Updated on 17 October 2026 (Portuguese original)
Who is the controller
The controller of the personal data processed on this platform is RVV FACILITIES LTDA, CNPJ (Brazilian company number) 55.560.258/0001-34, with address at Rua José Versolato, 111, Torre B, 11º andar, Edifício Domo Business, Centro, São Bernardo do Campo/SP, CEP 09750-730, Brazil. Data subject service channel and contact of the data protection officer: rafael@oliveirassociados.com.br.
Data processed
Registration data (name, e-mail and, if provided, telephone, company, profession and field of work); purchase data (material purchased, amount, date, payment status and order identifiers at Mercado Pago — card data stays with Mercado Pago and is neither received nor stored by the platform); messages sent through the contact form and withdrawal requests; download records of paid materials (account, material, date and time); essential technical access and security records; and the text sent to the document analysis tool, which is processed on the spot and not stored by the platform.
Purposes and legal bases
Maintaining the account, releasing purchased materials and providing purchase-related support: performance of a contract (art. 7, V, of the LGPD — Lei 13.709/2018, Brazil’s General Data Protection Law). Recording transactions and meeting tax and consumer obligations: compliance with a legal obligation (art. 7, II). Answering the contact form: preliminary procedures to a contract, at the data subject’s request (art. 7, V), and consent when ticked on the form (art. 7, I). Protecting the platform, preventing fraud and automated extraction of the materials and maintaining security: legitimate interest (art. 7, IX). Paid files carry a pseudonymous licence code, generated from the account and the material, without name, e-mail or CPF (Brazilian taxpayer number). We do not sell personal data or use it for third-party advertising.
Processors and sharing
Data is processed, on behalf of the controller, by infrastructure providers: Lovable (hosting and publication of the site), Supabase (database and authentication, contracted through Lovable), Mercado Pago (payment processing), Resend (e-mail delivery) and Lovable’s artificial intelligence gateway, which forwards the document analysis text to an OpenAI model. Data may also be shared when there is a legal obligation or an order from a competent authority.
International transfer
Some of these providers process data outside Brazil. These transfers occur only in the cases of art. 33 of the LGPD and to the extent necessary for the purposes described in this policy.
Document analysis
The text sent to the document analysis tool is used only to generate the requested analysis and is not kept by the platform. Do not send sensitive personal data or confidential client information; the tool is informational and does not replace the analysis of a specific case by a qualified professional.
Cookies and local storage
We use only resources essential to keep the session, preferences and security. We do not use advertising cookies. Any resource that depends on consent will be disclosed before it is activated.
Retention
Account data is kept while the account is active. Purchase records are kept for the periods required by tax and consumer legislation and for the time needed to exercise rights in proceedings. Contact messages and withdrawal requests are kept for the time needed to answer and follow up on the request. Download records are kept for the time needed to support the purchase and prevent abuse. Once the purposes end, the data is deleted or anonymised, except where the law requires retention.
Security
We adopt role-based restricted access, access control in the database, encrypted connections and validation of payment notifications. No system is immune to incidents; if an incident occurs that may cause relevant risk or harm, the affected data subjects and the ANPD (Brazil’s National Data Protection Authority) will be notified as required by law.
Your rights
You may request, at any time and free of charge: confirmation that processing exists; access to the data; correction of incomplete, inaccurate or outdated data; anonymisation, blocking or deletion of unnecessary or excessive data; portability; deletion of data processed on the basis of consent; information on with whom the data was shared; information on the possibility of not consenting and its consequences; and revocation of consent (art. 18 of the LGPD). You may also file a petition with the National Data Protection Authority (ANPD).
For questions or requests about personal data, use the contact form or the e-mail rafael@oliveirassociados.com.br. See also Data subject rights.