Privacy Policy

This policy describes how Kyrodata collects, uses and protects your personal data, in compliance with Brazil's General Data Protection Law (LGPD — Law 13.709/2018).

• Account data: email, preferred language, password (stored as a hash).
• Usage data: pages visited, filters applied, saved presets, exports performed.
• Payment data: processed by our payment provider; we store only reference IDs (we never see your card number).
• Technical data: IP address and user-agent, for security and fraud prevention.

We process your data based on: (i) contract execution, to deliver the service; (ii) compliance with legal obligations, for tax retention; (iii) legitimate interest, for security and service improvement.

We share data only with service providers required for operation, in the following categories: hosting, payment processing, product analytics, and error monitoring. These providers handle data under contract and are subject to confidentiality and security obligations equivalent to ours.

Your data is encrypted in transit (HTTPS/TLS) and at rest. Passwords are stored as hashes; card data never touches our servers — it is processed directly by our PCI-DSS-certified payment provider.

Account data is kept while the account is active. After deletion, personal data is erased; tax records are preserved for 5 years per Brazilian law.

You may exercise the following rights at any time:

• Download a copy of all your data at /user/billing.
• Delete your account at /user/billing — immediate anonymization, except mandatory tax records.
• For corrections or other requests, contact privacidade@kyrodata.com.

We use three cookie categories. **Essential** (session, locale, theme, consent preference) always load — the site doesn't work without them. **Analytics** measure aggregate usage to improve the product. **Advertising** sustains free content when active on news pages. The latter two only load when you accept the cookie banner; revisit anytime by clearing your browser cookies.

On news pages we display ads served by partner advertising networks. These networks may use their own cookies and anonymous identifiers to: (i) measure impressions and clicks; (ii) personalize ads based on interests inferred from your browsing history across our site and others. Personalization is only enabled when you accept the "advertising" category in the cookie banner — when declined, ads still appear but are generic (no behavioral profile). For additional opt-out, check your browser's privacy settings or the ad preferences of your accounts on the networks you use.

Privacy questions or to exercise your rights: privacidade@kyrodata.com. You may also contact the Brazilian Data Protection Authority (ANPD) at gov.br/anpd.