Privacy Policy

Version 1.0 · updated October 17, 2026. This policy follows Brazil's General Data Protection Law (Law 13.709/2018, LGPD) and is written to also meet the transparency expected under the GDPR.

Controller and contact

The controller is Alberto Cavalcanti Amorim, Brazil. Requests about your data: contato@cavalcantiperitodigital.com.br. We reply within 15 days.

What we process when you buy

Pix: your e-mail is passed to Mercado Pago, which requires it to create the charge. Payer data (name, tax ID, bank) stays with Mercado Pago and the banks, not with this store.
Crypto: you send USDC on the Solana network straight to the store's wallet. No e-mail is requested. The store reads only the amount and time of the transfer on the public blockchain; like any blockchain transaction, it is public and stays recorded on the network.
This store keeps only: order number, payment method, the provider's charge reference, amount, dates, status and the download link code. We do not store your e-mail, name, tax ID or IP address.
Legal basis: performance of the purchase contract (LGPD art. 7, V; GDPR art. 6(1)(b)) and legal obligations such as tax records (LGPD art. 7, II; GDPR art. 6(1)(c)).
Retention: order records are kept for 5 years for tax and consumer-protection purposes.

Technical logs

The server logs date, time, page and response code, without IP address and without the order number. The IP is used only in memory, for up to 1 hour, to limit repeated orders, and is not stored.

The software

Viewer3D runs on your computer and does not send your models anywhere. It loads the three.js graphics library from cdn.jsdelivr.net, which receives your IP like any website you visit.

Cookies and third parties

This site uses no cookies, analytics or advertising. The third parties involved are Mercado Pago (Pix) and the public Solana network and its RPC provider (crypto), plus a public exchange-rate service used only to convert the price, which receives no personal data.

Your rights

Access, correction, anonymization, blocking, deletion, portability and information about sharing (LGPD art. 18; GDPR arts. 15 to 21), through the e-mail above. You may also complain to Brazil's data protection authority (ANPD) at gov.br/anpd or to the authority in your country.

Security

HTTPS, minimal data collection, payment always confirmed directly with the provider, and random download links with limited validity and uses. If an incident poses a relevant risk, the authority and affected people will be notified.