Personal Data processed for the following purposes and using the following services:

• • Access to third-party accounts

    • Facebook account access

      Permissions: Email

  • Advertising

    • Google AdSense and Google Ads conversion tracking

      Personal Data: Trackers; Usage Data

    • Google Ads enhanced conversions

      Personal Data: address; contact details; email address; first name; last name; phone number; Trackers

  • Collection of privacy-related preferences

    • iubenda Consent Database

      Personal Data: Data communicated while using the service; Trackers

  • Commercial affiliation

    • AliExpress Affiliate

      Personal Data: Trackers; Usage Data

  • Displaying content from external platforms

    • Google Fonts and Google Programmable Search Engine with AdSense

      Personal Data: Trackers; Usage Data

    • YouTube IFrame Player

      Personal Data: Usage Data

  • Handling payments

    • Mercado Pago

      Personal Data: billing address; email address; first name; last name; payment info; Trackers; Usage Data

  • Heat mapping and session recording

    • Hotjar Heat Maps & Recordings

      Personal Data: Trackers; Usage Data; various types of Data as specified in the privacy policy of the service

  • Hosting and backend infrastructure

    • DigitalOcean and Heroku

      Personal Data: various types of Data as specified in the privacy policy of the service

  • Managing contacts and sending messages

    • Amazon Simple Email Service (SES)

      Personal Data: email address

  • Platform services and hosting

    • Shopify

      Personal Data: email address; first name; last name; Usage Data

    • Cartpanda and Yampi

    • Amazon Appstore

      Personal Data: Usage Data

  • Registration and authentication

    • Facebook Authentication

      Personal Data: Trackers; various types of Data as specified in the privacy policy of the service

    • Google OAuth

      Personal Data: various types of Data as specified in the privacy policy of the service

    • Gmail permissions to access User Data (OAuth addition)

      Personal Data: Read only access

  • Registration and authentication provided directly by this Application

    • Direct registration

      Personal Data: company name; email address; password; phone number

  • Tag Management

    • Google Tag Manager

      Personal Data: Usage Data

Information on opting out of interest-based advertising

In addition to any opt-out feature provided by any of the services listed in this document, Users may learn more on how to generally opt out of interest-based advertising within the dedicated section of the Cookie Policy.

Further information about the processing of Personal Data

• • Tratamento de dados da Amazon (SP-API)

    A Dropi coleta e trata dados obtidos via Amazon Selling Partner API somente na medida necessária à operação autorizada pelo usuário (lojista/vendedor), em especial sincronização de pedidos, fulfillment e, quando aplicável, emissão fiscal.
    
    Coleta e uso: Dados do pedido e do destinatário (incluindo informações de identificação pessoal — IIP) são lidos da Amazon apenas quando forem necessários ao processamento do pedido. Em particular, dados fiscais e de identificação do consumidor final (como CPF, nome e endereço) são utilizados para emissão de nota fiscal somente quando o lojista operar com CNPJ e houver integração ativa de emissão fiscal/ERP compatível. Nesses casos, o tratamento limita-se a viabilizar a NF-e e o fluxo logístico do pedido.
    
    Lojista pessoa física (CPF) na Amazon: Quando o lojista autorizado for CPF (pessoa física), as informações de identificação pessoal (IIP) do consumidor provenientes da Amazon não serão armazenadas em nossos sistemas. Nesses cenários, eventuais leituras pontuais — se ocorrerem — não resultam em persistência de IIP na plataforma Dropi.
    
    Compartilhamento: Quando houver necessidade operacional e autorização do usuário, dados do destinatário poderão ser compartilhados exclusivamente com sistemas do próprio fornecedor/lojista (por exemplo, ERPs e ferramentas de emissão fiscal ou transporte integrados à Dropi), somente para fulfillment e obrigação fiscal do pedido. Não vendemos nem compartilhamos dados da Amazon para marketing de terceiros.
    
    Armazenamento e retenção: Dados do consumidor final mantidos na plataforma em decorrência do fluxo autorizado são apagados após 3 (três) meses, contados do registro/processamento do pedido, ressalvadas obrigações legais de retenção em sentido contrário, quando existentes.
    
    Descarte: Ao término do prazo de retenção, os dados do consumidor são eliminados ou anonimizados de forma a não permitir identificação, de acordo com nossos procedimentos internos de exclusão.
    
    Segurança: Adotamos medidas técnicas e organizacionais adequadas para proteger os dados da Amazon contra acesso não autorizado, perda ou uso indevido, restringindo o acesso a quem precisa para executar as finalidades acima.

  • localStorage

    localStorage allows this Application to store and access data right in the User's browser with no expiration date.

  • sessionStorage

    sessionStorage allows this Application to store and access data right in the User's browser. Data in sessionStorage is deleted automatically when the session ends (in other words, when the browser tab is closed).

  • Transfer of personal information outside of Brazil to countries that guarantee the same protection standards as LGPD

    We can transfer your personal information outside of the Brazilian territory, if the destination country, or the international organization which receives the personal information, provides an adequate level of protection of the personal information according to the ANPD.
    The ANPD authorizes such transfers whenever it considers that country to possess and provide personal information protection standards comparable to those set forth by the LGPD, having taken into account the following:

    • the general and sectoral rules of the legislation in force in the country of destination or in the international organization;
    • the nature of the personal information subject to the transfer;
    • the compliance with the general principles on the protection of the personal information and on the rights of the individuals as set forth in the LGPD;
    • the adoption of suitable security measures;
    • the existence of judicial and institutional guarantees for the respect of personal information protection rights; and
    • any other pertinent circumstance related to the relevant transfer.

  • Personal Data collected through sources other than the User

    The Owner of this Application may have legitimately collected Personal Data relating to Users without their knowledge by reusing or sourcing them from third parties on the grounds mentioned in the section specifying the legal basis of processing.
    Where the Owner has collected Personal Data in such a manner, Users may find specific information regarding the source within the relevant sections of this document or by contacting the Owner.

Contact information

• • Owner and Data Controller

    EMPREENDER EXPERIÊNCIAS DIGITAIS LTDA
    Al Leblon, 15 , Sala 2008 - Barueri - SP, 06472-003

    Owner contact email: suporte@empreender.com.br