Legal document

Privacy Policy

Last updated: July 7, 2026

This Policy describes how PureFace collects, uses, shares and protects personal data, in compliance with Brazilian Law 13.709/2018 (LGPD). By using our sites and services, you agree to the practices described here.

01Who we are

PureFace [Legal Name LLC], registered under CNPJ [00.000.000/0001-00], headquartered at [address], is the controller of the data processed through this site and the identity-verification APIs.

02Data we collect

We collect the data strictly necessary to provide our fraud-prevention services:

  • Identification data: name, ID document, date of birth and photo.
  • Facial biometric data, treated as sensitive data, for liveness and identity verification.
  • Device and browsing data: IP, identifiers, approximate geolocation and cookies.
  • Contact data provided in forms (email, phone, company).

03How we use data

We process personal data to: verify identities and prevent fraud; comply with legal and regulatory obligations; prevent money laundering and verify age; improve our models and services; and communicate about products when authorized.

04Legal bases

Processing relies on the grounds of art. 7 and art. 11 of the LGPD, including: consent; compliance with legal obligation; contract performance; and legitimate interest for fraud prevention. Biometric data is processed under specific, highlighted consent.

05Sharing

We share data only with: clients who requested the verification; processors and infrastructure providers under contract; and authorities, when required by law. We do not sell personal data.

06Retention and security

We retain data for as long as necessary for the purposes and legal obligations, after which it is deleted or anonymized. We adopt technical and organizational measures such as encryption, access control and continuous monitoring.

07Your rights

You may, at any time, request:

  • Confirmation of and access to your data.
  • Correction of incomplete or outdated data.
  • Anonymization, blocking or deletion of unnecessary data.
  • Portability and withdrawal of consent.

Data Protection Officer (DPO)

To exercise your rights or ask about this policy, contact our Officer: privacidade@pureface.io