Privacy Policy

Who we are

JSM Serviços Ltda., registered under Brazilian Tax ID (CNPJ) 61.602.378/0001-50, headquartered at Rua Jaime Honorato Santos, 20, Padre Eustáquio, Janaúba/MG, ZIP 39.442-250, Brazil, is the data controller for the personal data processed under this Policy.

We specialize in digital products focused on personal development — ebooks, practical guides and an app based on the Law of Attraction. Our website is www.jsmservicos.online.

What data we collect

We only collect the data necessary to provide our services with quality. Data may be provided directly by you or collected automatically while you use our platforms.

Data you provide:

• Full name and email address (when registering or contacting us)
• Phone or WhatsApp number (when voluntarily provided)
• Payment data — processed by secure third-party platforms; we do not store card details
• Messages and content submitted through contact or support forms

Data collected automatically:

• IP address and approximate geolocation data
• Device type, operating system and browser used
• Pages visited, time spent and interactions on the site
• Cookies and similar tracking technologies (see Section 6)

How we use your data

Your personal data is used exclusively for the following purposes:

• Processing purchases and delivering the digital products bought in our store
• Customer support — answering questions, requests and complaints
• Sending transactional communications such as purchase confirmations, receipts and access updates
• Sending marketing emails, only when you expressly authorize it
• Continuous improvement of our products, services and website experience
• Compliance with applicable legal and regulatory obligations
• Fraud prevention and ensuring the security of transactions

Legal basis for processing

All data processing carried out by JSM is grounded in one or more legal bases set out in the LGPD (Article 7):

• Contract performance — to process purchases and deliver the products acquired
• Consent — for sending marketing communications and using non-essential cookies
• Legitimate interest — for security improvements, usage analysis and fraud prevention
• Compliance with a legal obligation — to meet tax, accounting and regulatory requirements

When processing is based on consent, you may withdraw it at any time without affecting prior processing.

Data sharing

JSM does not sell, rent or trade your personal data. We may only share it in the following situations:

• Payment platforms (e.g. Stripe, PagSeguro, Hotmart) for secure transaction processing
• Email and CRM services used for communication and customer support
• Hosting and infrastructure platforms that support our website and app
• Public authorities and regulatory bodies, when required by law or court order

All partners and vendors with access to personal data are contractually required to maintain confidentiality and adopt appropriate security measures, in compliance with the LGPD.

Cookies and tracking technologies

We use cookies and similar technologies to improve your experience on our website. The types we use are:

• Essential cookies: required for the site's basic functioning (authentication, shopping cart). Cannot be disabled.
• Performance cookies: collect information about how the site is used to help us improve it (e.g. Google Analytics).
• Functionality cookies: remember your preferences and personalize your experience.
• Marketing cookies: used to display relevant ads. Enabled only with your consent.

You can manage and disable non-essential cookies at any time in your browser settings. Disabling some cookies may affect site functionality.

Data security

We adopt appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration or improper disclosure, including:

• SSL/TLS encryption across all communications and transactions
• Restricted access to personal data by authorized staff
• Continuous security and vulnerability monitoring
• PCI-DSS certified payment partners
• Regular backups and incident response plans

How long we keep your data

We retain your personal data for as long as necessary to fulfill the purposes described in this Policy or to meet legal obligations:

• Registration and purchase data: 5 years after the last transaction, as required by Brazilian tax legislation
• Communication history: 2 years after the support case is closed
• Browsing and cookie data: up to 13 months, renewable with your consent
• Marketing data: for as long as you keep your consent active

After the applicable period, data is securely deleted or irreversibly anonymized.

Your rights as a data subject

The LGPD grants you the following rights regarding your personal data. To exercise them, please contact us:

You may also file a complaint with the National Data Protection Authority (ANPD) at www.gov.br/anpd.

Minors

Our products and services are intended for individuals 18 years of age or older. We do not knowingly collect personal data from children or teenagers.

If we become aware that we have collected a minor's data without proper parental consent, we will delete that information immediately. If you suspect this may have occurred, please contact us.

Changes to this Policy

We may update this Privacy Policy periodically to reflect changes in our practices, applicable legislation or improvements to our services.

When material changes occur, we will notify you by email and/or through a prominent notice on our website. The date of the last update will always appear at the top of this document.

Contact our DPO

To exercise your rights, ask questions, or submit requests related to the privacy of your data, please contact our Data Protection Officer (DPO):