> ## Documentation Index
> Fetch the complete documentation index at: https://support.wepayments.com.br/llms.txt
> Use this file to discover all available pages before exploring further.

# Data Protection

> How WEpayments handles personal and financial data in accordance with LGPD.

## Overview

WEpayments is committed to protecting the privacy and security of personal and financial data. Our practices comply with the [**Lei Geral de Proteção de Dados (LGPD) — Law 13,709/2018**](https://wepayments.com/wp-content/uploads/2024/06/WEpayments_politica-de-privacidade_V3.pdf), Brazil's General Data Protection Law, and applicable Central Bank regulations on data security.

***

## Data We Collect

WEpayments collects the following categories of data:

| Category                | Examples                                            |
| ----------------------- | --------------------------------------------------- |
| **Identification data** | Name, CPF/CNPJ, date of birth                       |
| **Contact data**        | Email address, phone number, address                |
| **Financial data**      | Bank account details, transaction history, balances |
| **Behavioral data**     | Platform usage, login activity, device information  |
| **Biometric data**      | Liveness checks and facial recognition (for KYC)    |

***

## Legal Bases for Processing

WEpayments processes personal data based on the following legal grounds (LGPD Art. 7):

* **Contractual necessity** – to provide the services contracted
* **Legal obligation** – to comply with BCB, COAF, and LGPD requirements
* **Legitimate interest** – for fraud prevention, security, and risk management
* **Consent** – for optional communications and marketing (which can be withdrawn at any time)

***

## Data Retention

| Data type           | Retention period                    |
| ------------------- | ----------------------------------- |
| Transaction records | 10 years (Central Bank requirement) |
| KYC/KYB documents   | 10 years after account closure      |
| Access logs         | 5 years                             |
| Marketing consent   | Until withdrawal                    |

***

## Your Rights Under LGPD

As a data subject, you have the right to:

* **Access** your personal data held by WEpayments
* **Correct** inaccurate or incomplete data
* **Delete** data processed based on consent (subject to legal retention obligations)
* **Portability** – request a structured export of your data
* **Revoke consent** for non-mandatory processing
* **Lodge a complaint** with the ANPD (Autoridade Nacional de Proteção de Dados)

***

## Data Security

WEpayments implements the following technical and organizational measures:

* **Encryption at rest and in transit** (AES-256, TLS 1.2+)
* **Access controls** based on the principle of least privilege
* **Regular security audits** and penetration testing
* **Incident response plan** with BCB notification within 72 hours for material breaches

***

## Data Sharing

WEpayments may share data with:

* **Banking partners and payment networks** (required to process transactions)
* **Regulatory authorities** (BCB, COAF, Receita Federal) when legally required
* **Service providers** acting as data processors under a Data Processing Agreement (DPA)

WEpayments does **not** sell personal data to third parties.

***

## International Data Transfers

When data is transferred outside Brazil, WEpayments ensures adequate protection through:

* Standard Contractual Clauses (SCCs)
* Transfers to countries with equivalent data protection laws recognized by ANPD

***

## Privacy Policy

For the full Privacy Policy, see [Privacy Policy](https://wepayments.com/wp-content/uploads/2024/07/WEpayments_policy-privacy_V3.pdf).

For questions about these policies, contact [privacidade@wepayments.com.br](mailto:legal@wepayments.com.br).