Privacy Policy

Information Collection

We collect information provided directly by you, such as name, email, phone number, anniversary date, and uploaded images, exclusively for personalizing the experience and delivering the purchased product. We also automatically collect technical data, such as IP address, browser, device, and interactions with the platform.

Use of Information

We use your information to:

• Personalize and deliver your experience on the platform
• Process payments via EFI Bank (PIX instant payment) and Paddle (credit card)
• Improve our products and services
• Perform browsing analytics (with Google Analytics and Facebook Pixel)
• Send essential communications (such as purchase confirmation)
• Fraud prevention and transaction security

Data Sharing

We do not share, sell, or disclose your personal data for third-party advertising purposes. We share data only when strictly necessary for service operations, with the following partners:

• EFI Bank (PIX instant payments): receives your email and phone number to process the transaction.
• Paddle (credit card payments — Merchant of Record): receives name, email, phone number, and payment data necessary to process the transaction. Paddle acts as the authorized seller and processes your data according to its own Privacy Policy.
• Amazon S3 / Cloudflare R2 (storage): uploaded images are hosted with restricted access controls.
• Cloudinary (image processing): images may be processed for optimization.

Each partner processes your data exclusively for the purpose described and in compliance with their respective privacy policies and applicable legislation.

Storage and Security

All data is stored on secure servers with end-to-end encryption. Uploaded images are hosted on Amazon S3 and Cloudflare R2 with access controls. Passwords are encrypted using bcrypt and are never visible, not even to the Lovepanda team. Sensitive credit card data is never stored on our servers — it is processed directly by Paddle.

Cookies and Tracking Technologies

We use cookies for user authentication, CSRF protection, and metric collection. You can manage cookie acceptance in your browser settings. We also use Facebook Pixel, TikTok Pixel, Pinterest Pixel, and Google Analytics for behavioral analysis and campaign measurement. For more details, see our Cookie Policy.

Your Rights (LGPD and GDPR)

Under the Brazilian General Data Protection Law (LGPD) and the General Data Protection Regulation (GDPR), you have the right to:

• Access the data we hold about you
• Correct personal information
• Request the deletion of your data
• Revoke consents
• Port your data to another service, if desired
• Object to data processing for marketing purposes

To exercise your rights regarding data processed by Lovepanda, contact us at support@lovepanda.co. For data processed by Paddle, you can contact Paddle support directly at paddle.com/legal/privacy.

Changes to This Policy

We may update this Privacy Policy periodically to reflect legal or operational changes. The date of the last update will always be indicated at the bottom of this page. We recommend revisiting this section regularly.

Legal Information

This policy is governed by Brazilian law. Lovepanda is operated by LOVEPANDA LTDA, registered under CNPJ 60.623.888/0001-40, and any legal matters may be addressed in accordance with the jurisdiction of São Paulo, SP, Brazil.

Last updated: February 24, 2026