Privacy Policy
1. Controller and contact
Weboption Web Design e Treinamento Sociedade Unipessoal LTDA (CNPJ 45.595.786/0001-75), headquartered in Florianópolis/SC, is the controller of the personal data processed by WebVyze. Data Protection Officer (DPO) and data subject requests: [email protected].
2. Data we process
Registration data (name, email, hashed password), data on registered accounts and websites, usage records (audits, credits, actions on issues), payment data processed by Stripe (we do not store cards), emails and names provided in the free check, and anonymous metrics from the real-user data widget (no cookies, no IP, no personal identifier).
3. Purposes and legal bases (LGPD art. 7)
Performance of the contract (providing the service, billing, support); compliance with a legal obligation (tax records); legitimate interest (security, fraud and abuse prevention, service improvement); consent (contact after the free check, confirmed by email). LGPD refers to Brazil's General Data Protection Law.
4. Sharing
Stripe (payments), email provider (system messages), cloud infrastructure, and the integrations you connect yourself. Leads from a free check made through an agency's link are shared with that agency, after your confirmation. We do not sell personal data.
5. Retention
Raw audit data: 90 days (results and issue history are kept while the account exists). Unconfirmed free-check email: 7 days. Confirmed leads: up to 24 months or until a deletion request. Account data: until the account is deleted, unless a legal obligation applies.
6. Your rights (LGPD art. 18)
Confirmation and access, correction, anonymization or deletion, portability, information about sharing, and withdrawal of consent. In the app: Account › Privacy (download your data and delete a user or the account). Other requests: through the contact above, answered within 15 days.
7. Security
Encryption in transit (HTTPS) and of secrets at rest, hashed passwords, isolation between accounts, an analysis browser isolated from the internal network, logs of administrative actions, and the principle of least privilege.
8. Cookies
We use only essential session and CSRF protection cookies. We do not use advertising or tracking cookies. The widget installed on customer websites does not set cookies or use local storage.
9. International transfer
Some providers (e.g., Stripe, cloud) may process data outside Brazil, with appropriate contractual safeguards (LGPD art. 33).
10. Changes
Version 2026-09-27. Material changes will be announced in the app and by email.