Privacy policy
Keepo values the privacy and security of your personal data. This Policy describes how we collect, use, store, share and protect information about Users and Visitors who use our services.
By accessing or using Keepo, you agree to the processing of your data in accordance with this Policy and applicable legislation, including Brazil’s General Data Protection Law (LGPD — Law no. 13,709/2018), the European General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).
1. Data controller
Keepo Tecnologia LTDA
CNPJ: 45.830.867/0001-02
Address: Rua Hermann Blumenau, no. 110, Centro, Florianópolis/SC, postal code 88020-020
Contact email: privacidade@keepo.bio
Keepo acts as the Data Controller and is responsible for decisions regarding the processing of the personal information collected.
2. Data collected
Keepo collects personal data directly (provided by you) and indirectly (generated automatically while you use the service).
2.1. Data provided by the User
- Full name or company name
- Email address
- CPF/CNPJ (where applicable)
- Payment and billing information
- Username and password
- Profile photo, links, text and other content you voluntarily add
2.2. Automatically collected data
- IP address
- Browser and operating system
- Device and unique identifiers
- Approximate location (geolocation)
- Date, time and duration of access
- Cookies, tags and tracking pixels
2.3. Third-party data
In some cases, we may receive data from payment providers, social networks or integrations you authorize (such as Google, Facebook, Instagram or TikTok).
3. Purposes of processing
Keepo collects and uses personal data for the following purposes:
- Creating and managing your account;
- Processing payments and issuing invoices;
- Providing technical support and customer service;
- Personalizing your experience on the platform;
- Sending administrative and marketing communications (when authorized);
- Complying with legal and regulatory obligations;
- Ensuring security and preventing fraud and abuse;
- Performing statistical analyses and improving the product.
4. Legal basis for processing
Data is processed on one or more of the following legal bases:
- Performance of a contract: when necessary to provide the contracted service;
- Consent: when you authorize use for communications, cookies and marketing;
- Compliance with a legal or regulatory obligation;
- Legitimate interests: when processing is necessary to prevent fraud, improve the service or protect the rights of the User and Keepo;
- Exercise of rights in judicial or administrative proceedings.
5. Data sharing
Keepo may share personal data with:
- Service providers and technical partners, such as hosting, email, analytics and payment providers (e.g. AWS, Google, Stripe, PagSeguro);
- Affiliates, parent companies or successors in the event of a corporate restructuring;
- Public authorities and regulatory bodies when required by law or court order;
- Marketing and advertising partners, only with the User’s consent.
We do not sell personal data to third parties, as prohibited by the CCPA (§1798.140(t)).
6. International data transfers
Your data may be stored on servers outside the User’s country of origin, in countries that guarantee a level of data protection equivalent to that required by the LGPD and GDPR. By using Keepo, you consent to this international transfer, subject to appropriate contractual safeguards (such as Standard Contractual Clauses — SCCs).
7. Retention and deletion
- Personal data is retained only as long as necessary to fulfill the purposes described in this Policy or as required by law.
- After this period, data is anonymized or securely deleted.
- The User may request early deletion of their data, as described in the rights section.
8. Data subject rights
Under the LGPD, GDPR and CCPA, the User has the right to:
- Confirm whether their data is being processed;
- Access the information we hold about them;
- Correct incomplete, inaccurate or outdated data;
- Request deletion, anonymization or portability of data;
- Withdraw consent at any time;
- Request information about sharing with third parties;
- Object to processing based on legitimate interests;
- File a complaint with the competent data protection authority.
Requests may be sent to privacidade@keepo.bio and will be answered within the applicable statutory time limits (up to 15 days under the LGPD; 30 days under the GDPR; 45 days under the CCPA).
9. Cookies and tracking technologies
Keepo uses cookies, pixels and similar technologies to improve platform performance, understand User behavior and personalize the experience. You can manage cookie preferences directly in your browser or in our privacy settings.
Types of cookies used:
- Essential: necessary for the website’s basic operation.
- Analytics: used to understand service usage and improve the product.
- Marketing: used to personalize ads and measure campaign performance (with consent).
10. Information security
We adopt technical and administrative security measures consistent with industry standards, including:
- Encryption at rest and in transit;
- Access controls based on least privilege;
- Multi-factor authentication;
- Continuous monitoring and log audits;
- Redundant backups across multiple locations.
In the event of a security incident that may result in significant risk or harm, Keepo will notify the competent authority and affected data subjects as required by law.
11. Data Protection Officer (DPO)
Name: Bruno Resendes
Email: privacidade@keepo.bio
Jurisdictions covered: Brazil (LGPD), the European Union (GDPR) and the United States/California (CCPA).
12. Changes to this Policy
- Keepo may update this Policy periodically.
- Significant changes will be notified at least 30 days in advance.
- Continued use of the Service after the new terms take effect constitutes full acceptance.
Keepo Tecnologia LTDA
Contact: contato@keepo.bio
Privacy: privacidade@keepo.bio