Privacy Policy

For account operations, the app may process data such as name, email, profile photo, login method used, email verification status, security logs, and technical plan details.

For system features, the app may also store data you register, such as materials, products, spec sheets, quotes, sales, settings, backups, account preferences, and other activity records.

If you use optional features, the app may also process data related to email backup delivery, password recovery, testimonials submitted by you, and Premium subscription history. Payment data is processed securely by Stripe, and the app never stores your full card number.

App data is primarily used to:

• authenticate the account and keep access secure;
• save materials, products, sales, and settings;
• synchronize account usage across devices;
• send password recovery and essential app emails;
• send security alerts upon unusual activity;
• process Premium billing, subscriptions, cancellations, and refunds;
• generate, export, and send backups upon your request or schedule;
• comply with legal requirements and safeguard against abuse;
• publish testimonials only when voluntarily submitted by you.

Calcula Artesão may use trusted third-party services to operate specific parts of the platform, including authentication, storage, billing, and transactional email.

• Google, when you choose to sign in with your Google account;
• Stripe, for Premium subscriptions, checkout, cancellations, and refunds;
• Email services, for password recovery and automated backup emails;
• Database and synchronization infrastructure powering the application.

Payment details, such as full credit card numbers, are never stored by the application. Payment processing occurs entirely within the secure environment of our billing provider.

Under applicable data protection laws (such as LGPD/GDPR), you can request access, correction, export, or deletion of your personal data at any time.

• access and export your account data;
• correct inaccurate profile details;
• delete your account and synced records;
• request clear information about data handling;
• revoke optional consents where applicable.

Inside the app, your profile section lets you export backups and delete your account. Dedicated technical endpoints are also available: /api/user/export-data and /api/user/delete-account.

• strict HTTPS encryption in production;
• passwords securely hashed with modern algorithms;
• encrypted backups when generated by the platform;
• security logs with hashed IP and user-agent strings;
• authenticated session controls on all protected routes;
• PCI-compliant payment processing powered by Stripe.