, DNS records, address and name of the box, aliases and destinations, contracted capacity, space used, status of operations and consumption history. The mail service also processes content, attachments, senders, recipients and metadata necessary for storage, sending, receiving, protection and diagnosis. Passwords and credentials should be treated with access controls and should not be included in calls.
Indications: code and link between accounts, registration date, referral status, eligible refills, progress, registered rules, bonuses and reversals. Abuse prevention can use connection signals and an IP derivative identifier by cryptographic function with key to compare shared networks. This identifier is pseudonymized, not anonymous, and does not replace context analysis.
Purposes and grounds for treatment
Data necessary for the account, credits, creation of servers and the service of hiring are processed to execute the contract or procedures requested before it. Tax documents and required records are treated to comply with legal obligations. Information necessary for defense in lawsuits can be retained for regular exercise of rights.
Prevention of abuse, protection of the operation and investigation of accesses may involve legitimate interest, after assessment of the need and rights of people. When an activity depends on consent, it must be specific, informed and revocable by the privacy channel. We do not use simple access to this policy as generic consent for any purpose.
The contact initiated by you for a proposal does not represent unrestricted authorization for promotional messages. The purpose of additional communications and the possibility of no longer receiving them should be informed when applicable.
Domains, boxes, messages and respective records are treated to execute the email service, administer capacity, perform proportional billing and meet incidents. Codes and referral links are treated to assign registrations, calculate cumulative qualification, release bonuses and investigate reversals. Prevention of fraud and eligibility verification should observe need, proportionality and the appropriate legal basis, with the possibility to request clarification and review.
The custom server form
The form organizes contact information, project, technologies, usage estimates, infrastructure, migration, backups, budget and deadline. The answers are prepared in the browser for your review. By clicking Send request, the contact data and briefing are forwarded to FormSubmit for processing and emailing to [email protected]. The site does not record the answers in a database of its own.
You can edit the answers, copy the content, or download a text file before sending. FormSubmit performs the antispam check and displays the confirmation of the processing. The form service and email providers participate in the processing of the information according to their own practices; see the FormSubmit policy at https://formsubmit.co/privacy.pdf. Files downloaded are under your control on the device.
Upon receiving the briefing, WordPane uses the information to analyze the need, prepare the proposal and talk about hiring. Internal access should be limited to those who need to meet the request. You can ask for update or deletion of the information, observing legitimate conservation hypotheses.
E-mail providers and visibility of alerts
The e-mail service uses Postale integration to provide boxes, manage capacity, aliases and access. Data and instructions required for operations are transmitted to integration; message processing occurs in the mail service. DNS technical information can be verified by external resolvers. These flows are different from cloud infrastructure providers and are subject to data protection obligations on each party.
The referral can show in the panel the link and progress required for monitoring, including identification of the indicated account, accumulated eligible values, situation, bonuses and reversals, according to the available interface. This monitoring does not authorize the indicator to access passwords, messages, files, means of payment or the full service history of the specified person.
The link contains a code for assigning the registration; participation does not allow broad access to the given data or unrestricted sending of advertising. Do not publish personal data of third parties next to the link without authorization. Please request the privacy channel specific information about recipients, processing locations and safeguards of the email service.
With whom data can be shared
The operation involves cloud and datacenter infrastructure providers, site and panel hosting, payment processing, email communication and technical support. Sharing should be limited to what is necessary for each activity and be accompanied by the applicable protection obligations.
The servers offered initially use Hetzner. Technical information for provisioning and application data are processed in the contracted infrastructure. Payment involves the institution or intermediary indicated in the operation; its procedures and warnings should also be consulted. This policy does not assume storage of full card numbers by WordPane.
Data may be communicated to authorities where there is a legal obligation or valid order, or used in the calculation of fraud and exercise of rights, within the legal limits. Sharing for different purposes requires appropriate foundation and information to the holder.
When you set up backups, files and databases you can transfer to the external storage that you connect: Dropbox, Google Drive, Wasabi, Amazon S3 or custom S3. The client chooses and authorizes the destination and must verify the location, access, retention and privacy practices of that provider. The deletion of the server does not equal the deletion of copies held in your external storage account.
Regions and international transfers
You can choose regions in Germany, Finland, the United States and Singapore according to the catalog. Hosting a project in these regions involves processing your files and databases outside Brazil. Support services, sources, communication and infrastructure may also involve other countries.
