Previous version, in force until 10/10/2026. See the version in force
Last updated: August 1, 2026. This policy applies to all BBSolutions Digital Services products and to visitors from any country.
1. Who controls your data. BBSolutions Digital Services, inscrita no CNPJ 43.212.363/0001-01, com sede em Edifício La Terrasse, R. 428, nº 115, 15º andar, Morretes, Itapema/SC, CEP 88220-000. We are the controller of the personal data processed on this site and in the applications we offer by subscription. Contact for any privacy matter: [email protected].
2. What data we process.
We collect the minimum necessary to run the service.
Account data: name, email address and password, the latter stored only as an irreversible cryptographic hash, never in readable form.
Subscription data: plan purchased, payment status, start, renewal and cancellation dates.
Technical access data: login date and time, network address and browser identification, kept for a short period for security and fraud prevention.
Voluntary contact data: email provided on the waiting list or in a message sent to us.
Language preference: stored in our own cookie when you pick a flag.
We do not collect sensitive data, we do not perform behavioural profiling and we make no automated decision producing legal effects on you.
3. On what legal basis. We process account and subscription data to perform the contract you enter into with us. We process technical logs on the basis of our legitimate interest in keeping the service secure and available, and to meet the log retention required by Brazilian internet law. We process waiting list emails on the basis of your consent, which can be withdrawn at any time. We comply, as applicable, with the Brazilian General Data Protection Law (Law 13.709/2018) and the European General Data Protection Regulation, where it applies to the visitor.
4. What we use it for. To authenticate your access, run and bill the subscription, communicate account matters such as access release, renewal and relevant service changes, prevent fraud and abuse, and meet legal obligations. We do not sell your data. We do not share your data with third parties for advertising. We do not send partners' commercial messages.
5. Who we share it with. Only with suppliers performing essential functions on our behalf, always limited to what is strictly necessary and contractually bound to protect the information: payment processor, hosting provider and transactional email service. When payment is made through a third-party operator, card data is handled directly by them and never pass through nor are stored on our servers. We may also disclose information under a court order or a request from a competent authority.
6. International transfers. Part of our infrastructure and some suppliers may be located outside Brazil. In those cases, the transfer takes place with adequate contractual safeguards and only to countries or suppliers offering a level of protection compatible with applicable law.
7. How long we keep it. Account and subscription data remain while the account exists and, after closure, for the period needed to meet tax obligations and defend rights, as a rule five years. Technical access logs are kept for six months, in line with Brazilian internet law. Waiting list emails are deleted at product launch or whenever you ask. Once the period ends, data is irreversibly deleted or anonymised.
8. Your rights. At any time and free of charge, you may request: confirmation that we process your data; access to it; correction of incomplete or outdated information; anonymisation, blocking or deletion of unnecessary or non-compliant data; portability; information on who we share with; withdrawal of consent; and objection to processing based on legitimate interest. Simply write to [email protected]. We respond within fifteen days. If you are in the European Union, you also have the right to lodge a complaint with your country's data protection authority; in Brazil, with the National Data Protection Authority.
9. Cookies. We use the bare minimum, and there are three. One stores your language preference. Another protects the site's forms against forged submissions from another site, and lasts 8 hours. The third keeps the administration session signed in, and exists only for the site's staff. All three are strictly necessary for operation and do not track browsing. This site uses no advertising cookies and no third-party trackers for marketing purposes. You can delete them at any time in your browser settings, bearing in mind that the language preference will revert to the default.
9.1. Nothing is loaded from outside. The entire page is served from our own domain, typefaces included. There is no CDN, heatmap, embedded chat, social network pixel or analytics service. In practice, browsing here sends nothing from your browser to any other company.
10. Security. We apply technical and administrative measures to protect your data: passwords stored only as a cryptographic hash using a slow derivation algorithm, encrypted traffic, restricted and authenticated administrative access, least-privilege principle and an audit trail of relevant operations. No system is infallible: should a security incident occur with relevant risk to you, we will notify you and the competent authority within the legal deadlines.
11. Minors. Our products are not intended for people under 18 and we do not knowingly collect data from children or adolescents. If such processing is identified, the account is closed and the data deleted.
12. Changes to this policy. If we change this policy in a relevant way, we will notify you by email and highlight the update date at the top of this page before the change takes effect.
13. Data protection officer. Contact for the data protection officer: [email protected].