LGPD · Brazil data protection

This page is the Brazilian-resident summary of how Tudo complies with Lei Geral de Proteção de Dados (Lei nº 13.709/2018, "LGPD"). It complements our Privacy Policy with the Brazilian-specific elements the law requires.

We rely on these legal bases, depending on the processing purpose:

• Execução de contrato — to deliver the Service you signed up for (account, billing, hosting your data).
• Legítimo interesse — security, abuse prevention, minimal product analytics, account-level support.
• Consentimento — non-essential cookies, marketing communications, optional integrations.
• Cumprimento de obrigação legal — tax, anti-fraud, and data-protection obligations.

You have the right to:

• Confirm that we process your personal data and access it.
• Correct incomplete, inaccurate, or out-of-date data.
• Anonymize, block, or delete unnecessary or excessive data.
• Port your data to another service provider.
• Delete personal data processed on the basis of consent.
• Be informed of the public and private entities with which we share data.
• Be informed of the option not to consent and the consequences.
• Withdraw consent at any time.
• Lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD).

Exercise the first four rights from Settings → Profile → Your data inside Tudo. For everything else, write to privacy@usetudo.com — we respond within 15 calendar days.

Our Data Protection Officer (Encarregado) can be reached at dpo@usetudo.com. The same address handles requests from the ANPD.

Personal data of Brazilian residents may be processed outside Brazil to deliver the Service. Transfers rely on the safeguards permitted by Art. 33: standard contractual clauses with subprocessors and binding internal commitments. Subprocessor list: /legal/subprocessors.

If a security incident affects Brazilian personal data and is likely to cause material harm, we notify the ANPD and affected data subjects in a reasonable time, in line with Art. 48.