SignaIP Platform Privacy Policy

This Policy explains how Inspireip Tecnologia Blockchain LTDA, CNPJ/ME No. 38.285.174/0001-10, processes Personal Data in SignaIP under Brazil's LGPD.

For registration, authentication, payment, usage, telemetry, technical and support data, Inspireip acts as Controller. For Personal Data included by the User in User Content, including Declared Owner data, Inspireip acts as Processor under the User's instructions, without limiting processing for security, fraud prevention and legal obligations.

The terms below have the meanings assigned in this section.

Personal Data

Information related to an identified or identifiable natural person.

Data Subject

The natural person to whom Personal Data relates.

Processing

Any operation performed with Personal Data, such as collection, use, storage and deletion.

Record

A Platform operation that embeds C2PA authenticity credentials in the User's file with blockchain and IPFS anchoring.

Blockchain and IPFS

Public decentralized recording and storage networks characterized by immutability of published data.

ANPD

Brazil's National Data Protection Authority.

We may collect registration data such as name, email, encrypted password, declared profile and representative data; payment data processed by partners; submitted files and Record data such as Declared Owner, copyright notice, website, social profiles and AI permissions; usage, telemetry and error logs; technical data such as IP, device, operating system and browser; and support communications.

Some Record data becomes part of a Manifest published on blockchain and IPFS as described in Section 5.

We process data to operate the Service, Records, Validator and accounts; bill and manage Plans; provide security and prevent fraud; improve the Platform; send essential communications; send optional marketing with consent; comply with legal obligations; and defend rights in judicial and administrative proceedings. The applicable legal bases include contract performance, legal obligation, legitimate interest, consent and regular exercise of rights.

Data may be shared with technology, cloud, IPFS, analytics, communications and payment providers only for this Policy's purposes; public authorities when legally required or ordered by a court; and successors in corporate transactions. Inspireip does not sell Personal Data.

Data included by the User in a Manifest becomes public on the networks described in Section 5 by the User's decision.

Vendors, cloud providers, pinning services and public networks with global nodes may be located outside Brazil. In these cases, Inspireip adopts LGPD safeguards such as contractual clauses and vendors with adequate protection standards.

We use cookies and similar technologies for authentication and session security, preferences, and usage and performance analytics. Non-essential cookies require consent and can be managed in the browser or Platform. Disabling essential cookies may impair the Service.

We retain data for the time necessary for the purposes of this Policy. Account data is retained while the account is active; access logs for at least six months; billing data for applicable tax periods; and data used to defend rights for statutory limitation periods.

Afterward, directly controlled data is deleted or anonymized. Data published on blockchain and IPFS remains as described in Section 5.

Under Article 18 of the LGPD, Data Subjects may request confirmation, access, correction, anonymization, blocking or deletion where legally applicable, portability, information on sharing and consent, and withdrawal of consent.

Requests are handled within a reasonable time, subject to Section 5 technical limits. Contact contato@inspireip.io. Data Subjects may also petition the ANPD.

Inspireip adopts technical and organizational measures consistent with the state of the art, including encryption in transit, access controls, operation logs and secure key management.

For an incident likely to cause relevant risk or damage, Inspireip will notify affected people and the ANPD as required by the LGPD.

The Platform is not intended for people under 18 and does not intentionally collect children's or adolescents' data. If a minor's account is identified, Inspireip will close it and delete directly controlled data.

Inspireip appoints a Data Protection Officer. Contact: contato@inspireip.io, addressed to the Data Protection Officer (DPO).

This Policy may be updated. Material changes will be notified with reasonable notice by email or through the Platform. The current version and effective date will remain available on the Platform.

Questions about this Policy or Personal Data processing may be sent to contato@inspireip.io.

This Policy is governed by Brazilian law. The courts of São Paulo/SP are elected, subject to the consumer's home venue in consumer relationships.