Privacy Policy

1. Acceptance

This Privacy Policy describes how we use, store, share, and protect your data when you use our platform. By continuing to use Plinfy, you confirm that you have read and agree to this Privacy Policy. If you have questions or need clarification before continuing, contact us.

2. Information We Collect

We collect only the data necessary to offer and improve our services, always with transparency and using the legal bases provided in the LGPD.

2.1. Information Provided by the User

• Full name
• Email address
• Phone number
• Profile photo
• Professional information (role, company, biography, social media, address, external links)
• Payment data (when applicable)
• Account preferences and settings

Legal basis: contract performance (Art. 7, V of the LGPD) and/or consent (Art. 7, I), as applicable.

2.2. Automatically Collected Information

• IP address
• Browser and device type
• Operating system
• Geolocation data (with consent)
• Platform activity (accesses, clicks, usage time, interactions)
• Cookies and similar technologies

Legal basis: legitimate interest (Art. 7, IX) for platform security and operation, and consent (Art. 7, I) for personalization and advertising purposes.

3. Purposes and Legal Bases for Processing

We use your data to:

• Create and manage your account (contract performance)
• Personalize and improve your platform experience (legitimate interest and/or consent)
• Display your professional profile to visitors (consent)
• Provide support and respond to requests (contract performance)
• Send relevant communications, such as promotions and updates (you may opt out of promotional communications at any time by clicking the unsubscribe link in our messages or by Contact us). Plinfy reserves the right to send essential messages related to security, billing, and service updates, from which you cannot unsubscribe without closing your account.
• Analyze platform usage to optimize features and performance (legitimate interest)
• Ensure security and prevent fraud (legitimate interest)
• Comply with legal and regulatory obligations (legal obligation)

4. The User and Third-Party Data (Controller vs. Processor)

The User should be aware that, when using Plinfy features to collect data from their own visitors or clients ("Users of Users"), the User and Plinfy assume distinct legal roles:

4.1. User Responsibility (Controller)

The User is the Controller of their visitors' data, as they determine the purposes and means of processing. As Controller, the User is fully responsible for:

• Obtaining consent from their Users of Users for collection and processing of data.
• Providing a clear and accessible Privacy Notice or Privacy Policy to their Users of Users, covering data collection and processing practices on their website.
• Responding to requests and exercising the rights of their Users of Users (LGPD - Art. 18).

4.2. Plinfy Responsibility (Processor)

Plinfy acts as Processor of data collected by the User, processing it only according to the User's (Controller's) instructions and as necessary to provide the contracted service. This Plinfy Privacy Notice does not apply to visitor data collected by the User; for those cases, consult the privacy notice provided by the User.

5. Information Sharing

We do not sell your personal information. We may share it in the following situations:

• With your explicit consent.
• With service providers (e.g., hosting, customer support, data analysis, payments).
• With business partners, when necessary for service integration and with your authorization.
• To comply with legal obligations or authority determinations.
• In case of merger, acquisition, or corporate reorganization, subject to this policy.

We are not responsible for the content or privacy policies of third parties with whom we interact through our platform.

5.1. Notice About Public Content

The User should be aware that any personal information publicly disclosed on their Plinfy profile will be accessible to third parties and indexable by search engines. After publication, the User acknowledges that Plinfy cannot control retention or use of that content by third parties outside the platform.

6. Cookies and Similar Technologies

We use cookies to improve your experience. You can manage your preferences in the consent tool available on our website. For more information, see our Cookie Policy.

7. Automated Decisions, Profiling, and Artificial Intelligence (AI)

Plinfy may use automated processes to suggest professional connections, relevant content, or detect fraudulent activity.

7.1. Right to Human Review

The data subject may request human review of these automated processes by contacting us through the channel below.

7.2. Use of Data for Third-Party AI Training

When sharing data with third-party service providers (e.g., security tools, analytics), Plinfy contractually ensures that those third parties will not use your personal data to train or improve their own Artificial Intelligence models.

8. Data Processing for Recruitment

If you apply for a job at Plinfy, we will process your personal information (resume, professional history, references) based on legitimate interest and for preliminary contract procedures. We will retain this data for the time necessary to evaluate your application and, if not hired, we may retain the data for up to 2 (two) years for future opportunities.

9. Data Security

We adopt appropriate technical and administrative measures to protect your data, including:

• Encryption of sensitive data
• Restricted access control
• Security monitoring and auditing
• Recording and storage of granted consents and any revocations
• Maintenance of access and event records to ensure platform security and assist in incident investigations

No system is 100% secure. Therefore, we recommend using strong, unique passwords and not sharing your access link. If you suspect a data breach, Contact our team immediately. We use standard security protocols (such as SSL/TLS) to protect data transmission between your device and our servers.

10. Data Retention and Deletion

We store your data while necessary to provide our services and comply with legal obligations. Data inactive for more than 24 months, counted from last access, will be automatically anonymized or deleted, unless otherwise required by law. You may request deletion of your account and personal data at any time directly through the account management area in the admin panel, subject to any legal retention periods.

11. Data Subject Rights

Under the General Data Protection Law (LGPD), you have the right to:

• Confirmation of processing
• Access to your personal data
• Correction of incomplete, inaccurate, or outdated data
• Anonymization, blocking, or deletion of unnecessary data
• Data portability to another service provider
• Revocation of consent at any time
• Information about data sharing
• Objection to processing based on legitimate interest
• Review of automated decisions

11.1. Global Privacy Control (GPC) Recognition

Although Plinfy is a Brazilian company, we strive for global compliance. Users may exercise their right to opt out of sharing data for targeted advertising by enabling the Global Privacy Control (GPC) opt-out preference signal in their browser. Plinfy recognizes and honors this signal when detected. To exercise these rights, send a detailed request to the DPO. We will respond to your request within 15 calendar days, in accordance with Art. 18, § IV of the LGPD.

12. Children's and Adolescents' Privacy

Plinfy is not intended for anyone under 18. If we identify that an account was created without authorization from legal guardians, we will take necessary measures to delete the data.

13. International Data Transfer

Your data may be processed on servers located outside Brazil to ensure service speed, security, and stability. In such cases, Plinfy will ensure that transfer occurs in accordance with the LGPD, adopting the following safeguards:

• Use of Standard Contractual Clauses (SCCs) or other adequate contractual guarantees.
• Verification that the destination country offers an adequate level of data protection, as assessed by ANPD (National Data Protection Authority), when applicable.

14. Revisions and Updates to This Policy

This policy will be reviewed annually, even if there is no legislative change, to ensure adherence to privacy best practices. If there are significant changes, we will notify you by email or platform notice. The most current version will always be available on Plinfy's website. We recommend reviewing this policy periodically to stay informed of any changes. Continued use of the platform after changes indicates your agreement with the new terms.

15. Contact Us

If you have questions about this Privacy Policy, contact Technical Support. For specific privacy matters and exercise of rights, Plinfy designates the following contact for the person in charge of personal data processing, who acts as the contact point for data subjects: hello@plinfy.com.