Skip to content
LGPD

Subprocessors

The companies that receive personal data so that LGPD works: why, which data and in which country.

Servers we operate

  • Purpose: operate shared services and visit analysis.
  • Data: the data described in this privacy policy.
  • Country: Brazil; a backup copy of account, organization registry and billing data in Europe (Germany); the copy of visit data kept for analysis, without IP or account, in Europe.

Amazon Web Services (Amazon SES)

  • Purpose: deliver account messages.
  • Data: recipient address and message.
  • Country: Brazil (São Paulo).

Google (sign-in)

  • Purpose: sign-in with a Google account, when you choose it.
  • Data: the name, e-mail and photo of the Google account, which Google sends us.
  • Country: United States.

Asaas Gestão Financeira Instituição de Pagamentos S.A.

  • Purpose: payments in Brazilian reais (Pix, boleto and card).
  • Data: the payer's name, CPF or CNPJ and e-mail; for cards, the card details, postal code, address number, phone and IP address.
  • Country: Brazil.

Stripe

  • Purpose: card payments from outside Brazil, in US dollars.
  • Data: the e-mail, billing address and card details, typed on Stripe's page; from us, the amount, the product and the charge code.
  • Country: United States.

Coinbase Developer Platform (CDP)

  • Purpose: verify and settle x402 payments on the Base network.
  • Data: the wallet address, amount, signed authorization and paid route.
  • Country: United States.

Amazon Web Services (AWS)

  • Purpose: host the production LGPD application, store its daily backup copy and provide domain DNS through Amazon Route 53.
  • Data: application data described in this policy; DNS receives no account or application usage data.
  • Country: Brazil (São Paulo), for the application and its backup copy.

Changes to this list

A new subprocessor enters this list in the same product version that starts to use it.

Last updated: 13 November 2026.