LGPD Compliance
Guara Cloud is committed to protecting your personal data in compliance with LGPD (Lei Geral de Proteção de Dados Pessoais) — Brazil’s General Data Protection Law, similar to Europe’s GDPR.
What is LGPD?
LGPD (Law No. 13,709/2018) is Brazil’s comprehensive data protection law. It regulates how personal data is collected, stored, processed, and shared, and grants individuals a set of rights over their data.
Guara Cloud operates under LGPD as a data controller for your account information and as a data processor for the applications you deploy on the platform.
What data we collect
We follow the principle of data minimization — we only collect what is strictly necessary to provide the service.
| Data collected | Source | Purpose |
|---|---|---|
| Name | OAuth provider (GitHub/Google) | Display in dashboard and team |
| OAuth provider (GitHub/Google) | Account identification, notifications | |
| Avatar | OAuth provider (GitHub/Google) | Display in dashboard |
| Billing info | Stripe | Payment processing |
What we do NOT collect:
- Government-issued IDs (CPF, RG)
- Phone numbers
- Physical addresses
- Any data beyond what is listed above
Your rights under LGPD
As a Guara Cloud user, you have the following rights over your personal data:
Right to access
You can view all your personal data through your Profile Settings in the dashboard. This includes your name, email, and avatar.
Right to correction
You can update your personal information at any time through Profile Settings.
Right to deletion
You can delete your account and all associated data through Account Deletion in the dashboard. When you delete your account:
- Your personal data is permanently removed.
- Your projects and services are deleted.
- This action is irreversible.
Right to data portability
You can request a copy of your personal data in a structured format by contacting our Data Protection Officer.
Right to revoke consent
You can revoke your consent to data processing at any time. This is done by deleting your account, which removes all your data from the platform.
Consent
Guara Cloud captures explicit consent during signup. Before your account is created, you must accept our:
- Terms of Service — the rules governing your use of the platform.
- Privacy Policy — how we collect, use, and protect your data.
Your consent is recorded and can be revoked at any time by deleting your account.
Cookie policy
Guara Cloud uses only strictly necessary cookies:
| Cookie type | Used? | Purpose |
|---|---|---|
| Authentication | Yes | Keep you logged in |
| CSRF protection | Yes | Protect against cross-site requests |
| Consent management | Yes | Remember your consent preferences |
| Analytics/tracking | No | Not used |
| Advertising | No | Not used |
We do not use any tracking, analytics, or advertising cookies. Your browsing activity on Guara Cloud is never shared with third parties for marketing purposes.
Data Protection Officer (DPO)
Guara Cloud has a designated Data Protection Officer responsible for handling data-related requests and ensuring LGPD compliance.
Legal documents
For complete details, refer to our legal documents:
These documents are available in Portuguese and English, and are updated whenever there are changes to our data practices.