Privacy Policy

This Privacy Policy describes how Shard Cloud Hospedagem de Sites e Tratamento de Dados LTDA, registered under CNPJ 69.043.274/0001-64 and located at Rua Pais Leme, 215, Conj. 1713, Pinheiros, São Paulo/SP, 05424-150, Brazil ("Shard Cloud", "we", "us"), collects, uses, and protects your personal information when you use our cloud hosting services.

We collect information that you provide directly, such as your name, email address, CPF/CNPJ or other billing identification, phone number, account information, and the billing or payment information necessary to process a transaction. We also collect information automatically, such as usage data, access and security logs, IP address, device and browser information, session identifiers, and data collected through cookies and similar technologies.

We use your information to: (a) provide and improve our services; (b) process payments and communications; (c) ensure security and prevent fraud; (d) comply with legal obligations; (e) send important updates about our services.

We process personal data to perform our contract with you and take steps related to your request before contracting, to comply with legal and regulatory obligations, and to exercise or defend legal rights. We also process limited data when necessary for the legitimate interests of maintaining the security, integrity, and reliability of our services, including fraud prevention and abuse protection. Where consent is the applicable legal basis, you may withdraw it by contacting [email protected].

We do not sell your personal information. We share the minimum data necessary with the following providers: (a) Efí Pay and Asaas, to process payments and related billing activities; (b) Google reCAPTCHA, to protect our forms and services against automated abuse; and (c) Meta Pixel, when enabled, to measure the performance of our advertising campaigns. Meta may receive cookie, browser, device, IP address, and website-interaction data for this purpose. We may also disclose data when required by law or to protect the security, rights, and integrity of Shard Cloud, our users, or third parties. Backups are managed by Shard Cloud itself. We do not send customer or account data to third-party AI or email providers.

Shard Cloud acts as controller for personal data used to manage accounts, billing, security, and marketing. For personal data that a customer stores or processes through Shard Cloud hosting services, Shard Cloud acts as operator and processes that data only in accordance with the customer's instructions and applicable law. The customer remains responsible for determining the purpose and legal basis for its processing of that data.

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction.

We retain customer-hosted data and service data while the customer has an active paid subscription. When the subscription ends, we delete the related user data. We may retain a limited user-account object for no more than 3 years after the subscription ends and fiscal records for 5 years from their creation. We may retain data for a longer period only when required by law or necessary to establish, exercise, or defend legal claims.

Shard Cloud's cloud infrastructure, Google reCAPTCHA, and Meta Pixel may process the personal data described in this Policy in the United States. When an international transfer is required, Shard Cloud will use a transfer mechanism and safeguards permitted by applicable Brazilian data-protection law.

Subject to the limits and exceptions in applicable law, you may request: confirmation that we process your data; access to it; correction of incomplete, inaccurate, or outdated data; anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data; portability; deletion of data processed on the basis of consent; information about public and private entities with which we share data; information about the option not to provide consent and its consequences; withdrawal of consent; and objection to processing that does not comply with applicable law. Where applicable, you may also request review of decisions made solely by automated processing that affect your interests. To exercise these rights, contact [email protected].

We use cookies and similar technologies to maintain essential functionality, protect our forms and services against abuse, and improve your experience. When Meta Pixel is enabled, it may create marketing cookies such as _fbp and _fbc, which are retained for up to 90 days, to measure advertising campaigns. You can control cookies through your browser settings; blocking essential cookies may affect site functionality.

We may update this Privacy Policy periodically. For changes that materially reduce your rights or increase your obligations, we will provide at least 30 days' notice through our website or by email. We recommend that you review this policy regularly.

For questions about this Privacy Policy, requests concerning your personal data, or the exercise of your privacy rights, contact us at [email protected]. You may also contact us through the official support channels available on our website.