Privacy Policy

1. Who looks after your data

(a preencher antes de publicar), CNPJ (a preencher antes de publicar), responsible for Mesa Aberta. The data protection officer (LGPD, art. 41) is (a preencher antes de publicar), at the email (a preencher antes de publicar).

2. What data we keep

• Registration: name, WhatsApp, date of birth, email (if you choose to give it) and your password, stored in scrambled form (not even the team can read it).
• Payments: amount, package, date and the Pix charge code. The bank details of the payer stay with the bank and with XGate, not with us.
• Readings: the questions you write, the cards that came up and the answers, so you can reread them later and so the team can follow the service.
• Use of the site: a session cookie, which keeps you logged in, and technical access logs.

3. What we use it for

• To carry out your reading and charge for the right time (performance of the contract, LGPD art. 7, V).
• To confirm payments, return amounts and meet tax obligations (legal obligation, art. 7, II).
• To protect your account and prevent fraud (legitimate interest, art. 7, IX).

Questions may involve intimate subjects, such as health, religion or love life. This content is used only to prepare your reading and is handled on the basis of your consent when you write (art. 11, I). We do not use your questions for ads.

4. Who we share it with

Only with those who need it for the service to work, always with limited access:

• XGate, which processes Pix.
• Technology providers which process the text of the readings to prepare your reading. They receive the question, what you wrote earlier in the conversation, your first name and your sign, and may be outside Brazil (international transfer, art. 33).
• Hosting and database where the site runs.
• Meta (Facebook and Instagram), only if you allow it: it shows whether an ad brought a visit or a purchase, so we can advertise better. When you buy credit, Meta receives the amount and your phone number (and email, if you gave one) scrambled (hashed), in a way that cannot be read. Nothing from your reading goes to Meta. It may be outside Brazil (art. 33). If you arrived through the ad of a partner who promotes Mesa Aberta, this same measurement information also goes to that partner's ad account, only to measure their ad.
• Microsoft Clarity, only if you allow it: it measures how the site is used (clicks, scrolling, movement on the screen) so we can improve the pages. The text of the readings and your account details are hidden and never recorded. It may be outside Brazil (international transfer, art. 33).

We do not sell or rent personal data.

5. For how long

• Registration and readings: for as long as your account exists. If you ask for deletion, we delete them.
• Payment records: for the period required by tax law, even after the account is deleted.

6. Cookies

The session cookie is essential: it is what keeps you logged in.

With your permission, we also use measurement cookies: those of Microsoft Clarity, which show how the site is used (clicks, scrolling, movement on the screen) so we can improve the pages, and those of the Meta Pixel, which show whether an ad worked. The text of the readings and your account details are never recorded. You choose in the notice that appears on your first visit, and you can change it whenever you like: Change my choice about measurement

7. Your rights

You can ask at any time to confirm whether we process your data, see a copy, correct it, delete it, take it to another service or withdraw a consent (LGPD, art. 18). Just contact us through the help center. We reply within 15 days.

8. Security

The site uses a secure connection, your password is stored scrambled and only the responsible team has access to the readings. If an incident occurs that could put you at risk, we will let you know.