Privacy Policy
This English version is provided for convenience; the Portuguese version prevails.
This policy explains, in plain language, which personal data we process when you visit fieli.app, why we process it, how long we keep it and how you exercise your rights. It follows Brazil’s General Data Protection Law (Law No. 13,709/2018, “LGPD”) and the Brazilian Internet Civil Framework (Law No. 12,965/2014).
Who we are
The controller of the data processed on this website is:
Fieli Tecnologia LtdaCNPJ 67.265.180/0001-04
Rua Angelita Oliveira de Souza, 111 · Centro · Delmiro Gouveia/AL · CEP 57480-000, Brazil
(82) 99817-4910 · WhatsApp · contato@fieli.app
Who this policy applies to
This policy applies to visitors of the fieli.app website and to anyone who contacts Fieli through the channels published here. Each product has its own policy, because it processes different data and, for part of it, Fieli acts on behalf of its customers:
- Fieli Posts Privacy Policy
- Fieli Flow Privacy Policy
- Fieli Tickets Privacy Policy
- Fieli Club Privacy Policy
What we process and why
The website asks for no registration and uses no audience measurement tools. Its only form is on the Talk to us page, explained in the “Contact form” section below. We only process the minimum needed for the site to work and to reply to people who contact us:
| Operation | Data subjects | Data | Purpose | Legal basis | Fieli's role | Retention |
|---|---|---|---|---|---|---|
| Access logs | site visitors | IP address, date and time of access | comply with the Brazilian Internet Civil Framework and protect the site | compliance with a legal obligation (art. 7, II) | controller | 6 months |
| Contact | people who contact Fieli | name, company (optional), e-mail or WhatsApp, product of interest (optional) and the message content, through the site form, e-mail or WhatsApp | reply to whoever contacts us | pre-contractual steps (art. 7, V) and legitimate interest (art. 7, IX) | controller | 24 months after the last contact; data subject requests and incident communications, 5 years (accountability to the ANPD) |
Each processing activity has a specific purpose and a legal basis under the LGPD (arts. 6 and 7). We do not use this data for advertising, we do not sell it and we do not profile visitors.
Contact form
What we collect: your name, the e-mail address or WhatsApp number where you want our reply, and your message. Company and product of interest are optional. Please do not include sensitive data, such as health information, or other people’s data.
Why, and on what legal basis: only to reply to you. The basis is Fieli’s legitimate interest in replying to people who contact us (LGPD, art. 7, IX) and, when you ask about signing up, pre-contractual steps (art. 7, V). We do not ask for consent, because consent is not the basis of this processing. We do not use this data for advertising or add it to mailing lists.
Path: your message passes through Cloudflare and reaches our server in Brazil, which delivers it to the contato@fieli.app mailbox, hosted in Germany. Every leg uses an encrypted connection, and delivery to the mailbox is authenticated. If you choose WhatsApp, we will reply there. We send no automatic confirmation e-mail: the confirmation appears on the page itself.
Abuse protection: the server limits how many messages the same IP address can send per minute. That count stays in memory only and disappears within minutes; the IP appears only in the access logs we already keep for 6 months.
How long: the copy on our server is deleted as soon as the message is delivered to the mailbox, or within 30 days if delivery fails. In the mailbox, we keep it for 24 months after the last contact.
Your rights: you can ask for access, correction or deletion, or object to this processing, by writing to dpo@fieli.app (see Your rights).
Cookies
This website does not use cookies or any other tracking technology, and stores nothing in your browser. That is why there is no consent banner: there is nothing to consent to. Details, including the cookies used inside the products, are in the Cookie Policy.
Who we share data with
We rely on a few providers, which process data only to deliver the contracted service and under our instructions:
| Provider | Role | Data | Country | Transfer basis | Status |
|---|---|---|---|---|---|
| Magalu Cloud Ltda. | site hosting | all service data | Brazil | — | in use |
| Cloudflare, Inc. | network edge: TLS, caching and attack protection | connection metadata (IP, host, page address) and, in transit, the content sent through the contact form | United States and others | LGPD art. 33: provider's contractual clauses; adoption of the ANPD standard contractual clauses (ANPD Resolution No. 19/2024) in progress | in use |
| netcup GmbH | e-mail server for the fieli.app domain | e-mail messages sent and received | Germany | art. 33, I: European Union recognized as adequate (ANPD Resolution No. 32 of 01/26/2026) | in use |
| Backblaze, Inc. (B2) | e-mail server backups | encrypted copies of e-mail messages (encrypted before leaving the server) | United States | LGPD art. 33: provider's contractual clauses; adoption of the ANPD standard contractual clauses (ANPD Resolution No. 19/2024) in progress | in use |
| Meta Platforms (WhatsApp) | published support channel | phone number, profile name and messages | determined by Meta | art. 33, II, b: standard contractual clauses, through the WhatsApp Business Data Transfer Addendum | in use |
The full list, per product, is on the Subprocessors page.
