Privacy Policy

Version 2026-08-03.1. Effective August 2, 2026.

1. Controller and contact

O controlador dos dados é Nathalí Xavier, CPF 092.225.604-77, endereço Centro, S/N, Moreno, Pernambuco, Postal code 54800-000, responsável pela Pichico Radio. Solicitações de privacidade podem ser enviadas para suporte@pichicoradio.com.

2. Data we process

We may process names, email addresses, protected credentials, phone numbers, addresses, CPF/CNPJ supplied to checkout, tenant information, authorized users, plans, limits, consents, orders, subscriptions, payments and support data. We also process technical data such as IP address, date and time, browser, security logs, authentication events and storage usage.

We do not store full card numbers or CVC. CPF/CNPJ is not kept as readable text in the platform database; to prevent repeated trials, we retain an HMAC-generated pseudonymous identifier.

3. Customer content

Audio and file names are stored to run the schedule. The customer decides what to upload and should avoid unnecessary personal data. For personal data placed in media by the customer, Pichico Radio acts as infrastructure processor and follows the customer's lawful instructions.

4. Purposes and legal bases

Data is used to perform the contract and signup procedures, authenticate users, broadcast the schedule, process payments, send essential communications, handle requests, comply with legal obligations, prevent fraud, protect the platform and exercise rights in proceedings. When a purpose relies on consent, it will be requested specifically and may be withdrawn, subject to other lawful retention bases.

5. Sharing and transfers

We share only what is necessary with essential providers for payments, email delivery, hosting, security and storage, and with authorities when legally required. Some providers may process data outside Brazil under mechanisms and safeguards compatible with applicable law. We do not sell personal data.

6. Cookies and logs

We use a strictly necessary cookie to keep the session authenticated. We do not use advertising cookies. Technical logs are retained for security, diagnostics, abuse prevention and service continuity.

7. Retention and deletion

Contractual and financial data and acceptance records are kept as long as needed for legal obligations and the exercise of rights. Media and operational data follow the periods described in the Terms: nonpayment may lead to deletion on day 10; canceling a paid period preserves data until access ends and for 5 additional days. The trial's pseudonymous identifier may be kept for fraud prevention. Backups expire under their retention policies and may remain until automatic rotation.

8. Security

We use HTTPS, hashed passwords, tenant isolation, restricted infrastructure access, firewalls, protected audio links, authenticated webhooks and encrypted external backups. No system eliminates all risk; material incidents will be assessed and reported to data subjects and ANPD when required.

9. Data-subject rights

Data subjects may request confirmation and access, correction, information about sharing, portability when regulated, anonymization, blocking or deletion of unnecessary or irregular data, review of automated decisions and information about consent. Requests are free and may require proof of identity. Retention required by law or necessary to exercise rights may be preserved.

10. Children, changes and contact

The service is intended for adults able to contract and does not intentionally seek children's data. This Policy may be updated; material changes will receive a new version and appropriate notice. Questions and requests: suporte@pichicoradio.com.