Política de Privacidade

1. Who we are

BACKSIDE operates Panda and tspanda.com. This policy explains what we collect, why, and your rights under applicable data-protection law (including Brazil's LGPD and, where applicable, the GDPR).

2. What we collect

• Account data: your e-mail address and subscription status, used to issue your license (API key) and communicate about the Service.
• Payment data: processed entirely by Stripe. We receive subscription events (paid, failed, canceled) and the last 4 digits/brand of your card — never the full card number.
• Service logs: API-key requests (key, timestamp, endpoint, IP) for security, abuse prevention and support. The app sends minimal diagnostics; it does not read your trading account, positions or orders.
• Website: tspanda.com is a static site; we do not run advertising trackers. Basic access logs are kept by our hosting/CDN provider (Cloudflare).

3. What we do NOT do

We do not sell your personal data. We do not read or store your brokerage credentials — Panda never asks for them. AI commentary is generated from public market and filings data, not from your personal information.

4. Legal bases and use

We process your data to perform our contract with you (deliver the Service, billing, support), to comply with legal obligations (tax, accounting), and on legitimate interest for security and abuse prevention.

5. Sharing

Data is shared only with processors required to run the Service: Stripe (payments), Cloudflare (hosting/CDN) and a transactional e-mail provider (Resend). Each processes data under its own compliance terms.

International transfers. Some of these processors operate outside Brazil and the EU (notably in the United States). Where your data is transferred internationally, we rely on adequacy decisions or standard contractual clauses as required by the LGPD and the GDPR.

6. Retention

Account and billing records are kept while your subscription is active and for the period required by tax and consumer law afterwards. Service logs are retained for a limited operational window and then aggregated or deleted.

7. Your rights

You may request access, correction, portability or deletion of your personal data, and object to processing, by contacting privacy@tspanda.com. We respond within the timelines of applicable law. You may also lodge a complaint with your data-protection authority (in Brazil, the ANPD).

8. Security

Keys and personal data are stored on access-controlled infrastructure; payment data never touches our servers. No system is 100% secure — report suspected issues to the contact above.

9. Changes

We may update this policy; material changes will be announced on the site or by e-mail. The date at the top reflects the latest revision.