← Back to home
LGPD — General Data Protection Law
Transparency about how we process your personal data, in accordance with Law 13.709/2018.
📋 Quick summary
Legal basis
Contract performance + legitimate interest
Sharing
We never sell data
Storage
Servers in Brazil
LGPD response
Within 15 days
1. What data we collect
| Category | Data | Purpose |
|---|---|---|
| Registration | Legal name, CNPJ, email, phone, address | Identify the company and allow use of the service |
| Login | Name, email, password (bcrypt hash) | Authenticate and protect the account |
| Products | Name, description, images, brand, SKU, RIDP | Register and identify products |
| RFID | EPC, TID, reads, reader | Track products via API |
| Technical | IP, user-agent, logs | Security and audit |
2. Your rights (art. 18 of LGPD)
You can request at any time:
- Confirmation of processing existence
- Access to the data we keep
- Correction of incomplete or outdated data
- Anonymization, blocking or elimination of unnecessary data
- Portability to another provider
- Elimination of data processed with consent
- Information about sharing
- Revocation of consent
3. How to exercise your rights
Send an email to our DPO:
Suggested subject: LGPD — [your right]
Response time: up to 15 calendar days, in accordance with ANPD regulations.
4. Security
- 🔐 HTTPS on all connections
- 🔑 Bcrypt-hashed passwords (never plain text)
- 👥 Role-based access control
- 📝 Audit logs of all actions
- 💾 Daily encrypted backup
- 🛡️ Security headers (HSTS, CSP, X-Frame-Options)
5. Cookies
We use only necessary cookies:
| Cookie | Type | Purpose |
|---|---|---|
| RIDPSESSID | Necessário | Login session |
| ridp_lang | Preferência | Language (PT/EN) |
| ridp_theme | Preferência | Theme (dark/light) |
| ridp_cookie_consent | Preferência | LGPD consent |
We do not use third-party tracking, advertising or analytics cookies.