The short version
- We use your data to build, deliver and keep the gift you bought, to sign you in by email and to help you when you contact support.
- Anyone with your gift's link can view it. Gift pages aren't indexed by search engines, but only share the link with people you trust.
- We never see or store your card details. Payments are handled by Stripe (US dollars) and Mercado Pago (Brazilian reais).
- We use advertising pixels (Meta, TikTok, Google, Pinterest and Taboola) to measure our ads.
- You can ask to access, correct or delete your data at any time at [email protected].
Who we are
CronoLove is a website that sells digital romantic gifts. It is operated by [RAZÃO SOCIAL], a company registered in Brazil under CNPJ [00.000.000/0001-00] ("CronoLove", "we", "us"), which is the controller of the personal data described here.
This policy explains what personal data we collect, why, who we share it with and what your rights are. Because CronoLove is a Brazilian company, it is written under Brazil's General Data Protection Law (Law No. 13,709/2018, the "LGPD"). If you live in a country with its own privacy law, such as the EU's GDPR or a US state privacy law, you keep the rights that law gives you. The rules for using the service are in our Terms of Use.
What we collect
Information you give us
- Contact details: your email address (required) and a WhatsApp phone number (optional).
- Gift content: the couple's names, the date the relationship started, the photos you upload, a music link, the text of your letter and the language you chose.
- Support: whatever you send us when you contact support by WhatsApp or email.
Payment information
You pay directly on Stripe or Mercado Pago. We only receive the payment confirmation and order details such as the amount, payment method and status. CronoLove never receives or stores your card number.
Information collected automatically
- Technical data: IP address, browser and device (user agent), and the date and time of your visits.
- Cookies and similar technologies: see Cookies and advertising pixels.
- Where you came from: UTM parameters and ad click IDs (such as fbclid, gclid and ttclid) that tell us which campaign brought you to the site.
- Gift opens: on the Complete plan, we record when the gift is opened so we can send the buyer a visit notice.
How we use it, and our legal bases
The LGPD requires a legal basis for every use of personal data. Here are ours:
| Purpose | Legal basis (LGPD, art. 7) |
|---|---|
| Building, hosting, delivering and letting you edit your gift | Performance of a contract |
| Creating your account and emailing your sign-in link | Performance of a contract |
| Sending transactional emails: delivery, sign-in link and visit notice (Complete plan) | Performance of a contract |
| Processing payments and refunds, and issuing tax documents | Performance of a contract and legal obligation |
| Answering support requests by WhatsApp and email | Performance of a contract |
| Keeping access logs for the period required by Brazilian internet law | Legal obligation |
| Preventing fraud and keeping the site secure | Legitimate interest |
| Measuring ad performance and sending purchase events to ad platforms | Legitimate interest, or consent where we ask for it on the site |
| Defending our rights in legal or administrative proceedings | Exercise of rights |
Where we rely on legitimate interest, you can object at any time (see Your rights).
Photos of other people. When you upload photos and names, you confirm you have the consent of the people in them, especially the person receiving the gift. We use this content only to build and show your gift. We don't use it in ads or share it for any other purpose.
Who can see your gift
Every gift is delivered as a link and a QR Code. Anyone who has the link can view the gift, without signing in. Gift pages are marked so search engines like Google don't index them.
Still, think of the link as a key: if it gets passed on, whoever receives it can see the content. Share it only with people you choose, and contact support if it leaks.
Editing a gift requires signing in to the buyer's account.
International transfers
CronoLove is based in Brazil, and some of our providers, such as Stripe, cloud providers and the ad platforms, store or process data in other countries, mainly the United States. These transfers are needed to provide the service you bought and rely on the safeguards in article 33 of the LGPD, such as contractual commitments from our providers. We choose providers that follow recognized security and data protection standards.
How long we keep data
- 24-hour gifts: after 24 hours the gift goes offline. Its photos are kept for 7 more days so you can bring it back, and are then deleted.
- Forever and Complete gifts: kept for as long as the service operates, or until you ask us to delete them.
- Your account (email and phone): for as long as you have active gifts, or until you ask us to delete it.
- Order and payment records: for the period required by tax and consumer law (generally 5 years).
- Access logs (IP, date and time): at least 6 months, as required by Brazil's Internet Civil Framework (Law No. 12,965/2014).
- Support messages: for as long as needed to resolve your request and any follow-up.
When these periods end, the data is deleted or anonymized. Data we keep because of a legal obligation isn't used for anything else.
Security
We use technical and organizational measures to protect your data, including encrypted connections (HTTPS), passwordless sign-in through a link sent to your email, restricted access to our systems, and payments handled by certified processors so card data never passes through us.
No system is completely immune to failure. If a security incident could create a significant risk or harm to you, we'll notify you and Brazil's data protection authority (ANPD), as the LGPD requires.
Please keep your email account secure too: it's how you sign in to CronoLove.
Your rights
Under the LGPD (art. 18), you can at any time:
- confirm whether we process your data and get access to it;
- correct incomplete, inaccurate or outdated data;
- ask us to anonymize, block or delete data that is unnecessary or processed unlawfully;
- ask for your data to be transferred to another provider (portability);
- ask us to delete data processed based on your consent;
- find out who we share your data with;
- withdraw your consent, where consent is the legal basis;
- object to processing based on legitimate interest;
- ask for a review of decisions made solely by automated processing.
How to make a request: email [email protected] from the address linked to your account. We may ask you to confirm your identity first. We'll respond within the time limits set by the LGPD (art. 19).
If you ask us to delete a gift, it goes offline and can't be recovered. Some data may be kept for the legally required period (see How long we keep data).
You can also file a complaint with Brazil's data protection authority, the ANPD (gov.br/anpd), or with the data protection authority in your country.
Children's privacy
CronoLove is intended for adults. We don't knowingly collect data from children or teenagers as buyers. Photos of minors may only be used in appropriate, family contexts and by someone authorized by their parent or guardian, as article 14 of the LGPD requires. If you believe we've received a child's data improperly, email [email protected] and we'll remove it.
Changes to this policy
We may update this policy to reflect changes to the service or the law. The date at the top of this page shows the latest update. If a change is significant, we'll let you know by email or on the site.
Contact and data protection officer
You can reach CronoLove's data protection officer (in Brazil, the "encarregado") at [email protected].
- Email: [email protected]
- WhatsApp: +55 47 99251-9902, daily from 9 a.m. to 10 p.m. BrasÃlia time (UTC−3)
- Company: [RAZÃO SOCIAL], CNPJ [00.000.000/0001-00]
Questions? Reach us on WhatsApp at +55 47 99251-9902 (daily, 9 a.m. to 10 p.m. BrasÃlia time) or by email at [email protected].