1. Data controller
NORTFEST COMERCIAL LTDA (trading as Nortfest), Brazilian company registration (CNPJ) 47.716.524/0001-47, R. Jacob Batista Uliano, 1511, Sala 02, Centro, Braço do Norte/SC, CEP 88750-000, Brazil, is the controller of the personal data processed through Monetta, under Brazil's General Data Protection Law (LGPD).
2. Data we collect and why
- Account data: name, email address and password (stored only in hashed form by our authentication provider), or the basic profile data you share if you sign in with Google. Used to create and secure your account (performance of contract).
- Data you enter: personal income and expense entries, goals, recurring bills, products, recipes, ingredients, sales, prices and business settings. Used solely to provide the service (performance of contract).
- Assistant input: text you type or speak to the assistant. Speech is converted to text by your browser; the resulting text is sent to an artificial intelligence provider only to turn it into suggested entries, which are saved only after you confirm them (performance of contract). We record the date you used the assistant to apply the free plan's daily limit.
- Subscription data: plan, subscription status, renewal dates and customer/subscription identifiers received from Paddle. Card details are handled by Paddle and never stored by us (performance of contract).
- Technical data: IP address, device and browser information, and usage and error logs. Used for security, fraud prevention and product improvement (legitimate interests).
- Support: messages you send us. Used to respond to you (legitimate interests).
We do not sell your data and do not use your financial data for advertising.
3. Who we share data with
- Service providers that operate the service: hosting, database, authentication and artificial intelligence providers;
- Paddle.com, our reseller and Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing;
- Professional advisers (legal, accounting) where necessary;
- Public authorities where required by law.
Some providers may process data outside Brazil, subject to appropriate contractual safeguards as required by the LGPD.
4. Retention
We keep your data while your account exists. When you delete your account (in Settings), any active subscription is cancelled and your account data is deleted, except where we are legally required to keep certain records for longer. Data is deleted or anonymised once no longer needed.
5. Your rights
You may request confirmation of processing, access, correction, portability, anonymisation or deletion of your data, information about sharing, and withdraw consent, and you may lodge a complaint with Brazil's data protection authority (ANPD). Contact nortfest03@gmail.com.
6. Security
We use encrypted connections (HTTPS), hashed passwords and database access rules that prevent one user from accessing another user's data.
7. Cookies and local storage
We use only essential browser storage to keep you signed in and remember your preferences. We do not use advertising cookies.
8. Contact
nortfest03@gmail.com · +55 (48) 9926-4696