Privacy Policy

This Privacy Policy describes how BRYCKS (MATHEUS GOBETTI SILVA DESENVOLVIMENTO DE SOFTWARES LTDA, Brazilian tax ID 64.691.700/0001-52), operator of the Moovyi platform, collects, uses, stores, and shares personal data in compliance with the Brazilian General Data Protection Law (LGPD).

1. Who we are

Legal name: MATHEUS GOBETTI SILVA DESENVOLVIMENTO DE SOFTWARES LTDA. Trade name: BRYCKS. Tax ID (CNPJ): 64.691.700/0001-52. Address: Rua Pais Leme, 215, Unit 1713, Pinheiros, São Paulo/SP, Brazil, ZIP 05424-150. Phone: +55 (16) 99635-4165. General contact: contato@moovyi.com.

2. Roles

BRYCKS acts as Controller for Tenant data and as Processor for end-customer/lead data captured through the platform, where the Tenant is the Controller.

3. Personal data we collect

• Tenants: name, email, phone, CNPJ, address, access credentials, usage logs.
• Leads/End-customers: name, email, phone, CPF (stored encrypted with AES-256-GCM), date of birth, declared income, vehicle interest, IP address and user agent.
• Payments are processed directly by Stripe; full card numbers are never stored by BRYCKS.

4. Purposes

• Providing the SaaS services contracted by the Tenant.
• Billing, invoicing, and fraud prevention.
• Legal and regulatory compliance.
• Support and operational communications.

5. Legal bases

Contract performance, consent (where required), legitimate interest (security and product improvement), and compliance with legal obligations.

6. Sharing with processors

We share data strictly as needed with: Stripe (payments), Supabase (database + auth), AWS S3 (file storage), Resend (email), Vercel (hosting), Google Maps, ViaCEP/ReceitaWS/FIPE/API Brasil (Brazilian reference data), and, optionally, Mercado Livre, OLX and Webmotors (vehicle listing portals).

7. International transfer

Some processors are located outside Brazil. Transfers are carried out under article 33 of the LGPD and ANPD Resolution CD/ANPD No. 19, of August 23, 2024, relying on the Standard Contractual Clauses (SCCs) approved by ANPD executed with each processor or, where applicable, on Binding Corporate Rules approved by the Authority. In case of conflict between this document and the SCCs, the SCCs shall prevail.

8. Retention

Data is retained while the contract is in effect or as required by law. Each Tenant may configure retention policies for its leads/end-customers in the admin panel.

9. Data subject rights

Under LGPD article 18, data subjects may request confirmation of processing, access, correction, anonymization/deletion, portability, information about sharing, and consent withdrawal. Requests regarding leads must be addressed to the Tenant (Controller).

10. Security

• Encryption of CPF at rest (AES-256-GCM) with hashed lookup.
• Audit logs on sensitive actions.
• TLS in transit, role-based access control, periodic backups.

11. Data Protection Officer (DPO)

Pursuant to article 41 of the LGPD and ANPD Resolution CD/ANPD No. 18/2024, BRYCKS has formally appointed a Data Protection Officer.

DPO: Matheus Gobetti Silva. Email: dpo@moovyi.com. Phone: +55 (16) 99635-4165. Requests under article 18 of the LGPD are answered within 15 days.