EN
Log inClosed beta
FeaturesBecome a resellerPricingBlogAboutContact
Log inClosed beta

Privacy Policy

Updated on

1. About this policy

This policy explains how Painel Blend (“we”, “us”) handles personal data on the painelblend.com website, the distributor portal and the white-label panels, in line with Brazil’s General Data Protection Law (Law No. 13,709/2018 – LGPD). We have written it plainly so you can understand what we do with your data and why.

2. Our roles: controller and processor

The LGPD distinguishes between who decides about data (controller) and who handles data on someone else’s behalf (processor, “operador”). Both situations exist at Painel Blend:

  • We are the controller of data about website visitors, people who fill in our forms (waitlist, closed beta, contact) and account holders, distributors and their login users (registration, billing, support, security).
  • We are the processor of the data account holders store in the panel about their own customers and resellers (for example, name, phone, username, expiration dates, payments). In this case the account holder decides and is the controller. We handle that data only to provide the Service and on the account holder’s instructions. If you are an end customer of a business that uses Painel Blend, please contact that business first to exercise your rights; we will help where appropriate.

3. Data we collect

Website forms (waitlist and closed beta): name, e-mail, WhatsApp number, company, the panel you currently use, approximate number of active customers, country, language (locale) and source (how you found us, such as the referring page or campaign).

Contact form: the data you provide, usually name, e-mail and your message.

Account and portal: registration data (name, e-mail, phone, company, tax ID when needed for invoicing), access data (password stored in protected form, 2FA settings), credit purchase and invoice history, support tickets.

Technical data: IP address, access date and time, browser and security and audit logs, used to protect the Service and to comply with Brazil’s Internet Civil Framework (Marco Civil da Internet).

Payments: card or bank details are handled directly by payment gateways; we receive only the confirmation and basic transaction information.

We do not ask for sensitive data and ask that you do not include it in free-text fields.

Purpose Legal basis (LGPD, art. 7)
Handle your waitlist or closed beta sign-up and tell you about the launch Consent and pre-contractual steps
Create and maintain your account, provide the Service and support Performance of contract
Billing, invoicing and tax obligations Performance of contract and legal obligation
Security, fraud prevention, access logs Legitimate interest and legal obligation
Improve the product and understand where interest comes from Legitimate interest
Send product news Consent or legitimate interest, always with an opt-out

We do not sell personal data and do not use it for third-party advertising.

5. Cookies and local storage

The Painel Blend website does not use tracking, advertising or third-party analytics cookies. We only use your browser’s local storage (localStorage) to remember your theme (light/dark) and language preferences. This stays on your device, does not identify you and can be cleared at any time in your browser settings. The panel and portal may use strictly necessary cookies or storage to keep you signed in and secure.

6. Who we share data with

We share data only with service providers (sub-processors) needed to operate, under contract and with confidentiality and security obligations:

  • Hosting, infrastructure and content delivery, including Cloudflare and cloud providers;
  • Payment gateways, to process Pix and other payment methods;
  • E-mail providers, for transactional messages and alerts;
  • WhatsApp integration providers, when you or the account holder turns on those automations;
  • Support tools and, when enabled, artificial intelligence tools, used to answer tickets based on the knowledge base.

We may also share data with authorities when required by law or court order, or to defend our rights. A detailed list of providers is available on request through the contact below.

7. International transfers

Some providers, such as cloud providers and Cloudflare, may process data outside Brazil. In those cases we apply the safeguards set out in the LGPD (art. 33), such as contractual clauses, and choose providers with compatible protection standards.

8. How long we keep data

  • Waitlist and closed beta: until the end of the launch campaign or beta and for up to 24 months afterwards, or until you ask us to delete it.
  • Account data: while the account is active and, after closure, for as long as needed to meet legal and tax obligations (generally up to 5 years for tax records).
  • Access logs: at least 6 months, as required by the Marco Civil da Internet.
  • Data account holders store about end customers: according to the account holder’s instructions; after account closure it is deleted within 90 days, except for rotating backups, which expire on their own schedule.

9. Your rights

Under the LGPD (art. 18), you may request: confirmation that we process your data; access; correction of incomplete or outdated data; anonymization, blocking or deletion of unnecessary data or data processed unlawfully; portability; deletion of data processed based on consent; information about who we share it with; information about the option not to consent; withdrawal of consent; and review of automated decisions.

To exercise your rights, write to contato@painelblend.com. We may ask you to confirm your identity. We will reply within the legal deadline. You may also file a complaint with Brazil’s National Data Protection Authority (ANPD).

10. Security

We apply technical and organizational measures to protect data, including:

  • encryption in transit (HTTPS/TLS) across the website, portal and panels;
  • two-factor authentication (2FA) available for panel logins;
  • passwords stored using hashing algorithms, never in plain text;
  • role-based permissions, audit logs and inactivity logout;
  • isolation of each platform customer’s data;
  • regular backups and restore procedures.

No system is completely immune to failure. If a security incident occurs that may cause significant risk or harm, we will notify affected people and the ANPD as required by law.

11. Children and teenagers

The Service is intended for businesses and people aged 18 or over. We do not knowingly collect data from minors.

12. Changes to this policy

We may update this policy to reflect changes to the Service or the law. The last updated date is shown at the top of the page. Material changes will be announced on the website, by e-mail or in the panel.

13. Contact and privacy

You can also reach us through our contact page. See also our Terms of Use.