This notice summarizes the Privacy Policy of DBDIRETO TECNOLOGIA DA INFORMAÇÃO LTDA (CNPJ 11.169.610/0001-30), São Paulo, Brazil. The full policy is available in Portuguese (Política de Privacidade, last updated April 30, 2023). If there is any difference between the two, the Portuguese version prevails.

Data we collect

  • Contact form: your name, phone number, email address, company and the message you send us.
  • Access logs: the IP address and the date and time of your access, which Brazilian law (Law 12,965/2014) requires us to keep. We share them with third parties only with your express authorization or by court order.
  • Communications: when you contact us, the content of the communication and its metadata, such as date, time and IP address.
  • Cookies: text files stored in your browser or device by websites, applications and online ads.

How we use your data

  • To answer your request and send you messages about support, our products and services, news and events that may interest you.
  • To comply with legal obligations.
  • To detect and prevent fraud, spam and security incidents.
  • To verify the information you provide, including by comparing it with other sources.
  • For any other purpose you authorize when the data is collected.

Any use of your data outside your legitimate expectations requires your prior authorization.

Sharing

We do not share or sell client data to third parties. We will provide data when required by a court order. If dbdireto is sold, acquired or merged with another company, the data we hold may be transferred as part of the company's assets.

Data in our lookup services

Our lookups use business information that is publicly available on government portals. The response to each lookup is not stored after it is returned to the client; we keep only the access log for auditing. Data privacy terms with clients are set out in our Data Privacy Agreement.

Retention and security

We keep personal data only while it is needed for the purposes above, for the periods required by law or to protect our legitimate interests, and we delete it at your request unless the law requires us to keep it. We use SSL encryption, access is restricted to authorized staff, and our employees are bound by contractual confidentiality obligations. No system is completely immune to unauthorized access, but we make every reasonable effort to protect your data. If a security incident affects your data, we will notify you as required by article 48 of the LGPD.

Your rights

Under the LGPD you can request access to your data, correction, deletion, anonymization, blocking, and portability to you or a third party you name. You can also object to the processing and withdraw your consent at any time. We aim to answer every request within 15 days; complex requests may take longer, and we will keep you informed.

Data Protection Officer

We have an appointed Data Protection Officer (Encarregado). Data subject requests and contact with the DPO go through our Privacy Portal (in Portuguese), maintained in partnership with DPOnet, or by email at contato@dbdireto.com.br.

Governing law and updates

This notice and our Privacy Policy are governed by Brazilian law, and the courts of the city of São Paulo, State of São Paulo, have jurisdiction over any related disputes. We may update the policy whenever necessary. This English summary was last reviewed in October 2026.