Privacy Policy

This policy explains what personal data we collect when you visit this website or buy a course, why we collect it, who else processes it and how you can exercise your rights. It is written to meet the Brazilian General Data Protection Law (LGPD, Law 13.709/2018), the Brazilian Internet Civil Framework (Law 12.965/2014), the EU General Data Protection Regulation (GDPR), the UK GDPR and, for California residents, the California Consumer Privacy Act (CCPA) where it applies.

Who is responsible for your data

The controller of your personal data is:

Seller	Leonardo Nogueira Vieira, trading as Skillfye
Legal status	Individual seller (pessoa física) resident in Brazil
Brazilian taxpayer number (CPF)	016.470.842-10
Address	R. Fradique Coutinho, 60, Pinheiros, São Paulo, SP, 05416-000, Brazil
Email	support@skillfye.com
Telephone	+55 11 97150-5773, Monday to Friday, 9:00 to 18:00 São Paulo time (UTC-3)
Website	https://skillfye.com
Card statement descriptor	SKILLFYE

Please send any privacy request to privacy@skillfye.com. As a small processing agent under ANPD Resolution CD/ANPD No. 2/2022 we are not required to appoint a data protection officer (encarregado), and Leonardo Nogueira Vieira handles these requests personally through that address, which is our official privacy channel.

What we collect and why

Data	Purpose	Legal basis	How long we keep it
Name, email address and billing country	To process your order, deliver the course, send your access link and answer you	Performance of a contract (LGPD art. 7, V; GDPR art. 6(1)(b))	5 years after the purchase, the period of Brazilian tax and consumer law
Payment details: amount, currency, date, card brand, last four digits, Stripe reference	To take payment, issue receipts and refunds, handle disputes and keep tax records	Contract and legal obligation (LGPD art. 7, II and V; GDPR art. 6(1)(b) and (c))	5 years
Proof of your checkout choices: acceptance of the terms and request for immediate delivery, with date and time	To show that the purchase and immediate delivery were requested by you	Legal obligation and legitimate interest (LGPD art. 7, II and IX; GDPR art. 6(1)(c) and (f))	5 years
Messages you send us, including through the contact and withdrawal forms	To answer, process your request and keep a record of what was agreed	Contract, or our legitimate interest in answering you (LGPD art. 7, V and IX; GDPR art. 6(1)(b) and (f))	5 years for refunds and complaints, 2 years for other messages
Technical logs: IP address, browser, date and page requested	Security, fraud prevention and fixing faults	Legitimate interest and legal obligation (LGPD art. 7, II and IX; Law 12.965/2014; GDPR art. 6(1)(f))	6 months
Measurement and advertising data, only if you accept them in the cookie banner	To see which pages work and whether our adverts lead to purchases	Your consent (LGPD art. 7, I; GDPR art. 6(1)(a))	As set by each provider, never more than 13 months

Your progress in a course (which lessons you marked as complete) and your access link are stored only in your own browser. We do not receive them.

What we never do

• We never see or store your full card number. Stripe handles it.
• We do not sell or rent personal data, and we do not share it for other companies' marketing.
• We do not make automated decisions that have legal or similarly significant effects on you.
• We do not collect sensitive personal data (LGPD art. 5, II; GDPR art. 9), and we ask you not to send it.
• We do not load advertising or measurement scripts unless you accept them in the cookie banner.

Who processes data for us

Provider	What it does	Location
Stripe, Inc. and its affiliates (including Stripe Brasil and Stripe Payments Europe)	Payment processing, refunds and fraud prevention. Stripe is also an independent controller for its own legal and fraud prevention duties	United States, Brazil, Ireland and other countries
Vercel Inc.	Hosting of this website and its server functions, technical logs	United States, with a worldwide delivery network
Resend (Plus Five Five, Inc.)	Sending the delivery email and replies to your messages	United States
Our email mailbox provider	Receiving and storing the messages you send us	United States or European Union
Our accountant, if we use one	Bookkeeping and tax returns required by Brazilian law	Brazil

Each provider may only use your data to provide its service to us, under a data processing agreement or a duty of professional secrecy.

International transfers

We are based in Brazil and some of our providers are in the United States and other countries. These transfers are necessary to perform the contract you asked for and rely on the safeguards the law recognises: standard contractual clauses (LGPD art. 33 and ANPD Resolution CD/ANPD No. 19/2024, and the European Commission's standard contractual clauses or the EU-US Data Privacy Framework for data from the EU). You can ask for more information at privacy@skillfye.com.

Emails we send

After a purchase we send transactional emails: the access link, the receipt and important notices about the course you bought. They are part of the service, so you cannot unsubscribe from them. We only send news about new courses if you have agreed, and every such email includes a one-click unsubscribe link, as the CAN-SPAM Act and the GDPR require.

Your rights

Under the LGPD (art. 18) and the GDPR you can ask us to:

• confirm whether we process your data and give you access to it;
• correct incomplete, inaccurate or out-of-date data;
• anonymise, block or delete data that is unnecessary, excessive or processed unlawfully;
• give you your data in a portable format;
• delete data processed with your consent, and withdraw a consent at any time, without affecting what was done before;
• tell you which entities we share your data with;
• restrict a particular use, or object to a use based on legitimate interest.

California residents also have the right to know, to delete and to correct, and the right not to be discriminated against for exercising them. We do not sell or share personal information for cross-context behavioural advertising as those terms are defined in the CCPA, unless you accept advertising cookies.

Send your request to privacy@skillfye.com from the email address you used to buy. We answer within 15 days, as LGPD art. 19 provides, and always within the one month allowed by the GDPR. It is free. If you ask us to delete your data, we can no longer confirm your purchase or resend your access link, and records we must keep by law, such as sales records, will be kept until the legal period ends.

Complaints

If you are unhappy with how we handle your data, please tell us first. You also have the right to complain to a supervisory authority: in Brazil the National Data Protection Authority (ANPD, gov.br/anpd), in the European Union the data protection authority of your country, and in the United Kingdom the Information Commissioner's Office (ico.org.uk).

Security

The site uses HTTPS on every page. Access links are digitally signed so they cannot be guessed or altered. Card data never reaches our servers. Access to our Stripe, hosting and email accounts is protected by two-factor authentication. If a security incident creates a relevant risk to you, we will notify the ANPD and the people affected within the deadlines set by the LGPD and ANPD Resolution CD/ANPD No. 15/2024, and, where the GDPR applies, the competent authority within 72 hours.

Children

Our courses are sold only to adults and this website is not directed at children or adolescents. We do not knowingly collect data from anyone under 18 (LGPD art. 14), and we comply with the US Children's Online Privacy Protection Act (COPPA) by not collecting any personal information from children under 13. If you believe a minor has sent us personal data, write to privacy@skillfye.com and we will delete it.

Changes to this policy

If we change this policy in a way that matters to you, we will tell customers by email before the change takes effect. The date at the top of this page shows the current version.