Privacy Policy

This policy explains how LPaaS (lpaas.site), a platform that creates websites and landing pages with artificial intelligence, handles the personal data of people who use the service, in accordance with Brazil's General Data Protection Law (Law 13,709/2018, LGPD).

1. Data we collect

• Sign-up: name, email, WhatsApp and password (stored encrypted). If you sign in with Google, we only receive your name, email and profile picture from Google.
• Your site's content: the business description, text, photos, logos and files you upload or the AI generates.
• Payment: the payer's name (and, in Brazil, their CPF tax ID), sent directly to Mercado Pago or Stripe to process the charge. We do not store the CPF or card details.
• Usage: pages visited, actions in the dashboard, IP address and device identifier, for security, usage limits and improving the service.

2. What we use it for

• Creating your account and generating, saving and publishing your sites.
• Processing payments and activating the plan you bought.
• Providing support and sending account notices (email, WhatsApp or phone notifications, if you allow them).
• Preventing fraud and abuse, and meeting legal obligations.

We do not sell your data and we do not use your WhatsApp for third-party advertising.

3. Who we share it with

Only the services LPaaS needs to work:

• Supabase (database and sign-in) and Vercel (hosting).
• Mercado Pago and Stripe (payments).
• Google (Google sign-in and the AI models that write the sites' text).
• Image libraries (such as Pixabay and Unsplash), which only receive search terms, never your personal data.
• Meta (Facebook and Instagram), TikTok and Google (Google Ads and Google Analytics), to measure and improve our ads: pages visited, sign-ups and purchases on LPaaS, with your email and phone number hashed (SHA-256, which cannot be reversed). You can opt out at any time (see Cookies).

We may also share data when required by law or a court order.

4. Cookies

We use cookies to keep you signed in, remember the device that generated a trial site and record which partner referred you. Sign-in does not work without them.

We also use advertising cookies from Meta, TikTok and Google on lpaas.site, and store which ad you came from, to learn which ads work. To opt out, tap "Decline ads" in the cookie notice, or clear lpaas.site's cookies in your browser and decline when the notice appears again. Once you decline, we stop sending your data to those platforms. Sites our customers publish do not get LPaaS pixels: only what the site owner sets up applies there.

5. How long we keep it

For as long as your account exists. If you ask us to delete it, we erase your data within 30 days, except what the law requires us to keep (such as payment records).

6. Your rights

You can request at any time: access to your data, correction, deletion, a copy (portability) or information about how it is used. Just write to pablolopesgpt@gmail.com. We reply within 15 days.

7. Security

Data travels encrypted (HTTPS), passwords are stored encrypted and database access is restricted per account. No system is 100% invulnerable: if an incident affects you, we will let you know.

8. Contact and changes

Privacy questions: pablolopesgpt@gmail.com. If this policy changes, the date at the top is updated and, for important changes, we notify you by email.