Privacy policy
Last updated: 9 September 2026
The controller of your data is the seller identified on the seller page, who is also the person you talk to about it: privacidade@caniedu.com. This policy follows the Brazilian LGPD (Law 13.709/2018) and, for buyers in the European Union, the GDPR.
What we hold
Your email address, the plan you bought, the payment reference from Stripe, the billing country, and anything you write to us. That is the whole list. There is no user account, no password and no profile.
Why, and under what legal basis
- To deliver the course you paid for and to keep your access working: performance of the contract (LGPD art. 7, V; GDPR art. 6(1)(b)).
- To answer your messages: performance of the contract, or your consent when you write to us before buying.
- To keep the record of the sale for tax and consumer law: legal obligation (LGPD art. 7, II; GDPR art. 6(1)(c)).
- To keep the site standing and defend against fraud: legitimate interest (LGPD art. 7, IX; GDPR art. 6(1)(f)).
Who else processes it
Stripe (payments, Ireland and the United States), Resend (delivery emails, United States) and Vercel (hosting, worldwide). Each receives only what its job needs. None of them sells your data and none of them is authorised to use it for their own marketing.
International transfer
The seller is in Brazil and these providers are outside it. Transfers are made under the standard contractual clauses of each provider and, for European buyers, under the safeguards of chapter V of the GDPR.
How long we keep it
Purchase records for five years, which is the period Brazilian consumer and tax law works with. Messages from the contact form for two years. Marketing emails until you unsubscribe, which you can do in any of them. Nothing else is kept.
Your rights
Confirmation that we hold data about you, access to it, correction, anonymisation, portability, deletion, information about who we shared it with, and withdrawal of consent. Write to privacidade@caniedu.com; we answer within fifteen days, which is the LGPD deadline, and usually within two. Deleting your data closes your access to the lessons, because the purchase record is what opens it.
Children
The site is not for children and we do not knowingly collect data from anyone under 18. If a purchase was made by a minor, tell us and we cancel and refund it.
Tracking
No advertising pixel, no profiling, no analytics that follows you across other sites. If that ever changes, this page changes first and the cookie notice asks before anything is set.
Security and incidents
Data travels over HTTPS and is held in the systems of the providers above. If an incident ever put your data at risk, you and the Brazilian data protection authority (ANPD) would be told, as the LGPD requires.
Complaints
You can complain to us first, and to the ANPD in Brazil or to the supervisory authority of your country of residence in the European Union.