Privacy Policy
In force since September 27, 2026
This policy explains which personal data Axia Lab (AXIA Inovações Digitais Ltda, CNPJ 62.064.554/0001-00, R. Pais Leme, 215, Pinheiros, São Paulo/SP) (“we”), as data controller, processes on axialab.com.br, why, and your rights under Brazil’s General Data Protection Law (LGPD, Law 13,709/2018).
1. Data we collect
- Account: name, e-mail and password (stored only as a hash). If you sign in with Google, we also receive your name, e-mail and profile picture.
- Subscription and payments: plan, start and end dates, amount and currency of each payment. Card details stay with Stripe and never reach us.
- Library use: templates you unlocked, favorites and your weekly usage (Monthly plan).
- Coupons: templates unlocked with a coupon and the approximate location (country, state and city) reported by our host at the time.
- Contact: name, e-mail and message content, sent to our mailbox.
- Newsletter: e-mail, language and sign-up date.
- Security: your IP address is used temporarily (from minutes to an hour) to limit login, sign-up and form attempts.
2. Why we use it, and the legal basis
- Creating and running your account, unlocking your plan’s templates and processing payments — performance of a contract.
- Keeping payment records — legal obligation.
- Preventing fraud and abuse and measuring coupon and catalog use — legitimate interest.
- Sending the newsletter — consent, which you can withdraw at any time through the link in every e-mail.
- Answering contact messages and sending account e-mails (such as password resets) — contract or your request.
3. Who we share it with
We don’t sell your data. We use these providers, which process data on our behalf:
- Netlify — site hosting (servers in the US).
- Neon — database (servers in São Paulo).
- Cloudflare — storage of images, videos and downloadable files.
- Stripe — payment processing.
- Google — sign-in with Google, if you choose it.
- Titan — sending and receiving e-mail.
4. International transfers
Some providers store data outside Brazil. These transfers follow the LGPD and use providers with compatible protection standards.
5. Cookies
We only use necessary cookies: the session cookie (keeps you signed in), the language cookie and the coupon cookie (remembers for up to 7 days a template unlocked with a coupon). No advertising or third-party tracking cookies.
6. How long we keep it
- Account and usage data: while the account exists.
- Payment records: for the period required by tax law (usually 5 years).
- Newsletter: until you unsubscribe.
- Password reset links: valid for 1 hour, usable once.
7. Your rights
You can ask us to confirm processing, give you access, correct, anonymize, port or delete your data, tell you who we share it with, and withdraw consent. Name and password can be changed on your account page; for anything else, write to contato@axialab.com.br. We answer within 15 days. You can also complain to Brazil’s data protection authority (ANPD).
8. Security
The site uses an encrypted connection (HTTPS), passwords are stored as hashes and downloads are delivered through temporary links. No system is immune to failures; if a relevant incident happens, we’ll notify those affected and the ANPD.
9. Minors
The site is not intended for anyone under 18.
10. Changes and contact
We may update this policy; the date of the version in force is at the top of the page. Data protection contact: contato@axialab.com.br.