Privacy Policy

Last updated: June 2026

1. Who We Are

This Privacy Policy describes how C C F PEREIRA TECNOLOGIAS, a Brazilian company registered under CNPJ 19.922.975/0001-03 ("SIDELN", "we", "us"), collects, uses, stores, and shares your personal data when operating the SIDELN platform, in accordance with the Brazilian General Data Protection Law (LGPD — Law No. 13.709/2018).

2. Data We Collect

2.1 Authentication data (Google OAuth)

When you log in with your Google account, we collect:

  • Full name
  • Email address
  • Profile photo
  • Google unique identifier (sub)

2.2 Platform usage data

  • Team information: name, logo, settings
  • Member data and roles (OWNER, STAFF, ATHLETE)
  • Play, drive, and game records
  • Registered athlete data (name, jersey number, position, photo)
  • Linked videos (YouTube video IDs) and timestamp markers
  • Play comments and annotations
  • Language and theme preferences

2.3 Analytics and cookies

  • Vercel Analytics and Speed Insights: aggregated navigation data (pages visited, load times), without direct personal identification.
  • Google Analytics: browsing behavior on the site, traffic sources, session data.
  • Hotjar: session recordings, heatmaps, and usability feedback.

3. Purpose and Legal Basis

We process your data for the following purposes and legal bases (LGPD, art. 7):

  • Contract performance (art. 7, V): authentication, account management, and platform functionality.
  • Legitimate interest (art. 7, IX): performance analysis, product improvement, platform security.
  • Consent (art. 7, I): third-party analytics cookies (Google Analytics, Hotjar). You may withdraw consent at any time.

4. Minors

SIDELN does not collect data directly from children under 13 years of age. Data for athletes under 18 is entered into the platform by the team administrator, who confirms they have obtained consent from the athlete's parents or legal guardians.

Parents or guardians wishing to request removal of a minor athlete's data may contact us at farias.claudiac@gmail.com.

5. Data Sharing

We do not sell your data. We share it only with the following sub-processors:

  • Supabase Inc. (USA) — PostgreSQL database, authentication, and real-time communication. Privacy policy.
  • Vercel Inc. (USA) — hosting and content delivery. Privacy policy.
  • Google LLC (USA) — OAuth authentication and Google Analytics. Privacy policy.
  • Hotjar Ltd. (Malta) — usability analysis. Privacy policy.

6. International Data Transfers

Some of our providers are located in the United States and Europe. These transfers take place based on appropriate contractual safeguards (standard contractual clauses or equivalent certifications), in compliance with art. 33 of the LGPD.

7. Data Retention

We retain your data for as long as necessary to provide the Service or while your account is active. After account deletion, personal data is removed or anonymized within 30 days, unless legal obligations require longer retention.

8. Your Rights (LGPD, art. 18)

As a data subject, you have the right to:

  • Confirm the existence of data processing;
  • Access your data;
  • Correct incomplete, inaccurate, or outdated data;
  • Request anonymization, blocking, or deletion of unnecessary data;
  • Data portability;
  • Delete data processed based on consent;
  • Obtain information about data sharing;
  • Revoke consent at any time.

To exercise any of these rights, contact us at farias.claudiac@gmail.com. We will respond within 15 days.

9. Security

We implement technical and organizational measures to protect your data, including: OAuth authentication (no password storage), Row-Level Security (RLS) in the database for team data isolation, encrypted connections (HTTPS/TLS), and role-based access control.

10. Cookies and Tracking

We use cookies and similar technologies for platform functionality and analytics. Essential cookies (required for authentication and operation) cannot be disabled. Third-party analytics cookies (Google Analytics, Hotjar) can be declined or removed in your browser settings.

11. Data Protection Officer (DPO)

Our Data Protection Officer can be contacted at: farias.claudiac@gmail.com.

You also have the right to lodge a complaint with Brazil's National Data Protection Authority (ANPD): www.gov.br/anpd.

12. Changes to this Policy

We may update this Policy periodically. We will notify you of material changes via email or a notice on the platform. The date of the last update will always be indicated at the top of this page.

13. Contact

C C F PEREIRA TECNOLOGIAS
CNPJ: 19.922.975/0001-03
Email: farias.claudiac@gmail.com