This Policy describes how DNZ DESENVOLVIMENTO E TECNOLOGIA LTDA EPP (“we”, “DNZ”) processes personal data in the Smart Gestor Plus product (“SG Plus”), available at smartplus.dnzdesenvolvimento.com.br. Brazilian Law No. 13,709/2018 (LGPD) applies, and when marketplace integrations are active, the rules of the corresponding platform apply as well, including TikTok Shop.
1. Controller and data protection contact
DNZ is the controller of account, authentication, billing, and platform operation data. Each customer company (tenant) is the controller of records it enters itself (customers, products, tax invoices, orders). When a seller authorizes TikTok Shop integration, DNZ processes data received from the API as a processor to deliver the contracted service.
Data protection contact (privacy officer): [email protected].
2. Data we collect
- Account and company: name, email, login, tax ID (CNPJ/CPF), phone, issuer address, users, and access profiles.
- ERP operations: products, inventory, customers, suppliers, sales, purchases, tax XMLs and PDFs, audit logs.
- Integrations: API tokens (stored encrypted), store identifiers, external orders and statuses.
- TikTok Shop (when authorized): order and SKU identifiers, amounts, status, delivery data and, when the API provides them, buyer name, phone, address, and document. We may also store API payloads for reconciliation.
- Technical: IP address, device identifier used for authentication, access and error logs.
3. How we use data
- Providing the management SaaS, tax issuance, and order synchronization.
- Authentication, permission-based access control, and isolation between companies.
- Compliance with tax and contractual obligations.
- Handling requests from sellers, TikTok Shop, or data subjects (access, correction, deletion).
- Information security, abuse prevention, and incident response.
Typical legal bases: contract performance (LGPD Art. 7, V), compliance with a legal obligation (Art. 7, II), and legitimate interest for platform security (Art. 7, IX), where applicable.
4. Where data is stored
Application, database, and backups are stored and processed in Brazil, on Hostinger VPS infrastructure (production at 212.85.17.79). Public HTTPS traffic passes through Cloudflare (CDN and reverse proxy), which processes connection metadata at the edge (for example, IP address and headers) for delivery, DDoS mitigation, and TLS; this does not change primary storage in Brazil. Integrations may transmit data to destinations authorized by the customer (for example, SEFAZ, PlugNotas, TikTok Shop, Loja Integrada, Melhor Envio). We do not sell personal data.
5. Sharing
We share data only with: (i) the tenant itself and its authorized users; (ii) processors necessary for operation (hosting, Cloudflare as traffic CDN/proxy, transactional email, tax gateway); (iii) marketplaces and APIs the customer connects; (iv) authorities when required by law.
6. Retention and deletion
Account data remains while the contract is active. After termination, we delete or anonymize personal data of customers and marketplaces in our possession that are not required by law. Tax documents and bookkeeping records (NF-e, XML, books) are retained for the Brazilian legal period, generally five years. If the seller revokes TikTok Shop authorization, we revoke tokens and stop synchronizing new orders; data already converted into tax operations follows legal retention.
7. Data subject rights
Data subjects may request confirmation of processing, access, correction, anonymization, portability, information about sharing, and deletion, as provided by LGPD. Sellers and TikTok Shop may request deletion, updates, or provision of user data; we respond via the privacy email within an LGPD-compatible timeframe (up to 15 days, extendable once).
8. Security
We use HTTPS/TLS 1.2 or higher in transit, encryption of secrets and integration tokens at rest, role-based access with least privilege, audit logs, and logical isolation per company. Details are in our security policy.
9. Incidents
If an incident may pose relevant risk to data subjects, we will notify ANPD when required, affected customers, and, for TikTok Shop data, TikTok and/or sellers through the privacy/security channel.
10. Updates
This policy may be updated. The current version is always the one published at this address. Questions: [email protected].