Privacy Policy

1. Introduction

Zenifra Serviços Tecnologia LTDA offers a platform for people and companies to publish and manage applications, with a focus on security, performance, and reliability.

We respect your privacy and are committed to protecting the personal and technical information provided while using our services. This Policy explains how we collect, use, store, and protect that information.

2. Information collected

3. Use of information

We use the collected information to:

• Provide and operate our services.
• Allow access to development and production environments.
• Manage accounts, billing, and technical support.
• Improve the user experience through usage analysis.
• Meet legal and regulatory obligations.
• Prevent fraud and protect system security.

3.1 Legal bases by purpose

• Performance of a contract: registration, authentication, project creation, databases, domains, deployments, logs, metrics, environment variables, and platform operation.
• Legal or regulatory obligation: tax data, CPF/CNPJ, address, financial records, chargebacks, anti-money-laundering measures, and legal orders.
• Legitimate interest: security, fraud prevention, authentication history, IP, device, browser, auditing, product improvement, and feedback response.
• Consent: marketing communications, newsletters, and measurement or advertising cookies enabled on the public site.

3.2 Platform-specific technical data

To operate the platform, we also process integration tokens, API keys, network settings, domains, DNS records, build logs, resource usage, AI models used, consumption, spending, environment variables, and secrets sent by the user to run projects.

4. Sharing of information

4.1 Third parties

We do not share personal or technical data with third parties except in the following situations:

• With service providers acting on Zenifra’s behalf, such as technical support and security.
• When required by law or court order.
• In a merger, acquisition, or asset sale, when data could be transferred as part of the business.
• With the payment processor to process payments.

4.2 Anonymous and aggregated data

We may share statistical and aggregated data with partners for market analysis and product improvement.

4.3 Categories of processors

We may share personal and technical data with processors required to provide the services, such as infrastructure and hosting, payment processing, transactional email, monitoring, DNS, abuse protection, code repositories, deployment automation, AI models, databases, cache, and storage.

5. Storage and security

5.1 Data location and retention

Data is stored in cloud infrastructure located in Brazil and/or countries with an adequate level of protection recognized by the ANPD. We retain data for the period necessary for this Policy’s purposes, unless a different legal obligation applies.

Network events and detailed metrics may be retained for short periods; account, billing, and transaction data may be retained while the account is active and for subsequent legal periods. Deleted data may remain in backups for a limited cycle until secure replacement.

5.2 Security measures

We adopt technical and organizational measures in accordance with LGPD and market best practices:

• Encryption of data at rest and in transit.
• Access controls based on the least-privilege principle.
• Multi-factor authentication for administrative access.
• Continuous monitoring and anomaly detection.
• Periodic security and vulnerability audits.
• Ongoing team training in data protection.
• A security-incident response plan.

6. Your rights (LGPD)

In accordance with LGPD, you have the following rights:

7. Cookies and tracking technologies

Our site may use cookies and similar technologies to:

• Improve the user experience.
• Perform traffic analysis.
• Provide relevant ads, when applicable.

You may choose to disable cookies in your browser, although this may affect proper site operation.