Privacy Policy

1. Who we are

FidelizerX is a digital loyalty platform that connects businesses and their customers through digital loyalty cards.

Personal data controller:
FidelizerX
Email: contato@fidelizerx.com.br

2. Personal data we collect

When you use FidelizerX, we collect the following data:

• Full name
• Email address
• Phone number (optional)
• Profile picture (optional)
• Transaction history and accumulated points
• Loyalty cards and campaigns joined
• App usage data (access logs)
• Business data (for Business accounts): name, CNPJ (Brazilian company ID), address, category

3. Purpose of processing

Your data is used to:

• Create and maintain your FidelizerX account
• Enable collecting and redeeming points/stamps
• Connect customers to the loyalty programs of businesses
• Send notifications about your campaigns and rewards
• Keep the platform secure and prevent fraud
• Comply with legal and regulatory obligations

4. Legal basis (LGPD)

Processing of your data is based on the following legal grounds set out in the Brazilian General Data Protection Law (Law No. 13,709/2018):

• Consent (Art. 7, I): for sending communications and using optional data
• Performance of a contract (Art. 7, V): to provide the loyalty services
• Legitimate interest (Art. 7, IX): to improve the platform and prevent fraud
• Compliance with a legal obligation (Art. 7, II): when required by law

5. Data sharing

Your data may be shared with:

• Supabase (authentication and secure storage): supabase.com/privacy
• Stripe (payment processing, for businesses): stripe.com/privacy
• Public authorities, when required by law or court order

We do not sell, rent, or share your data with third parties for commercial purposes.

6. Retention and deletion

Your data is kept for as long as your account is active.

After the account is deleted:

• Personal data is permanently deleted within 30 days
• Transaction records may be kept for up to 5 years for tax and legal audit purposes, as required by Brazilian law

You can request deletion of your account at any time under Profile → Delete my account in the app.

7. Your rights as a data subject (LGPD)

Under the LGPD (Arts. 17–22), you have the right to:

• Confirmation: know whether we process your data
• Access: obtain a copy of your data
• Correction: update incomplete or incorrect data
• Anonymization, blocking, or deletion: of unnecessary data or data processed in breach of the law
• Portability: receive your data in a structured format
• Deletion: delete data processed on the basis of consent
• Information: know who we share your data with
• Withdrawal of consent: at any time, without affecting services provided before the withdrawal
• Petition to the ANPD: file a complaint with the Brazilian National Data Protection Authority

To exercise your rights, contact us at: contato@fidelizerx.com.br

8. Security

We apply technical and organizational measures to protect your data against unauthorized access, loss, or alteration, including:

• Encryption in transit (HTTPS/TLS)
• Secure authentication via Supabase Auth
• Role-based access control
• Servers hardened with strict security settings

9. Cookies and tracking

The mobile app does not use cookies. We use secure on-device storage (SecureStore) solely to keep your session authenticated. On the web platform and admin panel, we may use essential session cookies and local preferences to enable authentication and use of features (such as theme and language preference).

10. Changes to this policy

We may update this Policy from time to time. When that happens, you will be notified in the app/platform and will need to accept the new version to keep using FidelizerX.

The current version is 1.0, effective since May 24, 2026.