Service provider
- Brand
- RumoAoPro
- contato@rumoaopro.com.br
- +55 19 99281-1078
1. Controller and contact
RumoAoPro determines how personal data collected directly through this website and its support channels is processed.
For privacy questions, requests or rights, email contato@rumoaopro.com.br or contact us on WhatsApp at +55 19 99281-1078.
2. Data we may collect
- Identity and contact data: name, email, phone, WhatsApp, country, Brazilian CPF or another document when required.
- Address and tax data: postal code, street, number, additional address details, city, state and country.
- Order and payment data: product, amount, currency, discount, status, order identifier and gateway references. RumoAoPro does not store full card numbers.
- Account and access data: authentication tokens, product access history and security records.
- Coaching and application data: goals, routine, calendar, equipment, sporting background and information about pain, injuries or limitations that you choose to provide.
- Technical data: IP address, browser, device, pages accessed, date and time, essential cookies and error or fraud-prevention logs.
- Communications: messages, support requests, form responses and preferences you provide.
3. How we collect data
We collect data when you complete forms, purchase, request access, use the customer area, contact us or apply for coaching. We also receive payment confirmations and identifiers from payment and technical providers used to complete the transaction.
4. Why we use data
- Process payments, confirm orders and release purchased products.
- Create and protect accounts, authenticate access and recover credentials.
- Deliver materials, send transactional messages and provide support.
- Review applications and personalize online coaching when contracted.
- Issue tax documents, retain accounting records and comply with legal obligations.
- Prevent fraud, abuse, illegitimate chargebacks and security incidents.
- Improve website operation, navigation and reliability.
- Send marketing messages only when there is a valid legal basis and an opt-out where required.
5. Legal bases
Depending on the context, we process data to perform a contract or take pre-contractual steps, comply with law, exercise legal rights, prevent fraud and protect the platform, pursue legitimate interests compatible with your rights, or with consent.
Health or injury information may be sensitive personal data. It is processed only when necessary to assess or safely deliver a service and under an appropriate legal basis, including specific consent where required. You may decline optional information, but this may prevent a responsible assessment of the service.
6. Sharing and processors
We share only the data required with providers that operate the website, payments, storage and communications. Providers process data under their contracts and policies.
- Vercel, for website hosting and delivery.
- Supabase, for databases, authentication and private material storage.
- Stripe and Mercado Pago, for payments and fraud prevention.
- Kiwify, when a course purchase is completed through its external checkout.
- Resend and email providers, for purchase, access, support and notification messages.
- Accounting, tax, legal advisers and public authorities when required or permitted by law.
7. International transfers
Some providers may process or store data outside Brazil. In those situations, we seek established providers and contractual and security safeguards compatible with the Brazilian LGPD and other applicable rules.
8. Cookies and essential technologies
The website may use cookies or similar technologies required for sessions, login, security, language preferences and checkout operation. Blocking cookies may prevent important account or purchase features from working.
If optional advertising or analytics technologies are adopted in the future, this policy and consent controls will be updated where required.
9. Retention
We retain data as needed to deliver products and services, support customers, comply with tax, accounting and legal obligations, prevent fraud and exercise legal rights. Data is then deleted or anonymized unless retention remains required or permitted by law.
10. Security
We use administrative and technical controls proportionate to the service, including authentication, restricted administration areas, signed links, private storage and secure connections. No system is entirely invulnerable, so we also monitor failures and improve protections.
Never send passwords, API keys or full card details by email or WhatsApp.
11. Your rights
Depending on applicable law, you may request confirmation, access, correction, deletion, anonymization or restriction, information about sharing, portability, review of automated decisions, withdrawal of consent and information about the consequences of withholding consent.
We may request additional information to verify identity. Requests may be limited where retention is legally required or another lawful exception applies. Brazilian data subjects may also exercise the rights provided by the LGPD.
12. Children and teenagers
Users under 18 must use the services with the knowledge and supervision of a parent or legal guardian. If we identify improper processing of a minor's data, we will take steps to protect the individual and adjust or delete the data as required by law.
13. Updates
We may update this policy to reflect legal, technical or operational changes. The current version and update date will remain available on this page.