Privacy Policy

This Privacy Policy describes how the MMMV na Estrada website collects, uses, shares and protects your personal data, in accordance with the Lei Geral de Proteção de Dados (LGPD — Lei nº 13.709/2018), the Brazilian data protection law.

1. Data controller

João Paulo Araújo Fontes, ME (Brazilian sole-proprietor company), registered under CNPJ 23.401.728/0001-20, trading as Meu Mundo Minha Vida, headquartered in Jundiaí/SP, is the Controller of the personal data processed on this website.

Contact channel for the Data Protection Officer (Encarregado/DPO): parceriasmotorhomemmmv@gmail.com.

2. Data we collect

2.1 Pixel buyers (Client)

• Identification: full name (individual) or corporate name (legal entity)
• Contact: e-mail and WhatsApp
• Tax: CPF (Brazilian individual taxpayer ID) or CNPJ (company taxpayer ID) — required to issue the invoice
• Submitted artwork: logo, image or text that becomes the printed pixel
• Website/URL: link to the Client's brand (optional)
• Access and consent: IP address, browser user-agent, date/time the Terms were accepted, version of the Terms accepted
• Payment: handled entirely by Asaas; we do not store card data

2.2 General site visitors

• IP address and user-agent in server logs (Vercel)
• Strictly necessary cookies (admin panel login session, cookie consent preference)

We do not use Google Analytics, Facebook Pixel or third-party advertising trackers.

3. Why we use your data (purposes + legal basis)

1. Performance of the contract (LGPD art. 7, V): creating and managing your pixel order, processing payment, producing the sticker, sending status updates over WhatsApp.
2. Compliance with legal/tax obligations (LGPD art. 7, II): issuing the NFS-e, retaining tax data for 5 years as required by Brazilian tax legislation.
3. Legitimate interest (LGPD art. 7, IX): fraud prevention (validation of CPF/CNPJ with the payment platform), platform security, keeping access logs.
4. Consent (LGPD art. 7, I): sending future communications (newsletter, news about the next trip) — requested separately and revocable at any time.

4. Who we share it with

We share your data only with processors strictly necessary to provide the service:

• Asaas Internet Payments S.A. (CNPJ 19.540.550/0001-21) — payment processing and NFS-e issuance.
• Supabase Inc. — database and storage of the artwork files. Servers in the United States, under standard data protection clauses accepted by the ANPD (Brazil's national data protection authority).
• Vercel Inc. — website hosting. Servers in the United States and Europe, under standard protection clauses.
• WhatsApp messaging provider (e.g. Z-API) — sending the transactional messages about your order.

We do not sell your data. We do not share your data for third-party advertising or commercial purposes.

5. International data transfers

As described above, data may be processed on servers outside Brazil (Supabase and Vercel host partly in the United States). We ensure these processors offer an adequate level of protection, as required by art. 33 of the LGPD, through standard contractual clauses and international certifications (SOC 2, ISO 27001).

6. How long we keep it

1. Tax data (invoice, CPF/CNPJ tied to the order): 5 years, as required by Brazilian tax legislation.
2. Submitted artwork and order data: throughout the trip tied to the campaign + 6 months after it ends (for evidence and dispute purposes).
3. Access and security logs: 12 months (art. 15, §1 of Lei 12.965/2014 — Marco Civil da Internet, the Brazilian internet civil rights framework).
4. Marketing/newsletter data: until consent is withdrawn.

7. Your rights (LGPD art. 18)

You are entitled, free of charge and at any time, to:

1. confirm that your data is being processed;
2. access the data we hold about you;
3. correct incomplete, inaccurate or outdated data;
4. request the anonymisation, blocking or deletion of unnecessary or excessive data, or data processed in breach of the law;
5. request the portability of your data to another provider;
6. delete data processed on the basis of your consent (processing based on other legal grounds is preserved);
7. obtain information about who we share your data with;
8. withdraw consent at any time;
9. file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD, the Brazilian data protection authority) if you believe your rights have been violated.

8. How to exercise your rights

Send an e-mail to parceriasmotorhomemmmv@gmail.com with the subject line "Direitos LGPD" (LGPD rights), stating which right you wish to exercise. We reply within 15 days (the statutory deadline). We may ask for proof of identity to avoid acting on fraudulent requests.

9. Cookies

We use strictly necessary cookies to:

• keep you signed in to the admin panel (where applicable);
• remember your cookie consent preference;
• keep the checkout state while you have not completed the purchase (15 min).

We do not use advertising or third-party tracking cookies. You can disable all cookies in your browser settings, but some features may stop working.

10. Security

We apply reasonable technical and administrative measures:

• traffic over HTTPS (TLS 1.2+);
• database protected by Row Level Security (Supabase) — each user only sees what they are allowed to;
• admin panel protected by real authentication (e-mail + password + admin profile check);
• payments processed in Asaas's isolated environment — we neither transmit nor store card data;
• access logs and audit trail for sensitive operations (order creation and approval).

Despite every measure, no system is 100% immune. Report any suspected breach immediately to the contact above.

11. Children and adolescents

This service is intended for people over 18. We do not knowingly collect data from children or adolescents. If a guardian identifies that a minor's data has been collected, they should contact us for immediate deletion.

12. Changes to this Policy

We may update this Policy at any time. Relevant changes will be flagged at the top of this page with the date of the last update. Active orders remain governed by the Policy in force on the date of the contract.

13. Jurisdiction

The courts of the judicial district (comarca) of Jundiaí/SP, Brazil, are elected to settle any dispute arising from this Policy, without prejudice to consumer protection rights under the Código de Defesa do Consumidor (CDC, the Brazilian Consumer Protection Code).

Last updated: May 29, 2026 · Version 2026-05-29