Privacy Policy

Last updated: April 5, 2026

This is a courtesy translation. The Portuguese version is the legally binding document.

1. Who We Are

Espectro is operated by BSOCIETY INTELIGÊNCIA E CONSULTORIA LTDA (CNPJ 65.877.398/0001-94). This policy describes how we collect, use, and protect your personal information when using the platform at espectrosint.com.

2. Data We Collect

Account data:

• Email and name (provided during registration).
• Subscribed plan and billing data (processed by Stripe; we do not store card data).
• Account creation date.

Usage data:

• Credits consumed.
• Access logs (IP, date/time) for security and abuse prevention.

Data we do NOT collect:

• We do not store the content of searches performed (queries).
• We do not store search results.
• We do not use third-party tracking cookies.

3. How We Use Your Data

We use your data exclusively to:

• Manage your account and authentication.
• Process payments and manage subscriptions.
• Apply usage limits (credits) for your plan.
• Prevent abuse and ensure platform security.
• Communicate relevant service updates.

4. Search Logging

Espectro does not store the content of your searches (emails, phone numbers, usernames, or other searched terms). Searches are processed in real time and results are delivered directly to your browser without server-side persistence.

We only log operational metadata: timestamp, search type (email/phone/username), and number of results returned — without including the searched term.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties, except:

• Payment processing: billing data is processed by Stripe Inc., per their privacy policy.
• Legal obligation: when required by law, court order, or competent authority.
• Rights protection: to protect the security, rights, or property of Espectro and its users.

6. Data Security

We implement industry-standard security measures:

• HTTPS connections with TLS for all communications.
• Passwords stored with Argon2id hashing (never in plain text).
• Authentication tokens in HttpOnly cookies (inaccessible to JavaScript).
• Rate limiting for brute-force attack prevention.
• Database with encrypted connections (SSL).

7. Data Retention

Your account data is kept as long as your account is active. Upon account deletion request, all personal data will be removed within 30 days. Access logs are kept for 90 days for security purposes.

8. Your Rights

In compliance with the LGPD (Brazilian General Data Protection Law), you have the right to:

• Access the personal data we hold about you.
• Correct incomplete or inaccurate data.
• Request deletion of your personal data.
• Revoke consent for data processing.
• Request data portability.

To exercise any of these rights, contact us at the email below.

9. Third-Party Services

The platform uses the following third-party services:

• Stripe — payment processing.
• Neon — PostgreSQL database (infrastructure).
• Akamai/Linode — server hosting.

Each service has its own privacy policy. We recommend reading them.

10. User Responsibility

Espectro queries exclusively public and open data sources. The user is solely responsible for the use of information obtained through the platform, and must comply with applicable legislation and respect third-party rights.

11. Changes to This Policy

We may update this policy periodically. Significant changes will be communicated via email or platform notification. The last update date is indicated at the top of this page.

12. Contact

For questions, requests, or complaints about privacy:

Email: contato@espectrosint.com