PureFace operates in compliance with the Brazilian General Data Protection Law (Law 13.709/2018). This page summarizes our commitment, the roles we perform and how you exercise your rights as a data subject.
01Our commitment
We process personal data based on the LGPD principles: purpose, adequacy, necessity, transparency, security and accountability. Data protection is at the core of our anti-fraud technology.
02Controller and processor
When we define the purposes of processing (for example, on our website), we act as controller. When we process data on behalf of a client who contracted our APIs, we act as processor, following their instructions and a Data Processing Agreement.
03Sensitive data and biometrics
Facial verification involves biometric data, classified as sensitive. It is processed under specific, highlighted consent, exclusively for identity verification and liveness, with reinforced security measures.
04Data subject rights
The LGPD grants you the following rights, exercisable at any time:
- Access, confirmation and correction of data.
- Deletion, anonymization or blocking.
- Portability and information about sharing.
- Withdrawal of consent and objection to processing.
05How to exercise your rights
Requests can be made to our Officer (DPO) via the email below. We will respond within the legal deadlines and may request information to confirm your identity.
06Security incidents
In the event of an incident that may pose a relevant risk to data subjects, we will notify the National Data Protection Authority (ANPD) and affected subjects, as required by law.
Data Protection Officer (DPO)
To exercise your rights or ask about this policy, contact our Officer: privacidade@pureface.io