What data we process
Identification and contact data, the financial and asset data needed to assess credit, and site navigation data. The name, e-mail address, telephone number and message sent through the site's forms are stored encrypted to handle your request. We collect only what each step requires.
Why we use it
To simulate, assess and formalise credit operations with the partner financial institutions, to meet legal and regulatory obligations and to prevent fraud.
Site and campaign measurement
We use measurement tools to understand site navigation, monitor its performance and evaluate the campaigns that bring visitors to CifraCred. Each provider uses different resources and data.
Cloudflare Web Analytics: provides aggregate usage and performance metrics. According to Cloudflare, this service does not use cookies or identify individual visitors.
Meta: the Pixel may record page views, interest in the simulator, WhatsApp clicks and contact requests accepted by the system. When a form is accepted, we may also send the same event through Meta's Conversions API. A shared identifier helps prevent the event from being counted twice. This transmission may include the IP address, browser information, Meta cookie identifiers (fbp and fbc), and SHA-256 hashes of the submitted e-mail address and telephone number. Hashes replace the original text of these fields with cryptographic summaries, but do not make the data anonymous.
Google Ads: we use the Google tag to measure visits and advertising campaign performance. It may use cookies and process technical data such as pages visited, referral sources, IP addresses and browser information. The current configuration contains the base tag: we have not configured a specific lead-conversion event or the transmission of form names, e-mail addresses or telephone numbers to this tag.
The Meta and Google Ads tags load automatically on the production site when measurement is permitted by the privacy controls applied in the browser. The site respects the Global Privacy Control (GPC) signal when it is sent. These measurement resources are separate from the processing of data you provide to handle your request.
Providers process data under their own privacy policies. Further information is available through the links below.
Who we share it with
With the financial institution responsible for each operation and with strictly necessary providers (analysis, biometrics, fraud prevention), always under confidentiality and within the purpose.
Your rights
You may confirm the processing, access, correct, port and request the deletion of your data, among other LGPD rights. To exercise them, contact our Data Protection Officer.
Data Protection Officer (DPO)
Privacy questions and requests can be sent to dpo@cifracred.com.br.
Security and retention
We apply technical and organisational measures to protect the data, including encryption of the stored contact and the Cloudflare Turnstile anti-bot check on the forms. The contact of a request that does not become an operation is deleted within twelve months of submission; that of an ongoing operation follows the operation's lifecycle. Otherwise we keep data only for as long as the purposes and legal obligations require.