Privacy Policy

1. Controller

The controller is YRV Design, trading name of 65.234.837 YOSDELVIS DE LA ROSA VEGA - ME, Brazilian CNPJ 65.234.837/0001-40, operating in São José/SC, Brazil. Privacy contact: contact@yrvdesign.com. While YRV Design qualifies as a small processing agent under the applicable rules, this channel serves as the direct contact point for data subjects, without limiting any additional obligations that may apply.

2. Scope

This policy covers yrvdesign.com, forms, accounts, the client panel, pre-Stripe checkout, private support, notices, the Assistant, business WhatsApp and related administrative processes.

3. Data categories

Identity/contact: name, email, phone/WhatsApp if supplied and language.

Account/security: account identifiers, protected password data, verification status, security preferences, access dates, temporary verification data and protected device/network references used to recognise access.

Billing: service or bundle, BRL price, accepted terms/date, billing model, necessary payment-provider references and the status of purchases, renewals or cancellations. We do not store full card numbers or CVC.

Projects/support: domains, website/Meta Ads progress, dates, summaries, next steps, private messages and notifications assigned to the account.

4. Purposes

To answer requests, contract and deliver services, authenticate accounts, reconcile subscriptions, operate the private panel, track projects, provide support, send transactional notices, prevent fraud, secure systems, and meet contractual, tax and legal obligations.

5. Legal bases

Depending on the context under Brazil’s LGPD: pre-contractual steps/performance of contract, legal or regulatory obligations, regular exercise of rights, compatible legitimate interests for security/operation, and consent where a specific purpose requires it.

6. Stripe

Payments occur through Stripe Checkout. Necessary customer/subscription information is sent to Stripe; complete payment credentials are supplied directly to Stripe. YRV Design stores only references/status required to manage the purchase or subscription.

7. Tenant isolation

Support, projects, subscriptions, notifications and legal acceptances are tied to the authenticated account. Knowing another panel URL is not enough to access another account.

8. Security and 2FA

Accounts are protected with secure sessions, protected password storage, email codes, attempt limits and separation of private areas. A new device or network may require a temporary email code.

Device/network references used for access recognition are stored in a protected form and limited to account-security purposes.

9. Providers and transfers

We may use hosting/database, transactional email, Stripe, Meta/WhatsApp, AI and DNS/security providers. Only necessary data is shared. Some providers may process data internationally subject to applicable safeguards and provider terms.

10. Assistant and AI

The Assistant uses conversation content and authorised business knowledge. It should not use the private CV or unrelated internal data. Do not submit passwords, full payment credentials or unnecessary secrets.

11. Retention

Data is kept as needed for the service, account, support, contract evidence and legal/tax periods. Temporary codes expire quickly. Some records may be retained in a restricted manner for legal claims or obligations.

12. Data-subject rights

Users may request confirmation, access, correction, sharing information, applicable portability, anonymisation/blocking/deletion of irregular data and other LGPD rights. Contact contact@yrvdesign.com or https://yrvdesign.com/data-deletion/. Identity verification may be required before disclosing account data.

13. Children and sensitive data

Services are not specifically directed to children, and sensitive data is not deliberately requested for ordinary services. Special projects requiring such data will be assessed before processing.

14. Incidents and changes

Relevant incidents will be contained, investigated and communicated where legally required. This policy may be updated; the current version and date are published here. Cookies: https://yrvdesign.com/en/cookies/. Terms: https://yrvdesign.com/terms/.