Privacy Policy

Last updated: 2026-05-20

1. Data Controller

The data controller for this platform is Ordem dos Advogados do Brasil - Seção de São Paulo (OAB/SP), Brazilian company registry (CNPJ) 43.419.613/0001-70, located at Rua Maria Paula, 35 - Centro - São Paulo/SP - 01319-903, Brazil.

2. Data we collect

• Identification and contact: name, email, phone.
• Documents: CPF or passport (when required for event rules and validation).
• Address: when provided during checkout for registration and/or billing purposes.
• Purchase data: tickets purchased, amounts, order status and transaction history.
• Technical data: IP address, timestamps, session identifiers and security events (fraud/abuse prevention).

3. Purposes and legal bases

• Contract performance: process purchases, issue/manage tickets, allow access to the buyer dashboard and send transactional messages.
• Legal obligation: retain order and fiscal records as required by law and audits.
• Legitimate interests: platform security, fraud prevention, stability improvements and incident monitoring.
• Consent: when you opt in to analytics cookies (e.g., Google Analytics) for aggregated usage measurement.

4. Sharing with service providers

• Pagar.me: payment processing and anti-fraud. We do not store sensitive card data.
• Postmark: transactional email delivery.
• Logto: authentication (including social login, when used).
• Google Analytics (optional): usage measurement only when you consent to analytics cookies.

5. Cookies

• Essential: authentication session, security, language preferences and checkout functionality.
• Analytics (optional): Google Analytics is only loaded after you enable analytics cookies. When enabled, IP anonymization may be applied.

You can review and change your cookie preferences at any time using the cookie banner/settings.

6. International transfers

Some providers may process data outside Brazil (for example, email delivery and authentication). Transfers are performed in accordance with applicable data protection rules and contractual safeguards.

7. Retention

We retain personal data only as long as necessary for the purposes described above and legal requirements. In general, orders and fiscal records may be kept for up to 5 years.

8. Your rights

You can request access, correction, portability, deletion/anonimization where applicable, and withdraw consent. Contact: suporte@congressopps.com.br.