Privacy Policy

Controller: WideMedia AI Group Ltda. (CNPJ 09.445.807/0001-02)
Head office: R. Madre Rita Amada de Jesus, 106, Granja Julieta, São Paulo/SP, CEP 04721-050
Data Protection Officer (DPO): WideAds Privacy Team
DPO contact: [email protected]

Under Art. 41 of the LGPD, the DPO is responsible for receiving complaints, providing clarifications to data subjects and to the National Data Protection Authority (ANPD), and advising on data protection practices.

We collect the following categories of personal data:

2.1 Registration Data (Partner / Retailer)

• Full name
• Email
• Phone (optional)
• Establishment name (optional)
• CNPJ (when applicable)
• Bank details for payouts: Pix key type, Pix key, bank

2.2 Registration Data (Advertiser)

• Contact name, professional email, phone
• Company name, CNPJ, website, sector/industry
• Advertiser type (agency, brand, direct)

2.3 Platform Usage Data

• IP address, user-agent, access logs
• Navigation and platform interaction data
• Campaign, impression, and delivery records

2.4 Payment Data

• Processed by Stripe (payment gateway). WideAds does not store credit card data.
• Pix key data for partner payouts.

• Service provision: Managing accounts, campaigns, media delivery, and financial payouts.
• Platform improvement: Aggregated usage analysis and performance statistics (e.g., WideAds Score).
• Security: Detecting and preventing fraud, abuse, and unauthorized access.
• Communication: Sending transactional notifications (confirmations, invoices) and, where authorized, promotional communications.
• Legal obligations: Compliance with tax, accounting, and regulatory requirements.

Your personal data may be shared with:

• Stripe Inc. — Payment processing (PCI-DSS compliant payment gateway).
• Infrastructure providers — Hosting and CDN to ensure platform availability.
• Validation services — CNPJ validation with the Brazilian Federal Revenue Service.
• Competent authorities — When required by law, regulation, or court order.

We do not sell, rent, or share your personal data for third-party marketing purposes.

• Encrypted connections via TLS 1.2/1.3 (HTTPS mandatory).
• Passwords stored with cryptographic hashing (bcrypt, random salt).
• Security headers: HSTS, CSP, X-Content-Type-Options, X-Frame-Options.
• Rate limiting to protect against brute-force attacks.
• Role-based access control (RBAC): Partner, Advertiser, Administrator.

• Account data: Kept while the account is active. After account deletion, personal data will be erased within 30 days, except where legal retention obligations apply.
• Financial/tax data: Retained for the applicable legal period (minimum 5 years under Brazilian tax law).
• Security logs: Retained for up to 12 months for security and audit purposes.

You have the following rights regarding your personal data:

• Confirmation and access: Know whether we process your data and access a copy.
• Correction: Request correction of incomplete, inaccurate, or outdated data.
• Anonymization, blocking, or erasure: Request when data is processed in breach of the LGPD.
• Portability: Request transfer of your data to another provider.
• Data erasure: Request deletion of data processed based on consent.
• Information on sharing: Know which entities your data is shared with.
• Consent withdrawal: Withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 15 business days, as provided by the LGPD.

We use strictly necessary cookies for the platform to function (authentication and session). We do not use advertising or third-party tracking cookies for marketing purposes.

Some of our infrastructure and payment providers may be located outside Brazil. In such cases, we ensure the transfer occurs in accordance with the safeguards set out in the LGPD (Art. 33), including standard contractual clauses and adequacy certifications.

The WideAds platform is intended exclusively for persons over 18 years of age or legally emancipated. We do not intentionally collect data from minors. If we identify data from minors, it will be deleted immediately.

We may update this Privacy Policy periodically. We will notify registered users of significant changes by email or a notice on the platform. The date of the last update will always be indicated at the beginning of this document.

For questions, requests, or complaints related to privacy and data protection:

If you are not satisfied with our response, you may file a complaint with the National Data Protection Authority (ANPD) at www.gov.br/anpd.