1. Data Controller
CAST COIN PAGAMENTOS LTDA, a private legal entity registered in Brazil under CNPJ no. 64.381.840/0001-24, headquartered at Rua Santa Cruz 2187, Suite 10 - P.O. Box 9481, Vila Mariana, São Paulo - SP, CEP 04121-002, Brazil, acts as the data controller for personal data processed within this platform.
2. Overview and Commitment to Privacy
Cast Coin operates a technology platform providing payment facilitation and monetization between digital creators and their audience. This Privacy Policy establishes the guidelines for the collection, processing, storage, and protection of personal data of users and content creators, in strict compliance with applicable legislation, notably Brazil's General Data Protection Law (Law no. 13,709/2018 — LGPD).
3. Personal Data Collected
To provide our services and process transactions securely, we may collect and process the following categories of data:
- Identification data: Full name, tax identification number (CPF / SSN / VAT), and date of birth.
- Contact data: Email address and mobile / WhatsApp phone number.
- Financial and transaction data: Information strictly necessary for billing settlement, receipts, and payouts.
- Connection and browsing data: IP address, access timestamps, and device technical data, collected pursuant to the Brazilian Internet Framework (Marco Civil da Internet, Law no. 12,965/2014).
We may also process aggregated, non-personally identifiable data for analytical and system security purposes.
4. Data Sharing with Content Creators / Merchants
To ensure operational transparency and fulfill deliveries, certain information may be shared with the receiving content creator, depending on the payment method:
- PIX: The creator receives only the transaction status and amount; personal buyer registration data is not shared.
- Credit Card (Stripe): The creator receives only the buyer's name and email address to identify the transaction.
- Installment Card (Asaas): Used for product sales. The creator receives the buyer's name, phone, email, tax ID, and billing address for tax invoicing and statutory compliance.
5. Purposes of Processing
Personal data collected is used for the following purposes:
- Operate the platform and process requested financial transactions;
- Manage user accounts and provide customer support;
- Verify user identity and prevent fraud or financial misconduct;
- Comply with applicable legal, fiscal, regulatory obligations, and judicial orders;
- Send essential account notices, payment confirmations, and service updates.
6. Cookies and Similar Technologies
Cookies are small files stored in the user's browser that preserve preferences and basic parameters. The platform uses:
- Essential cookies: Necessary for core site operation and session security.
- Functional and authentication cookies: Maintain active user sessions and language/currency preferences.
- Analytical cookies: Help assess aggregate usage metrics to improve technical stability.
You may disable cookies in your browser settings, understanding that some platform features may operate with reduced functionality.
7. Information Security
We employ technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, or unlawful destruction. This includes encrypted communications (SSL/TLS), strict access privilege controls, and regular operational reviews.
8. Data Retention and Disposal
Personal data will be retained only for as long as necessary to achieve the stated purposes, or to comply with statutory retention periods under applicable Brazilian civil, fiscal, and corporate laws. When no longer required, data will be securely deleted or anonymized.
9. Data Subject Rights (LGPD)
Pursuant to Article 18 of Law no. 13,709/2018 (LGPD), data subjects have the right to:
- Confirm the existence of processing and access their personal data;
- Request correction of incomplete, inaccurate, or outdated data;
- Request anonymization, blocking, or deletion of unnecessary or excessive data;
- Request data portability to another service provider;
- Request deletion of data processed on the basis of consent, subject to legal retention obligations;
- Receive information regarding third parties with whom data has been shared;
- Revoke consent, where applicable.
10. Contact and Data Protection Officer (DPO)
To exercise your rights, submit inquiries, or address requests regarding this Privacy Policy, please contact our Data Protection Officer at: [email protected].