Privacy Policy

1. Introduction

BackChannel ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website backchannelinbr.com and use our payment infrastructure services.

BackChannel Pagamentos Ltda. is registered with the Banco Central do Brasil (BCB) as an authorized payment institution and operates in compliance with Lei Geral de Protecao de Dados (LGPD — Lei n. 13,709/2018) and other applicable Brazilian data protection regulations.

2. Information We Collect

2.1 Information You Provide

We may collect information you provide directly to us, such as when you:

• Submit a contact or integration inquiry form
• Request a product demonstration or consultation
• Enter into a service agreement with BackChannel
• Communicate with us via email or other channels

This information may include your name, email address, phone number, company name, CNPJ, and any other information you choose to provide.

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device, including:

• IP address and approximate geographic location
• Browser type and version
• Pages visited and time spent on each page
• Referring website or source
• Device type and operating system

2.3 Payment and Transaction Data

As a payment infrastructure provider, we process transaction data on behalf of our clients in accordance with separate data processing agreements. This transaction data is processed subject to BACEN regulatory requirements and is governed by our client service agreements.

3. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide customer support
• Process integration requests and onboard new clients
• Send service communications relevant to your account
• Improve our website and platform services
• Analyze website traffic and usage patterns
• Comply with BACEN reporting obligations and other legal requirements
• Fulfill KYC/AML requirements as mandated by applicable regulations

4. Legal Basis for Processing (LGPD)

Under the LGPD, we process personal data on the following legal bases:

• Consent: Where you have given explicit consent to the processing of your personal data
• Contract performance: Where processing is necessary for the performance of a contract to which you are a party
• Legal obligation: Where processing is required to comply with applicable laws, including BACEN regulations and AML/KYC requirements
• Legitimate interest: Where processing is necessary for our legitimate business interests, provided these do not override your privacy rights

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your browsing experience on our website. For more information about our use of cookies, please see our Cookie Policy.

6. Information Sharing

We do not sell your personal information to third parties. We may share your information with:

• Service providers who assist in operating our website and platform under confidentiality obligations
• Regulatory authorities including BACEN, when required by applicable law or regulatory obligation
• Professional advisors (legal, accounting, audit) under appropriate confidentiality arrangements
• Business partners only with your explicit consent

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls, and regular security assessments. As a BACEN-authorized institution, our security practices meet the standards required by BCB Resolution 85 on cybersecurity policy for payment institutions.

8. Your Rights Under the LGPD

Under the LGPD, you have the following rights regarding your personal information:

• Right to confirm the existence of processing
• Right to access your personal data
• Right to correct incomplete, inaccurate, or outdated data
• Right to anonymization, blocking, or deletion of unnecessary data
• Right to data portability
• Right to information about third parties with whom data has been shared
• Right to revoke consent at any time
• Right to lodge a complaint with the Autoridade Nacional de Protecao de Dados (ANPD)

To exercise any of these rights, please contact us at [email protected].

9. Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, including compliance with BACEN record-keeping requirements (minimum 5 years for transaction-related records) and other applicable legal obligations.

10. International Data Transfers

As a cross-border payments provider, some processing of transaction data may involve international data transfers. All such transfers are conducted in accordance with LGPD requirements and applicable international data protection standards.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these websites and encourage you to review their privacy policies.

12. Children's Privacy

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with an updated date. Your continued use of our website after such changes constitutes your acceptance of the revised policy.

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your LGPD rights, please contact us at:

BackChannel Pagamentos Ltda.
Avenida Paulista, 1578, 12 andar, Sao Paulo, SP 01311-200, Brasil
Email: [email protected]