Privacy Policy

1. Who we are

Sincefy is a digital celebration service with photos, messages and memories, operated by the company registered under CNPJ (Brazilian company tax ID) 56.339.049/0001-28. It is the controller of the personal data described in this Policy. The contact for any privacy matter is at the end of this page.

2. Data we collect

We collect only what is needed for the service to work:

• Registration data: full name, mobile number, e-mail and password. The password is stored encrypted and irreversibly; not even we can see it.
• The content of your celebrations: the recipient’s name, title, dates and milestones, message, photos, audio, music and video links, the theme, the plan and the chosen privacy. A draft you have not paid for yet is also stored in your account.
• Access PIN: stored encrypted and irreversibly once the order is created. While the celebration is still a draft, the PIN is stored as you typed it, so it can be shown to you when editing.
• Payment data: name, e-mail and CPF or CNPJ (Brazilian tax ID) of the payer, the payment method (Pix or card), the amount, the payment status and, for cards, the brand and the last four digits. The full card number and the security code go straight from your browser to Stone and never reach us.
• Access data: IP address and browser (user agent) of each login attempt, to protect your account against improper access. On PIN-protected pages, we record the IP address and the number of wrong attempts, only to block excessive attempts; these records are deleted automatically after about a day.
• Preferences: the language you choose when signing up, used in the e-mails we send, and the language you choose for the page of each celebration.
• Browsing data: site usage statistics, collected by Google Analytics when it is active (see the section on cookies), and technical operation logs, such as requests and errors, which may include the IP address.

We do not ask for an address or a date of birth.

Photos have their location and camera data (EXIF) removed when uploaded. Whoever creates a celebration decides what to include in it, and may include data about other people, such as names and images; the responsibility for having the right to use them lies with the creator, as the Terms of Use say.

3. What is public and what requires access

An unlisted celebration can be opened by anyone who has the link, without an account. A PIN-protected celebration only opens for whoever knows the PIN. A public celebration can be seen by anyone and, if the creator authorizes it, also appears in the inspiration gallery and on the home page of the site, with the title, the recipient’s name, the message and the images.

Celebration pages are not indexed by search engines. Photos and audio are kept in a private storage area and are only shown through temporary addresses.

4. What we use your data for

We use your data to:

• create and maintain your account and deliver the service: store the draft, publish the celebration, generate the link, the QR Code and the card, and control the period and the edits (performance of the contract);
• process the payment and confirm the purchase (performance of the contract);
• send by e-mail the sign-up confirmation code, the password recovery code and the notice that your celebration is live (performance of the contract);
• protect your account and the platform against fraud and improper access (legitimate interest and fraud prevention);
• handle support requests and data rights requests (performance of the contract and legal obligation);
• contact you about your account, the service and Sincefy news (legitimate interest; you can ask us to stop at any time);
• understand how the site is used and improve it, with aggregate statistics (legitimate interest);
• comply with legal obligations, including tax obligations, and exercise rights in proceedings (legal obligation and regular exercise of rights).

We do not sell your data and do not use it for third-party advertising.

5. Who we share it with

We share data only with those who help us operate the service, under contract:

• Stone (Pagar.me): processing of Pix and card payments. It receives the payer’s data and the card data.
• Microsoft Azure: hosting of the site and the API, database, storage of photos and audio and sending of system e-mails (Azure Communication Services).
• Google Analytics: site usage statistics, when active.

The music and video links you add to the celebration (for example, from YouTube or Vimeo) take whoever opens the page to those services, which have their own privacy policies.

We may also share data when required by law or by a competent authority.

6. International transfer

Sincefy’s servers belong to Microsoft and may be located outside Brazil, and Google may process usage statistics outside Brazil. These transfers take place with providers that maintain data security and protection standards compatible with the LGPD.

7. How long we keep it

We keep your data for as long as your account exists. When you delete the account, we erase your registration data, draft, celebrations, orders, photos, audio and access history.

Photos and audio that are uploaded but never end up in a draft, celebration or order are deleted automatically after 48 hours. PIN attempt records are also cleaned automatically.

When a celebration expires, the content stops being displayed but remains stored while the account exists, so it can be renewed.

We only keep anything longer if the law requires it, such as payment and invoice data, for the period set by tax and consumer protection legislation.

8. Cookies and usage statistics

We use essential cookies: one to keep you signed in (lasts up to 7 days and is only read by our server), another, temporary (1 hour), to remember that you typed the right PIN of a protected celebration, and a language preference cookie (NEXT_LOCALE, lasts 1 year), which stores the language you chose on the site. Blocking the essential ones prevents login and the opening of PIN pages.

When active, Google Analytics sets cookies to measure visits and use of the site.

You can block or delete cookies in your browser settings.

9. Your rights

The LGPD guarantees you, at any time:

• confirmation that we process your data, and access to it;
• correction of incomplete or outdated data (your celebrations can be edited on the site, within the plan’s edit limit);
• a copy of your data;
• deletion of your account and its data: deletion erases your celebrations and is permanent;
• asking to stop receiving contact from Sincefy, and objecting to processing based on legitimate interest;
• knowing who we share your data with;
• filing a complaint with the Brazilian National Data Protection Authority (ANPD).

To exercise any right, write to the contact e-mail at the end of this page, with your account e-mail. We reply within 15 days.

If you appear in a celebration created by someone else and want the content removed, write to the same e-mail, with the link to the page.

10. Security

We use an encrypted connection (HTTPS), irreversibly encrypted passwords and PINs, limits on login and PIN attempts, media in a private area and restricted access to the database. No system is completely immune to failures; if an incident that may affect you occurs, we will notify you and the ANPD, as the LGPD requires.

11. Minors

Sincefy is not intended for people under 18 and we do not knowingly collect data from minors to create accounts. If we identify a minor’s account, we will delete it. Whoever creates a celebration with images or information of children must have the authorization of whoever is responsible for them.

12. Changes to this Policy

We may update this Policy. The date at the top of the page shows the version in force, and relevant changes will be announced by e-mail or on the site.

Get in touch

Questions, requests about your data or anything about this page: