Privacy Policy

BALUTHI TECNOLOGIA LTDA, brand Baluthi, is the controller. Privacy and data subject rights: privacy@baluthi.com. Support: support@baluthi.com. Security: security@baluthi.com. Legal: legal@baluthi.com.

Baluthi does not require sensitive personal data for regular features. If users voluntarily include it in free-text fields, documents, or receipts, processing is limited to providing the service and applicable legal bases. Avoid unnecessary information.

• Registration and authentication: name, email, provider-protected password, and acceptance records.
• User-entered financial data: accounts, cards, categories, transactions, transfers, bills, documents, and attachments.
• Technical and security data: IP, session, browser, device, language, time zone, access, and audit logs.
• Communications: support, reports, suggestions, and submitted content.
• Subscription and billing where applicable: plan, status, history, and payment identifiers; full card details should be processed by the payment provider.

• create, maintain, and administer the account and subscription;
• provide financial organization features;
• authenticate access, secure the platform, and prevent fraud;
• provide support and respond to requests;
• meet legal obligations and exercise rights;
• improve stability, performance, accessibility, and quality;
• send transactional and security messages and, according to preferences, product communications.

Depending on the operation, we rely on contract performance and pre-contractual steps; legal obligations; exercise of rights; legitimate interests assessed for necessity and proportionality; credit protection where applicable; and consent when required. Consent is not the sole basis for all processing.

We do not sell personal data. We may share it with necessary hosting, database, authentication, storage, monitoring, support, email, and payment providers subject to security and confidentiality duties.

Sharing may also occur for legal obligations, authority orders, fraud prevention, exercise of rights, or legitimate corporate transactions with applicable safeguards.

Some providers may process data outside Brazil. We use LGPD-permitted mechanisms and measures designed to preserve equivalent protection under ANPD regulations.

We use cookies and local storage necessary for authentication, security, preferences such as language, and application operation. If optional analytics or marketing technologies are introduced, we will provide notice and controls. We currently do not use behavioral advertising.

We keep data while needed for the account and stated purposes. Following closure or a valid request, we delete or anonymize data where appropriate, retaining only what is needed for law, security, fraud prevention, consent evidence, and exercise of rights.

Periods vary by data category and obligation. Backups are deleted according to secure technical cycles.

We use reasonable technical and administrative safeguards, including authentication, access control, logical user isolation, event logging, and infrastructure protection. No system is absolutely secure.

Material incidents will be assessed and, when required, reported to the ANPD and affected data subjects under applicable law.

Requests may be sent to privacy@baluthi.com. We may request proportionate information to confirm identity and protect the account. We respond within legal time limits.

• confirmation and access;
• correction;
• anonymization, blocking, or deletion where applicable;
• portability under regulation;
• information about sharing;
• withdrawal of consent and information on consequences;
• objection to unlawful processing;
• review of automated decisions where applicable;
• petition before the ANPD.

Deletion may be requested in the platform or through the privacy channel. Users should first export data they wish to retain. Some information may be retained under the legal grounds in this Policy.

The service is not directed to children. Minors should use it only through or under the responsibility of a legal representative, observing their best interests and LGPD requirements.

Essential account, security, and service messages may be sent independently of marketing. Promotional communications will include an unsubscribe method without affecting necessary messages.

This Policy may be updated for legal, technical, or service changes. Material changes will be communicated.

Translations are provided for convenience. If interpretations differ, Brazilian Portuguese prevails, without excluding mandatory rights.

Privacy: privacy@baluthi.com. Support: support@baluthi.com. Legal: legal@baluthi.com.