This Privacy Policy explains, transparently, how IOPAY processes personal data related to the access and use of its websites, platforms, products, services, support channels, registration processes and other interactions with users, customers, representatives, partners and visitors.
1. Who we are
IOPAY S/A INSTITUIÇÃO DE PAGAMENTO, registered under CNPJ No. 19.786.646/0001-74, headquartered at Av. Nove de Julho, 4877, 2nd Floor B, Jardins, São Paulo/SP, offers infrastructure, technology and solutions for payment operations.
2. What data we may process
Depending on the relationship maintained with IOPAY, we may process registration and identification data, contact data, professional and business information, data required for registration and verification processes, technical and security records, IP address, device identifiers, browsing information, access logs and data related to interactions carried out with our products and channels.
When necessary for the provision of services, compliance with legal or regulatory obligations, fraud prevention and operational security, other categories of data may be processed according to the applicable purpose and legislation.
3. For what purposes we use personal data
- to provide, operate, maintain and improve our products and services;
- to carry out registration, authentication, validations and security controls;
- to provide support and respond to requests;
- to prevent fraud, abuse, incidents and unauthorized access;
- to comply with legal, regulatory and contractual obligations and orders from competent authorities;
- to keep audit, security, support and operational records;
- to carry out technical, statistical and performance analyses;
- to send communications related to products and services and, where applicable, commercial communications;
- to protect the rights of IOPAY, its customers, users, partners and third parties.
4. Legal bases
Processing may be based on the legal bases set out in Law No. 13.709/2018, including, as applicable, performance of a contract or preliminary procedures, compliance with a legal or regulatory obligation, regular exercise of rights, legitimate interest, fraud prevention and protection of the data subject's security, credit protection and consent.
5. Data sharing
Data may be shared, when necessary, with providers of technology, infrastructure, security, fraud prevention, storage, customer support, analytics, financial institutions, banks, acquirers, merchant accreditors, payment institutions, payment schemes and other participants or providers involved in delivering the contracted solutions.
Sharing may also occur when necessary to comply with a legal or regulatory obligation or an order from a competent authority, or for the regular exercise of rights.
6. Storage and retention
Data is kept for the period necessary to fulfill the purposes for which it was collected, observing the applicable legal and regulatory deadlines, audit needs, fraud prevention, security, defense of rights and other cases authorized by law.
7. Security
IOPAY adopts technical, administrative and organizational measures designed to protect personal data and the environments under its responsibility, considering the nature of the information, the risks involved and the characteristics of the operations carried out.
8. Cookies and similar technologies
The site uses cookies and similar technologies for essential functionality and, according to user preferences, for analytics, performance and marketing. Preferences can be changed at any time through the Cookie Preferences option available in the site footer.
9. Data subject rights
Under applicable law, the data subject may request, among other rights applicable to the case, confirmation of the existence of processing, access, correction, information about sharing, anonymization, blocking or deletion where applicable, portability under the regulations, objection where applicable and withdrawal of consent.
10. How to contact us
Requests related to privacy and data protection may be sent through IOPAY's official channels:
11. Updates to this policy
This Policy may be updated to reflect legal, regulatory, technological or operational changes, or changes related to IOPAY products and services. The current version will be made available through the company's official channels.
