Privacy Policy

Last updated: January 15, 2025

1.1 Terms and Definitions

For the purposes of this Policy, the following definitions and descriptions apply for your better understanding, whether written in upper or lower case, plural or singular, in bold or not:

  • Accept or Agree: the act by which you, Visitor or User, declare that you have read and accepted the terms of this Policy by clicking on the dialog box shown on the tripaulx website or apps, which is considered full adherence to its content.
  • ANPD: the Brazilian National Data Protection Authority, the body responsible for enforcing the LGPD.
  • Personal Data: any information related to an identified or identifiable natural person.
  • Sensitive Personal Data: personal data about racial or ethnic origin, religious belief, political opinion, health, sex life, genetic or biometric data, when linked to a natural person.
  • DPIA (Data Protection Impact Assessment): documentation describing processing activities that may pose risks to the rights of data subjects.
  • Data Protection Officer or DPO: the person appointed by TRIPAULX LTDA, owner of the tripaulx brand, to act as the communication channel between the controller, the data subjects and the ANPD.
  • LGPD: Brazilian Law No. 13,709/18, which governs the processing of personal data in Brazil.
  • GDPR: the European Union General Data Protection Regulation.
  • Controller: TRIPAULX LTDA, Brazilian company registration (CNPJ) 18.666.965/0001-83, owner of the tripaulx brand, responsible for decisions regarding the processing of personal data.
  • Processor: a natural or legal person who processes data on behalf of TRIPAULX LTDA, owner of the tripaulx brand.
  • Data Subject: the natural person to whom the processed personal data refers.
  • Processing: any operation carried out with personal data, such as collection, use, storage, sharing and deletion, among others.
  • International Data Transfer: the movement of personal data outside Brazilian territory, including through cloud storage.
  • User: a registered individual or company that uses services or features offered by TRIPAULX LTDA, owner of the tripaulx brand.
  • Visitor: anyone who browses the website or uses interfaces without registering.
  • Logs: records of visitor and user activity on the website and systems of TRIPAULX LTDA, owner of the tripaulx brand.

1.2 Applicability of the Policy

TRIPAULX LTDA, through the tripaulx brand, hereinafter referred to as "tripaulx", "we", "our", recognizes the importance of privacy, security and data protection for its customers and visitors.

This Policy applies to all Users and Visitors of the tripaulx.com website (hereinafter the "Site") and other digital services, with the purpose of informing, clearly and objectively, about the collection, use, storage and sharing of personal data.

When accessing our Site for the first time, Users/Visitors are informed through a text notice ("banner") about the use of cookies and tracking technologies, in accordance with our Cookie Policy.

1.3 Scope

This Policy describes the processing (collection, use, storage and sharing) of personal data by TRIPAULX LTDA, CNPJ 18.666.965/0001-83, owner of the tripaulx brand, applicable to all users and visitors of our website and SaaS services.

By agreeing to this Policy, you declare and agree that TRIPAULX LTDA, owner of the tripaulx brand may process your personal data in accordance with the terms set out herein.

1.3.1 Third-Party Applications

This Policy does not apply to third-party apps, services or websites accessed through links provided by TRIPAULX LTDA, owner of the tripaulx brand. We recommend reading the privacy policies of third parties before providing your data. TRIPAULX LTDA, owner of the tripaulx brand is not responsible for such practices.

1.3.2 Personal Data Collected

TRIPAULX LTDA, owner of the tripaulx brand collects personal data when you:

  • Browse the website
  • Fill out contact or registration forms
  • Purchase digital services (such as website creation, SaaS or Playbook as a Service)

The data collected may include: name, email, phone number, Brazilian taxpayer ID (CPF/CNPJ), IP address, browser, operating system, approximate geolocation, date and time records, pages visited and interactions with our services.

1.3.3 Automatically Collected Data

We use cookies and similar technologies to collect browsing data, preferences and service usage. Tools used by TRIPAULX LTDA, owner of the tripaulx brand include:

  • Google Analytics and Google Ads
  • HubSpot (CRM and marketing automation)
  • Microsoft Clarity (usage behavior analysis)
  • Stripe (payment processing)

1.3.4 Purposes of Processing

TRIPAULX LTDA, owner of the tripaulx brand processes your personal data to:

  • Provide and manage the contracted services
  • Personalize your digital experience
  • Perform performance analysis and metrics
  • Comply with legal and regulatory obligations
  • Carry out marketing and relationship actions, always with consent

1.3.5 Data Sharing and Transfer

Your data may be shared with:

  • Hosting, IT and support service providers
  • Data analytics and digital marketing providers (Google, HubSpot, Microsoft Clarity)
  • Payment processors (Stripe)
  • Public authorities, when required by law

TRIPAULX LTDA, owner of the tripaulx brand may transfer personal data internationally, ensuring that providers adopt protection standards compatible with the LGPD and the GDPR.

1.3.6 Advertising and Marketing

With your consent, we may use your data to send promotions, institutional communications and digital marketing. You can opt out of these communications at any time.

1.3.7 Email and Messaging Communications

We will use your email or phone number only for authorized purposes (e.g., answering requests, sending contractual information). Sending marketing communications will depend on your consent or an applicable legal basis.

1.3.8 Data Security

TRIPAULX LTDA, owner of the tripaulx brand adopts technical and administrative security measures, including encryption, access control and log monitoring. Although it is not possible to eliminate all risks, we follow market best practices to protect your data.

1.3.9 Data Subject Rights

Under the LGPD, you have the right to:

  • Confirm whether we process your data
  • Request access, correction or deletion
  • Request portability
  • Withdraw consent
  • Obtain information about sharing with third parties

Requests can be made by email: [email protected] or phone: +55 (11) 97281-5566.

1.3.10 Changes

This Policy may be changed periodically. The most up-to-date version will be available on the website of TRIPAULX LTDA, owner of the tripaulx brand, with the date of the last update.

1.3.11 Google and YouTube API Integrations

tripaulx offers an optional integration feature that allows the User to connect their own YouTube channel to the platform, with authorization via Google OAuth 2.0. When the User enables this integration, tripaulx uses the YouTube APIs (YouTube Data API and YouTube Analytics API) only to perform, on behalf of the connected account, the actions requested by the User.

Data accessed and purpose:

  • Channel and video metadata (read-only): list and display the User's videos in the dashboard and, optionally, on their website.
  • Channel metrics (read-only): present performance reports to the channel owner.
  • Comments: display comments and allow the owner to reply to and moderate comments on their own channel.
  • Metadata editing (write): apply only the changes the owner makes to their videos through the dashboard.

Access tokens and refresh tokens are stored encrypted and used exclusively for the purposes above. tripaulx does not sell and does not share data obtained from Google APIs with third parties, and does not use it for advertising.

tripaulx's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements, and to the YouTube API Services Terms of Service. By using the integration, the User also agrees to the YouTube Terms of Service and is subject to the Google Privacy Policy.

The User can revoke tripaulx's access to their channel at any time at myaccount.google.com/permissions and can request deletion of the synchronized data by email at [email protected].

1.4 Contact

Questions about this Policy can be sent to:

📧 [email protected]
📞 +55 (11) 97281-5566

1.5 Conclusion

This Privacy Policy follows the recommendations of the LGPD and, where applicable, the GDPR, ensuring transparency and security in the processing of data by TRIPAULX LTDA, owner of the tripaulx brand.