This policy explains which data Bibliou processes, why, who it is shared with and how you can exercise your rights. It applies to the website and to the WhatsApp service.
1. Who processes your data
Bibliou is operated by Kahue Moraes de Morais, CNPJ (Brazilian company registry) 60.987.970/0001-54, responsible for the service and controller of the personal data processed in it. The contact for privacy matters is the official WhatsApp number listed on the site or the email bibliou1@outlook.com.
2. Data we collect
- WhatsApp number and profile name, to deliver messages to the right chat.
- Content of the messages exchanged with the service, to answer requests and keep the service history.
- Delivery preferences, such as time and language.
- Subscription status and billing identifiers generated by Stripe. Card details remain with Stripe only.
- Technical access logs from the website, such as date, time and IP address.
- Browsing data measured by Google Analytics, such as pages visited, device type and approximate origin of the visit.
3. How we use your data
- Deliver the subscribed content and answer requests on WhatsApp.
- Charge the subscription and control who has access to the service.
- Send service notices, changes to terms and billing information.
- Comply with legal obligations and prevent fraud.
- Improve content and support based on aggregated data.
4. Legal bases
- Performance of a contract: delivering content and charging the subscription.
- Compliance with a legal obligation: tax and consumer records.
- Consent: optional communications, such as weekly offers. It can be withdrawn at any time.
- Legitimate interest: security, fraud prevention and service improvement.
5. Who we share with
- Meta and WhatsApp (Cloud API), to send and receive messages.
- Stripe, to process payments and subscriptions.
- Google, through Google Analytics, to measure how the site is used.
- DeskcommCRM, the support platform used to organise conversations and automations.
- Hosting and infrastructure providers that keep the site and the service running.
- Public authorities, when there is a legal order.
- We do not sell personal data.
6. International transfers
Some of these providers process data outside Brazil. In those cases the transfer follows art. 33 of the LGPD and is supported by data protection contractual clauses.
7. How long we keep data
- Service messages: 12 months.
- Subscription data: while the subscription is active and for 6 months after cancellation.
- Tax and payment records: 5 years, due to legal obligations.
- After these periods, data is deleted or anonymised.
8. Your rights
The LGPD gives you the right to confirmation of processing, access, correction, anonymisation, blocking or deletion of unnecessary data, portability, information about sharing and withdrawal of consent.
- To exercise any of these rights, talk to us on the official Bibliou WhatsApp number or write to bibliou1@outlook.com. We reply within 15 days.
- You may also file a complaint with the Brazilian Data Protection Authority (ANPD).
9. Security
Access to data is restricted to those who need it to run the service, with encryption in transit and role-based access control. No system is fully immune to incidents. If a relevant incident occurs, data subjects and the ANPD are notified as required by law.
10. Cookies
The Bibliou website is static and does not use tracking or advertising cookies. The hosting provider may record technical access logs for security and diagnostics.
11. Minors
The service is intended for people aged 18 or over. Data from minors is only processed with authorisation from a legal guardian.
12. Changes to this policy
Relevant changes are announced on WhatsApp at least 30 days in advance. The date at the top of this page shows the current version.
13. Contact
For questions, requests or complaints about privacy, talk to us on the official Bibliou WhatsApp number listed on the site or write to bibliou1@outlook.com.