Privacy Policy

The controller of your personal data on stl-prime.com is [US COMPANY NAME], [ENTITY TYPE AND STATE OF REGISTRATION], registration [REGISTRATION / EIN NUMBER], [STREET ADDRESS], [CITY, STATE ZIP], [COUNTRY]. The platform runs on servers operated by its Brazilian affiliate, Data Frontier Tecnologia e Desenvolvimento Ltda., which processes the data on our behalf.

For any privacy matter, including access and deletion requests, contact [privacy@stl-prime.com] or the contact form. EU representative (GDPR art. 27): [EU REPRESENTATIVE NAME AND ADDRESS, IF APPLICABLE].

From each payment we keep only: the Stripe customer and subscription identifiers, the amount, the currency, the date and the status of the charge. Never the card number, nor any part of it.

• When you sign up: name, email address, phone or WhatsApp number if you provide it, and your password — stored only as a one-way hash, never as you typed it. We also keep your language, the date you confirmed your email (confirming is optional) and how you reached the sign-up page: only the channel (for example, the site that linked to us), carried in the link itself, without cookies.
• When you subscribe: Stripe collects your card details, billing address and, if you are a business, your VAT number, to charge you and calculate tax. We receive the identifiers and payment details listed in section 2.
• When you accept the license and these terms: the date, your IP address, the document version and a fingerprint (hash) of the accepted text. This is our evidence of what was agreed.
• When you download a file: which file, when, and from which IP address — to know what was delivered and to apply the daily download limit.
• When you use the contact form: name, email, phone if you provide it, subject and message.
• When you review a model: your rating and text. Reviews are published only after our team reads them, with your first name and last initial — never your full name or email.
• On any visit: our server logs record IP address and pages requested, for security and to investigate abuse.

We do not collect special categories of data (health, biometrics, beliefs), and we do not ask for anything beyond this list.

• To perform our contract with you (art. 6(1)(b)): running your account, charging the subscription, delivering downloads and answering you.
• To comply with legal obligations (art. 6(1)(c)): keeping records of charges and taxes.
• Our legitimate interests (art. 6(1)(f)): server logs, the sign-in attempt limit and the daily download limit, which protect the platform from abuse; and keeping the evidence of what was agreed (license and terms acceptance).

We do not use your data for advertising, we do not profile you, and no decision about you is made solely by automated means.

We only use essential cookies, which do not require consent:

• stlprime_sessao — keeps you signed in. It is httpOnly (page scripts cannot read it) and lasts 7 days.
• stlprime_idioma and stlprime_moeda — remember the language and the currency you picked, and are set only when you pick them.

Your answer to the cookie notice is kept in your browser’s local storage (stlprime_cookies_en), only so the notice does not show on every page. There is no analytics, no advertising and no third-party cookie on stl-prime.com. Stripe’s checkout page, on Stripe’s own domain, uses its own cookies for fraud prevention, under Stripe’s privacy policy. If we ever add any other measurement, this section and the cookie notice will change first, and will ask for your consent.

legal.refazerCookies.botao

We share the minimum necessary with these service providers:

• Stripe (Stripe, Inc. and Stripe Payments Europe, Ltd.), to process payments and calculate taxes. For some purposes, such as fraud prevention and its own legal obligations, Stripe acts as an independent controller.
• Data Frontier Tecnologia e Desenvolvimento Ltda. (Brazil), which operates the servers where the platform, the database and the files are hosted.
• Our email delivery provider, which receives your address and the content of transactional emails (welcome, email confirmation, password reset, notices about your account) to deliver them.

Nobody else, except when required by law. We do not sell your personal information and we do not share it for advertising.

Our servers are in Brazil, so your data is transferred outside the European Economic Area and the United States. For transfers from the EEA, the UK and Switzerland we rely on the European Commission’s Standard Contractual Clauses (and their UK and Swiss equivalents). You can ask us for a copy through [privacy@stl-prime.com] or the contact form.

• Account and subscription: while the account is in use, including after a cancellation. An account with no paid subscription, no complimentary access and no activity is anonymized after 5 years if there was ever a payment, or 2 years if there was none, with an email notice 30 days before — section 12 of the Terms of Service. The backup made before anonymizing is deleted after 90 days.
• Charges: amount, currency, date and status remain after anonymization, with nothing that identifies you.
• License and terms acceptances: with the account. On anonymization only the date and version remain, without your IP or any link to you.
• Support messages: while the conversation lasts and up to 12 months after, unless you ask us to delete them sooner.
• Reviews: while the account exists.
• Server logs: for as long as needed for the security of the platform.

Under the GDPR you have the right to access your data, to rectify it, to have it erased, to restrict or object to its processing, and to data portability. You also have the right to lodge a complaint with the data protection authority of the country where you live or work.

When you ask for erasure we anonymize the account: your name, email, phone, password and the IP addresses stored with your downloads and acceptances are removed, together with your support messages and reviews. What remains — amount, date and status of charges, and the date and version of the acceptances — no longer identifies you. Anonymization cannot be undone.

To exercise any right, contact [privacy@stl-prime.com] or the contact form. We answer within one month.

In the last 12 months we collected these categories of personal information: identifiers (name, email, phone, IP address, account and payment identifiers); commercial information (plan, charges, downloads); internet activity (server logs, downloads); and account log-in credentials (email and hashed password), which the law treats as sensitive and which we use only to provide the service. The sources, purposes and recipients are described in sections 3, 4 and 6, and the retention periods in section 8.

We do not sell or share (for cross-context behavioral advertising) personal information, and have not done so in the last 12 months — including of consumers under 16. Opt-out preference signals such as Global Privacy Control are therefore already respected.

You have the right to know what we collect and how we use it, to delete it, to correct it, and not to be discriminated against for exercising these rights. To make a request, contact [privacy@stl-prime.com] or the contact form. We verify the request by matching it with the email address of your account, and answer within 45 days. You may use an authorized agent, with your signed permission; we may ask you to confirm your identity directly.

STL Prime is not directed to children, and subscriptions require being of the age of majority. We do not knowingly collect data from anyone under 16. If you believe a child has given us data, contact us and we will delete it.

Passwords are stored as hashes that nobody can read, not even us. Files are kept in closed storage and leave only through individual signed links valid for a few minutes. Internal access is separated by role: staff who publish models and answer customers cannot see billing.

No system is infallible. If a breach is likely to put your rights at risk, we will notify you and the competent authorities as the law requires.

If anything changes — a new tool, a new purpose — we update this page and the date at the top. Material changes are emailed to account holders.