Privacy Policy

Updated on November 5, 2026

1. Who we are

The website pixprotect.com.br and the sale of PixProtect are operated by Fortis Aegis Advisory (CNPJ 28.442.124/0001-46), the controller of the personal data described here under Brazil’s General Data Protection Law (LGPD, Law 13.709/2018).

Questions and requests about your data: contato@fortisaegis.com.br.

This policy covers the website, the purchase and the download of the app. It does not describe how the app works once installed on your device.

2. What data we process and why

SituationDataPurpose and legal basis

PurchaseName, email, amount and payment status. Card or Pix details are collected and processed by Stripe; we do not receive them.Process the payment and release the download. Performance of a contract (art. 7, V).

Delivery and downloadPurchase email, purchase identifier, download count and link expiry.Release the download right after payment is confirmed, email the link, limit its use and revoke access on a refund. Performance of a contract (art. 7, V).

Contact and supportEmail and the content of the message you send.Reply to you. Performance of a contract or pre-contractual steps, and legitimate interest (art. 7, V and IX).

Website securityTechnical server logs, such as IP address and browser type.Prevent fraud and abuse and keep the site stable. Legitimate interest (art. 7, IX).

Advertising (Meta)See the next section.Measure our ads. Only with your consent (art. 7, I).

3. Advertising and the Meta Pixel

When you open the site you choose to accept or decline advertising cookies. Until you accept, the Meta Pixel is not loaded and nothing is sent to Meta. If your browser sends the Global Privacy Control signal, we treat it as a refusal.

If you accept:

The Meta Pixel (Meta Platforms) loads in your browser, sets the _fbp and _fbc cookies and tells Meta which pages you visit.
We keep on our server, for up to 30 days, your IP address, browser type and those identifiers, tied to a random reference in the purchase link. This record is deleted once the purchase is sent to Meta.
If you buy, we send Meta, through the Conversions API, a purchase event with amount, currency, order identifier, that browser data and your email as an irreversible hash (SHA-256), to measure and improve our ads.

If you decline, or buy without having accepted, no purchase event is sent to Meta.

You can change your mind at any time under Cookie preferences in the footer of any page. When you withdraw consent we delete the Meta cookies and the page reloads without the Pixel. Your choice is stored in your browser for 12 months.

Meta processes this data as a controller, under its own policy.

4. Who we share data with

Stripe: payment processing.
Meta Platforms: only if you accept advertising, as described above.
Hosting and email providers: to keep the site running and deliver the download link.

We do not sell personal data. We may also share data when required by law or by an authority’s order.

Stripe and Meta operate outside Brazil, so your data may be processed abroad, on the grounds in art. 33 of the LGPD, such as contractual clauses and performance of the contract.

5. How long we keep data

Purchase data: as long as needed to meet legal, tax and accounting obligations and to defend rights.
Advertising record on our server: up to 30 days, or until the purchase is sent to Meta, whichever comes first.
Download link: available immediately after payment; the email with the link arrives within 24 hours. The link is limited to 3 downloads and 7 days, unless our team adjusts it.
Your cookie choice: 12 months, in your browser.

6. Your rights

Under the LGPD (art. 18) you may request: confirmation that we process your data; access; correction; anonymization, blocking or deletion of unnecessary data; portability; information about who we share data with; deletion of data processed on the basis of consent; and withdrawal of consent.

To exercise any right, write to contato@fortisaegis.com.br. If you believe your data was handled improperly, you may also complain to Brazil’s National Data Protection Authority (ANPD).

7. Security

We use HTTPS, verified signatures on Stripe payment notices, keys and credentials kept outside the public pages of the site, and download links with an expiry and a limit. No system is completely immune to failure; if an incident may cause a relevant risk, we will notify you and the ANPD as the law requires.

8. Changes to this policy

We may update this policy. The update date is at the top of the page and, if a change is significant, we will say so on the site.