Privacy Policy

Last updated: May 2025 — This policy describes how Kindling Corporation collects, uses, and safeguards your personal information.

1. Introduction

Kindling Corporation ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect when you use our fundraising platform, how we use it, and the rights you have over your information. By accessing or using our platform, you agree to the practices described in this policy.

2. Information We Collect

We may collect the following categories of personal data:

• Identity data: full name, date of birth.
• Contact data: email address, phone number.
• Tax identification: CPF (Cadastro de Pessoas Físicas) required for PIX payment processing and compliance with Brazilian financial regulations.
• Payment data: PIX key, transaction ID, donation amount, and timestamp. We do not store full bank account numbers or card details.
• Usage data: IP address, browser type, pages visited, and interaction events collected via cookies and server logs.

3. How We Use Your Information

We use the personal data we collect for the following purposes:

• Processing and confirming donations made via PIX.
• Sending donation receipts and campaign updates by email.
• Verifying identity and preventing fraudulent transactions.
• Complying with legal obligations under Brazilian law (LGPD — Lei Geral de Proteção de Dados).
• Improving platform performance and user experience.
• Sending service communications (you may opt out at any time).

4. Data Sharing

We do not sell or rent your personal data to third parties. We may share your information with:

• Payment processors: PIX payment infrastructure providers operating under Banco Central do Brasil regulations.
• Hosting and infrastructure providers: solely to operate the platform, under strict data processing agreements.
• Legal authorities: when required by law, court order, or to protect the rights and safety of users.

5. Data Security

We implement industry-standard technical and organizational measures to protect your data against unauthorized access, disclosure, alteration, or destruction. All data transmissions are encrypted via HTTPS/TLS. PIX transactions are processed through secure, regulated financial channels. However, no internet transmission is 100% secure and we cannot guarantee absolute security.

6. Your Rights

Under the LGPD, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your data (subject to legal retention requirements).
• Withdraw consent for processing based on consent.
• Obtain information about third parties with whom we share your data.

To exercise any of these rights, please contact us using the information in Section 8.

7. Cookies

We use session and analytics cookies to understand how users interact with our platform. Essential cookies are necessary for the site to function and cannot be disabled. Analytics cookies help us improve the user experience. You can manage cookie preferences through your browser settings.

8. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection team via the Contact Us link in the footer. We will respond within 15 business days as required by the LGPD.