Privacy Policy

1. Roles

For your seller account data (name, email, phone, subscription details), Minha Boutique is the controller.

For the data of your customers and leads that you enter or that comes in through your store, events and quiz, you are the controller and Minha Boutique is the processor: we handle that data only on your instructions and to provide the service.

2. Data we collect

From the seller: name, email, phone, password (stored with one-way encryption), store details, preferences and usage and access logs, such as IP address, date and browser.

From the seller's customers: the data she enters, such as name, WhatsApp, email, birthday, city, preferences, purchases, payments and message history, plus the record of consent for WhatsApp and email.

We don't collect card data: payments are processed directly by the payment providers.

If you sign in with Google, we receive from your Google account only your name, your email address and the confirmation that this email is verified (openid, email and profile scopes). We do not access your Google password, contacts, Gmail, Drive, calendar or any other data in your Google account.

3. How we use it

To provide the service (records, sales, reminders, messages, store and reports), bill the subscription, provide support, ensure security, prevent fraud and meet legal obligations.

The legal bases are performance of the contract, compliance with legal obligations, legitimate interest (security and service improvement) and, when necessary, consent.

We don't sell personal data and we don't use your customers' data for our own marketing purposes.

Data received from Google is used only to create your account, identify you when you sign in and fill in your name and email at sign-up. We do not sell it, share it with third parties or use it for advertising. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Messages and consent

It is the seller's responsibility to obtain and record customers' consent before sending messages via WhatsApp or email. The system respects the consent recorded in each profile and only sends through authorized channels.

When a customer asks to stop receiving messages, the seller must uncheck the consent in her profile, which stops automatic sends on that channel.

5. Who we share it with

With vendors that help us operate: hosting and database, email delivery, the subscription payment provider and the WhatsApp connection infrastructure. They all handle the data only for that purpose.

With Mercado Pago, when your customer pays in your store, to process the payment. With authorities, when required by law or court order.

Some vendors may be located outside Brazil; in those cases, we adopt the safeguards required by data protection laws (such as Brazil's LGPD) for international transfers.

6. Security

We use encrypted connections, hashed passwords, per-account data isolation, access control and backups. No system is completely immune, but if a significant incident occurs, we will notify the affected people and the competent data protection authority as required by law.

7. How long we keep it

For as long as the account is active. After closure, we delete or anonymize the data within 90 days, except for records the law requires us to keep, such as tax data and access logs, for the legal period.

8. Your rights

You can request confirmation of processing, access, correction, portability, anonymization or deletion of data, information about sharing and withdrawal of consent.

If you are a customer of a seller who uses Minha Boutique, make your request directly to her, as she is the controller of your data. If you prefer, write to us and we'll forward the request.

You can revoke access at any time at myaccount.google.com/permissions; your Minha Boutique account keeps working with email and password (use “Forgot my password” to create one). To delete your account and the data received from Google, contact our data protection officer.

9. Cookies

We only use cookies needed for login, security and preferences, such as language. We don't use third-party advertising cookies.

10. Children

The service is not intended for users under 18. Data about minors should only be entered by the seller with a parent or guardian's permission.

11. Data protection officer and contact

To exercise your rights or ask questions about privacy, contact our data protection officer at contato@minhaboutique.app.

12. Changes

We may update this policy. The last updated date appears at the top of the page, and significant changes will be announced in advance.