antecenaVersion v0 — under legal review · published 2026-10-10
Privacy Policy
This is a translation. If it differs from the Portuguese version, the Portuguese version prevails.
This policy explains which personal data Antecena's website and license server process. It follows Brazil's General Data Protection Law (LGPD, Law 13,709/2018).
1. Controller
RAG CI - Consultoria Inteligente Empresarial Ltda, CNPJ 12.436.934/0001-50, Av. Senador Vergueiro, 2123, andar 12, Centro, São Bernardo do Campo/SP, CEP 09750-001, Brasil (“RAG CI”, “we”) is the controller of the data described here. Data protection officer: to be appointed, contato@mail.artesanatodigital.com.
2. Not covered: your guests' data
Guest data (form answers, dossier, rundown, script) stays in the host's account: their Google Sheet and their files. The host is the controller of that data and we do not store it. When the paid layer processes content, it does so transiently and returns the result without storing it.
3. What we process
| Data | Purpose | Legal basis (LGPD) |
|---|---|---|
| Email of the buyer or seat holder; plan and subscription status; billing identifiers (subscription, transaction, customer) | License, send the key and support you | Performance of contract (art. 7, V) |
| Cryptographic hash of the license key and device identifier; usage counts per month and feature | Enforce plan limits | Performance of contract (art. 7, V) |
| Free-plan visitor: keyed hash (HMAC) of the IP, never the IP in clear | Measure the free quota and prevent abuse | Legitimate interest (art. 7, IX) |
| License tax records | Tax obligations | Legal obligation (art. 7, II) |
| Messages you email us | Reply | Performance of contract or pre-contract steps (art. 7, V) |
A keyed hash is pseudonymisation, not anonymisation: it is still personal data. We do not store: the content you process; the license key in clear; HTTP headers in logs.
4. This website
The site uses no first-party cookies and no analytics or advertising tools. It loads fonts from Google Fonts, and the hosting provider (Vercel) logs technical access data such as IP and browser for security. When you click subscribe, the site loads the Paddle checkout, which processes your payment data under Paddle's privacy policy and may set its own cookies for fraud prevention.
5. Who we share with
- Paddle (Paddle.com Market Ltd., United Kingdom), reseller and merchant of record.
- Resend (USA), transactional email, only to send the key and account messages.
- Vercel (USA), hosting for the site and server.
- Supabase, license database hosted in the São Paulo region (sa-east-1).
We do not sell personal data.
6. International transfers
Paddle, Resend and Vercel may process data outside Brazil (United Kingdom and United States), and Supabase is a foreign company even though the database is in São Paulo. These transfers rely on art. 33 of the LGPD, such as contractual clauses with the providers; the final legal basis is under legal review.
7. Retention
Usage and free-visitor records: 13 months. Data of an ended license: 5 years, for tax obligations. Contact messages: for as long as the request and the applicable legal period last.
8. Your rights
You may request confirmation, access, correction, anonymisation or deletion, portability, information about sharing and withdrawal of consent (LGPD art. 18; GDPR rights where applicable) at contato@mail.artesanatodigital.com. We reply within 15 days. You may also complain to Brazil's data protection authority (ANPD) or your local authority.
9. Security
The license key is stored only as a hash, database access is restricted and traffic is encrypted (HTTPS).
10. Changes
We publish changes on this page with a new date and version and notify you by email when relevant.