Privacy policy

Who we are

Pacota is software that service providers use to sell session packages, schedule appointments, and receive payments. This policy explains which data we handle and why, under Brazil's General Data Protection Law (LGPD).

Data we handle

• Providers and their teams: name, email, business details and, to receive online payments, the details our payment partner requires (such as CPF or CNPJ and bank account).
• Providers' customers: the data the provider enters, such as name, email, phone, packages bought, scheduled sessions, and payments. Here the provider is the data controller and Pacota processes the data on their behalf.
• Usage data: technical logs needed to keep the service secure and running.

Pacota does not store card data. Payments are processed by Asaas, our payment partner.

Emails we send

We only send emails tied to using the service: sign-in codes, team invitations, session reminders, cancellation or rescheduling notices, and payment notices. We do not send marketing emails to providers' customers.

Reminder and notice emails include an unsubscribe link that stops that provider's emails to you. Sign-in codes are only sent when you request them.

Who we share data with

We share data only with the suppliers needed to run the service: hosting and email delivery (Amazon Web Services and Vercel) and payments (Asaas). We do not sell personal data.

Your rights

You can ask to access, correct, or delete your data. If you are a provider's customer, contact the provider first, as they are responsible for your record; we can also help. Write to pacotaiadm@gmail.com.