Institutional document

Privacy Policy

Last updated: 02/26/2026

1. Data controller

Product: Descomplica IR.

Privacy contact: suporte@descomplicair.com.br

2. Data collected

• Account and identification data: email, user id, display name and avatar.
• Tax data sent by the user: onboarding answers, checklist items, documents and attachments.
• Operational data: application logs, product events, push token and minimal technical metadata.

3. Purpose of use

• Authenticate users and keep sessions active.
• Generate tax checklists by year and organize documents.
• Enable in-app service between taxpayer and accountant.
• Send transactional notifications about progress and pending items.
• Support operational security, auditing and fraud prevention.

4. Legal basis

• Performance of a contract or requested service.
• Compliance with legal or regulatory obligations.
• Legitimate interest for security and operations, subject to impact assessment.
• Consent where legally required.

5. Data sharing

• Data may be shared with the accountant selected by the user to execute the service.
• Infrastructure and subprocessors include Supabase and notification services.
• Descomplica IR does not sell personal data.

6. Storage and security

• Tax documents are stored in a private bucket with signed-URL access.
• Access control is enforced through RLS policies in the database.
• Structured logs are used for event and error traceability.

7. Retention

Data is retained while necessary to provide the service and comply with legal, audit and operational security obligations.

8. Data subject rights

• Access, correction, portability, objection and deletion, as applicable under LGPD.
• Account and data deletion through the app, when available, or via support.

9. Contact

Questions or requests: suporte@descomplicair.com.br