Privacy Policy

Last updated: March 9, 2026

1. Introduction

BeInfinitum ("Infi") values the privacy of its users. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our platform, including Pulse, APIs, SDKs, and related services.

2. Data Collected

We collect: registration information (name, email, hashed password); financial information (account details, transaction history); usage data (API logs, metering events, payment metadata); technical information (IP address, browser type, operating system); cookies and session identifiers.

3. How We Use Your Data

We use your data to: provide and maintain our services; process payments and transactions; send communications about your account; detect and prevent fraud; improve user experience; comply with legal obligations; generate aggregated and anonymized analytics.

4. Data Sharing

We do not sell your personal data. We may share information with: payment service providers necessary to complete transactions; service providers that assist us in operating the platform; legal authorities when required by law or court order. All third parties are subject to confidentiality obligations.

5. Cookies and Tracking

We use cookies and similar technologies to maintain your session, remember your preferences, usage analytics (PostHog, Vercel Analytics), and improve security. You can configure your browser to refuse cookies, but this may affect platform functionality.

6. Data Security

We implement technical and organizational measures to protect your data, including: encryption in transit (TLS/HTTPS) and at rest; secure authentication with password hashing; webhook validation via HMAC-SHA256; role-based access control; continuous security monitoring.

7. Data Retention

We retain your data for as long as necessary to provide services and comply with legal obligations. Financial transaction data is maintained for a minimum of 5 years as required by regulations. After account termination, your personal data will be deleted or anonymized within 90 days, except where retention is required by law.

8. Your Rights (LGPD)

Under the Brazilian General Data Protection Law (LGPD), you have the right to: confirmation of data processing; access to your personal data; correction of incomplete or outdated data; anonymization, blocking, or deletion of unnecessary data; data portability; deletion of data processed with consent; information about data sharing. To exercise your rights, contact us at privacy@beinfi.com.

9. International Transfers

Your data may be processed on servers located outside Brazil. We ensure that any international data transfers are carried out with adequate levels of protection, as required by LGPD.

10. Children

Our services are not directed to individuals under 18 years of age. We do not knowingly collect data from minors. If we become aware that we have collected data from a minor, we will take steps to delete that information.

11. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated by email or through the platform with at least 30 days prior notice.

12. Contact

For questions about this Privacy Policy or to exercise your data protection rights, contact us at privacy@beinfi.com.