International transfers
Our main hosting is in Brazil. Personal data leaves the country only in the situations disclosedon this page: network edge, e-mail, channels chosen by the customer, artificial intelligence providers and providers still being migrated, always with the basis for each transfer.
On this website that happens in these situations:
- Network edge (Cloudflare). To protect the site and deliver it quickly, your connection metadata (IP address, host and page address) and, if you use the contact form, the content you send pass through Cloudflare’s network, which operates in Brazil and other countries.
- E-mail. Messages sent to contato@fieli.app and dpo@fieli.app, including those sent through the form, are stored on our e-mail server in Germany. The European Union is recognized by the ANPD as providing an adequate level of protection (ANPD Resolution No. 32 of January 26, 2026). That server’s backups are encrypted before they leave it and are stored in the United States (Backblaze).
- WhatsApp. If you choose to talk to us on WhatsApp, the conversation follows Meta’s terms and infrastructure.
Each transfer relies on article 33 of the LGPD, as shown in the table above. You may ask the Data Protection Officer for the full text of the applicable contractual clauses, which we will send within 15 days (ANPD Resolution No. 19/2024, art. 17).
How long we keep data
- Access logs (IP, date and time): 6 months, as required by article 15 of the Brazilian Internet Civil Framework. They are deleted afterwards.
- Contact messages, including those from the form: 24 months after the last contact. Data subject requests and incident communications are kept for 5 years so that we can account to the ANPD.
- Form messages on our server: deleted as soon as they are delivered to the mailbox, or within 30 days if delivery fails.
At the end of these periods the data is deleted, except where article 16 of the LGPD allows it to be kept.
Your rights
At any time and free of charge, you have the right to (LGPD, art. 18):
- confirm whether we process your data;
- access the data;
- correct incomplete, inaccurate or outdated data;
- request anonymization, blocking or deletion of unnecessary or excessive data, or of data processed unlawfully;
- request portability of the data to another provider;
- request deletion of data processed on the basis of your consent;
- know which entities we share your data with;
- know that you may refuse consent and the consequences of doing so;
- withdraw consent.
How to ask: write to the Data Protection Officer at dpo@fieli.app. We confirm receipt immediately and, when you ask for a complete statement, we reply within 15 days (LGPD, art. 19). If we need to confirm your identity, we will ask only for the minimum necessary.
You may also file a petition with Brazil’s National Data Protection Agency (ANPD) and with consumer protection bodies (LGPD, art. 18, §1 and §8).
Security
We adopt technical and administrative measures to protect data (LGPD, art. 46):
- encrypted connections (TLS) everywhere
- the site uses no cookies and loads no third-party resources; the contact form stores nothing in the browser, and the copy on our server is deleted once delivered to the mailbox
- form delivery to the mailbox is authenticated and always encrypted (mandatory STARTTLS, TLS 1.2 or higher), and each visitor has a per-minute submission limit
If a security incident that may cause relevant risk or harm occurs, we will notify the ANPD and the affected people within 3 business days, as required by ANPD Resolution No. 15/2024.
Children and adolescents
This website is intended for businesses and is not directed at children or adolescents (LGPD, art. 14).
Data Protection Officer
José Tenório Abs Jr. · dpo@fieli.app
Channel for data subjects and for Brazil's National Data Protection Agency (ANPD).
Changes to this policy
When this policy changes, we will publish the new version on this page, with the version number and effective date at the top. Relevant changes will be highlighted here before they take effect.
- Version 1.1.0: we added the contact form on the Talk to us page (see “Contact form”), a new and optional channel, and we now disclose that the form content passes through Cloudflare and that the e-mail server’s backups are encrypted. No existing processing changed.