LGPD — Lei Geral de Proteção de Dados

Last updated: June 15, 2026

Introduction

This policy describes how Bruxus complies with the Brazilian Lei Geral de Proteção de Dados (LGPD — Law No. 13.709/2018). It applies to all personal data processing activities involving data subjects located in Brazil.

Data Controller

Bruxus LLC is the data controller for personal data collected through our platform. Contact our Data Protection Officer at dpo@bruxus.com.

We process personal data only under the following legal bases provided by the LGPD:

  • Consent — when you explicitly authorize processing for specific purposes
  • Contract fulfillment — when processing is necessary to deliver our services
  • Legal obligation — when required by applicable law or regulation
  • Legitimate interests — when processing is necessary for our legitimate business purposes, provided your rights are not overridden

Data Subject Rights

Under the LGPD, Brazilian data subjects have the right to:

  • Confirmation of the existence of data processing
  • Access to your personal data
  • Correction of incomplete, inaccurate, or outdated data
  • Anonymization, blocking, or deletion of unnecessary or excessive data
  • Data portability
  • Deletion of data processed with consent
  • Information about public and private entities with whom we share data
  • Revocation of consent

Data Processing Activities

We process personal data for the following purposes:

  • Account creation and management
  • Service delivery and support
  • Payment processing
  • Communication regarding platform updates
  • Security and fraud prevention
  • Analytics and platform improvement

International Data Transfers

Your personal data may be transferred to and processed in countries outside Brazil. We ensure adequate safeguards are in place, including standard contractual clauses and compliance with international data protection standards.

Data Retention

We retain personal data only as long as necessary for the purposes described in this policy, or as required by applicable law.

Security Measures

We implement technical and organizational measures to protect personal data, including encryption, access controls, and regular security audits.

Changes to This Policy

We will notify data subjects of material changes to this policy via email or through our platform.

Contact

For LGPD-related inquiries, contact our DPO at dpo@bruxus.com.