Privacy Policy

1. Introduction

R V SANTOS CONSULTORIA EM TECNOLOGIA DA INFORMACAO LTDA, registered under CNPJ 50.839.014/0001-71, located at Avenida Presidente Getúlio Vargas, 2840, Curitiba-PR, Brazil, hereinafter referred to as "PawDream", is committed to protecting the privacy and personal data of its users.

This Privacy Policy describes how we collect, use, store, and protect your personal information in compliance with the Brazilian General Data Protection Law (LGPD - Law 13.709/18) and other applicable legislation.

2. Definitions

For the purposes of this policy:

• Personal Data: Any information related to an identified or identifiable natural person
• Data Subject: Natural person to whom the personal data refers
• Processing: Any operation performed with personal data (collection, storage, use, sharing, etc.)
• Controller: PawDream, responsible for decisions about the processing of personal data

3. Data Collected

3.1. Data Provided by User

• Registration Data: Name, email address
• Authentication Data: Login information (email, encrypted password)
• Pet Data: Name, type (species), and photos of pets
• Payment Data: Information processed via Stripe (we do not store card data)

3.2. Automatically Collected Data

• Navigation Data: IP address, browser, device, operating system
• Usage Data: Pages visited, features used, access times
• Cookies: Identifiers for session and user preferences

3.3. Image Data

• Original Photos: Pet images uploaded by the user
• Generated Images: Artistic portraits created by AI
• Metadata: Date, chosen style, generation parameters

4. Processing Purposes

We use your personal data for the following purposes:

4.1. Service Provision

• Create and manage your user account
• Process pet photo uploads
• Generate artistic images using artificial intelligence
• Store and make available generated images
• Manage the credit system

4.2. Financial Transactions

• Process payments through Stripe
• Issue receipts and invoices
• Manage refunds when applicable

4.3. Communication

• Send notifications about generation status
• Respond to support requests
• Send important service updates
• Send marketing communications (with your consent)

4.4. Service Improvement

• Analyze usage patterns to improve the platform
• Enhance image generation algorithms
• Develop new features and styles

4.5. Security and Compliance

• Prevent fraud and misuse
• Comply with legal and regulatory obligations
• Protect our rights and property

5. Legal Basis (LGPD)

The processing of your personal data is based on the following legal grounds:

• Contract Performance (Art. 7, V): To provide the contracted services
• Consent (Art. 7, I): For marketing communications and non-essential cookies
• Legitimate Interest (Art. 7, IX): For service improvements and internal analysis
• Legal Obligation (Art. 7, II): To comply with tax and regulatory obligations
• Exercise of Rights (Art. 7, VI): For protection of rights in legal proceedings

6. Data Sharing

We may share your personal data with third parties in the following situations:

6.1. Service Providers

• Supabase: Database and authentication (registration and usage data)
• Cloudflare R2: Image storage (original and generated photos)
• Google Gemini: AI image processing (pet photos)
• Stripe: Payment processing (transaction data)
• Postmark: Transactional email delivery

All providers are carefully selected and required to maintain the confidentiality and security of data, processing it only according to our instructions.

6.2. International Transfer

Some of our service providers may be located outside Brazil. In these cases, we take measures to ensure your data receives adequate protection, including:

• Standard contractual clauses for data protection
• International security certifications
• Compliance with global privacy standards

6.3. Legal Requests

We may disclose your personal data when required by law, court order, or to protect our legal rights.

7. Data Retention

We retain your personal data only for as long as necessary for the stated purposes:

• Account Data: While your account is active, plus legal statute of limitations (5 years after closure)
• Photos and Images: While your account is active or until you request deletion
• Transaction Data: For 5 years after the transaction, per Brazilian tax law
• Access Logs: For 6 months, per Brazilian Internet Civil Framework (Law 12.965/14)

After retention periods, data will be securely and permanently deleted.

8. Your Rights (LGPD)

Under LGPD, you have the following rights regarding your personal data:

• Confirmation and Access: Know if we process your data and access it
• Correction: Request correction of incomplete or outdated data
• Anonymization/Blocking/Deletion: Request deletion of unnecessary data or data processed irregularly
• Portability: Receive your data in a structured and interoperable format
• Deletion of Consent: Revoke previously given consents
• Information on Sharing: Know with whom we share your data
• Consent Revocation: Withdraw consent at any time
• Opposition: Object to processing in certain situations

To exercise any of these rights, contact us at support@pawdream.art. We will respond to your request within 15 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, destruction, loss, alteration, or disclosure:

• Encryption: Sensitive data is encrypted in transit (HTTPS/TLS) and at rest
• Access Control: Access restricted to authorized personnel only
• Secure Authentication: Passwords hashed using modern algorithms
• Monitoring: Intrusion and anomaly detection systems
• Backups: Regular encrypted security backups
• Updates: Regular security maintenance of our infrastructure

10. Cookies and Similar Technologies

10.1. What are Cookies

Cookies are small text files stored on your device that help us improve your experience and understand how you use our service.

10.2. Types of Cookies Used

• Essential Cookies: Necessary for basic site functionality (authentication, session)
• Preference Cookies: Store your settings and preferences
• Analytics Cookies: Help us understand how the site is used (anonymized)

10.3. Cookie Management

You can manage or disable cookies through your browser settings. Note that disabling essential cookies may affect service functionality.

11. Minors

Our service is not directed to individuals under 18 years of age. We do not intentionally collect data from minors without consent from legal guardians. If we become aware that we have collected data from a minor without authorization, we will take steps to delete that information.

12. Changes to this Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technologies, or legal requirements. Significant changes will be notified through:

• Email to the registered address
• Prominent notice on our platform
• Update of the date at the top of this page

We recommend that you review this policy periodically. Continued use of the service after changes constitutes acceptance of the new policy.

13. Data Protection Officer (DPO)

We have appointed a Data Protection Officer (DPO) to act as a communication channel between you, the company, and the Brazilian National Data Protection Authority (ANPD).

For data protection and privacy questions, contact:

• Email: support@pawdream.art

14. Applicable Legislation

This Privacy Policy is governed by the following Brazilian laws:

• General Data Protection Law (LGPD - Law 13.709/18)
• Internet Civil Framework (Law 12.965/14)
• Consumer Protection Code (Law 8.078/90)
• Brazilian Civil Code (Law 10.406/02)

15. Contact

For questions, requests, or complaints related to this Privacy Policy or the processing of your personal data:

• Company: R V SANTOS CONSULTORIA EM TECNOLOGIA DA INFORMACAO LTDA
• CNPJ: 50.839.014/0001-71
• Address: Avenida Presidente Getúlio Vargas, 2840, Curitiba-PR, Brazil
• Email: support@pawdream.art

You can also file a complaint with the Brazilian National Data Protection Authority (ANPD): www.gov.br/anpd