The server region does not guarantee that all metadata of account, payment or support remain exclusively in that location. International transfers need to observe LGPD and the applicable mechanisms of ANPD regulation, such as contractual guarantees or other valid legal hypothesis. The choice of the region does not replace those obligations.
If your application has specific territorial or regulatory requirements, inform them before hiring. Ask the privacy channel for clarifications about recipients, countries and safeguards applicable to the flow you want to evaluate.
Data from users of your application
When you decide which data to collect from users in your application, for what and for how long, you usually act as controller of this data. WordPane and suppliers can act as operators in hosting activities carried out under your instructions, according to the contract and effective performance of each party.
You must establish privacy notices, legal bases, authorized accesses and routines of service to your application holders. WordPane treats hosted data to provide the service and perform necessary technical activities, respecting licit instructions and its own obligations.
If a holder requests information about a hosted website, the request should be directed to the person responsible for this application. The team may assist in identifying and forwarding according to their participation in the treatment. Services with sensitive data or special requirements should have their needs evaluated before hiring.
In business e-mail boxes, the client must also ensure proper purpose and permissions for senders, recipients, staff and third parties, including attachments and messages with sensitive data. Controller and operator roles depend on effective treatment and hiring; WordPane retains its own responsibilities on registration, collection, security and service.
How long the data is kept
The conservation criteria consider the purpose, duration of the contractual relationship, fiscal and legal obligations, need for technical records, calculation of incidents and exercise of rights. Data without need for conservation should be eliminated or anonymized according to the flow and applicable obligation.
Closing an account or requesting deletion does not require erasing documents that need to be maintained by law. The team must explain the foundation when unable to fully meet the request. There is no promise of unlimited retention of briefings or server content.
Deletion of files or servers in the panel is different from deletion of registration data, extracts and tax documents. Backups may have their own cycles according to the contracted configuration; they should not be considered permanent file or recovery guarantee. Please request information about the specific conservation of a category by the privacy channel.
In the absence of balance, the server is suspended after 1 day and permanently deleted after 7 days, counted from the exhaustion of credits. After deletion, the server data is not recoverable by WordPane. During the suspension and before deletion, it is still possible to enable its recovery. Backups are not included: their configuration and storage in the connected external storage is the responsibility of the client.
Deleting a box permanently removes messages after service confirmation, but does not necessarily delete extracts, operations or records that need to be preserved by legal obligation, security or rights defense. Balance suspension is not deleted from the box. The above cloud server deadlines do not automatically extend to the email.
referral links, considered reloads, bonuses, reversals and signs necessary for the verification of abuse are retained in accordance with the applicable purpose and obligations, without promise of unlimited conservation. Request the specific deadlines by the privacy channel; after stopping the legal or operational need, the data should be deleted or anonymized.
Safety and incidents
Protection should consider access control, unnecessary data reduction, credentials management, infrastructure configuration, and risk monitoring. Technical service access should be limited to what is necessary for the activity. There is no promise of absolute security.
The client must protect the account and application, review permissions, update dependencies and check backups. If you suspect leakage or improper access, report to the team immediately with the schedule and description of the event, without publishing credentials.
Incidents will be evaluated for containment, investigation and adoption of appropriate measures. When there is a relevant risk or damage and reporting obligation, ANPD requirements and deadlines will be observed to inform the affected authority and holders. In customer application data, the parties shall cooperate according to their roles.
Your rights and how to ask for assistance
You can request confirmation and access to the data, correction, information on sharing and, under legal conditions, anonymization, blocking, deletion, portability and review of automated decisions. You can also revoke consent and oppose the processing carried out in disagreement with the law. Some rights depend on the legal basis and applicable conditions.
Send the order to [email protected], indicating the right you wish to exercise and how to locate your account or interaction. The service does not require a password or card security code. We can confirm identity with proportionate information to avoid handing over data to third parties.
The answer will observe the legal deadlines. When a measure cannot be complied with, the reasons and possible measures will be informed. For confirmation and access, the immediate simplified response or the full statement will apply within 15 days, in legal terms. You can use the ANPD and competent bodies if you are unable to exercise your rights.
Additional updates and information
This policy should accompany real changes of suppliers, resources and purposes. Relevant changes will be informed by appropriate channels, with the date and version of the document. You can ask for clarifications about a flow, supplier, conservation period or request in progress via the privacy channel.
See also Terms of use and hiring and Refund policy. The use of these documents does not replace specific transparency when new data or resources are requested.