Privacy Policy

Version 2026-05-11 — Last updated: May 11, 2026

1. Who we are

Devel Blockchain LTDA (“SerialPrint”, “we”, “us”) operates the platform available at https://serialprint.com. We act as the data controller for the personal data described below, in the sense of Brazil’s LGPD (Lei 13.709/2018), the European GDPR, and equivalent legislation.

Tax ID: 41.863.367/0001-16.

Registered address: Rua Professor Dario Veloso, 87, Apt 502, Bloco Colina Memphis, Vila Izabel, Curitiba - PR, 80320-050.

2. Data Protection Officer (DPO / Encarregado)

You can reach our DPO at [email protected] (Felipe Martins) for any privacy question, request, or complaint.

3. What data we collect and why

We process the following categories of data, on the legal bases shown:

Account data (name, email, phone, encrypted password, role, language) — to identify you and operate your account. Legal basis: execution of contract.
Supplier profile data (business name, location, technologies, capabilities) — to publish your listing if you sign up as a supplier. Legal basis: execution of contract.
Order data (specifications, files you upload, messages, shipping address, quote and payment amounts) — to fulfill the marketplace transaction. Legal basis: execution of contract and, after delivery, compliance with legal obligations (tax retention).
Payment metadata (Stripe IDs, payment status, payout history) — to process payments and escrow. Card numbers are held by Stripe, not by us.
Pre-listed supplier data (business name, public address, phone, website, email, and public ratings collected from sources like Google Maps and OpenStreetMap) — to invite suppliers in your region to join the marketplace. Legal basis: legitimate interest (Art. 10 LGPD / Art. 6(1)(f) GDPR). You can opt out at any time via the link in any email we send or by contacting our DPO.
Analytics data (page views, IP, browser, referrer) — to understand traffic and improve the product. Legal basis: legitimate interest, with consent for non-essential cookies.
Cookies and similar technologies — see our Cookies page.
Consent and privacy event log (timestamped record of when you accepted policies, opted in to marketing, requested data, etc) — to demonstrate compliance.

4. Where data comes from

Most data comes directly from you when you register, complete your profile, or place/respond to orders. For pre-listed suppliers, business information is collected from publicly available sources (Google Maps, OpenStreetMap, the company’s own website) — never from private databases, leaked credentials, or third-party data brokers.

5. Who we share data with

Other users of the marketplace — limited information shown on supplier pages and during an active order (name, business, city, technologies, order details necessary to fulfill the order).
Stripe — to process payments and escrow.
Email delivery (SMTP) provider — to send transactional and invitation emails.
Hosting provider — to run the application infrastructure.
Authorities / legal counsel — only if required by law, court order, or to defend our rights.

We do not sell your personal data and do not use it to train third-party AI models.

6. International data transfers

SerialPrint is an international service. Your data may be processed in countries other than your country of residence (notably: Brazil, the EU, and the United States, depending on the provider). We rely on the LGPD’s international transfer mechanisms (Art. 33–36), the GDPR’s standard contractual clauses, or your explicit consent where applicable.

7. How long we keep your data

Active accounts: until you delete your account.
Anonymized accounts: order records are retained for up to 5 years for tax compliance (LC 70/91, Decreto 6.022/07) and dispute resolution; personally identifying fields are stripped.
Pre-listed (never-claimed) supplier listings: removed if you click the opt-out link or request it through our DPO.
Application logs: up to 365 days.
Analytics: up to 180 days, then aggregated.

8. Your rights under LGPD (Art. 18)

At any time, you can:

Confirm whether we process your data and obtain a copy (right to access);
Correct incomplete, inaccurate, or out-of-date data;
Request anonymization, blocking, or deletion of unnecessary or excessive data;
Request portability of your data in a structured, machine-readable format;
Be informed about the entities we share your data with;
Revoke any consent you previously granted;
Object to processing based on legitimate interest;
File a complaint with the Autoridade Nacional de Proteção de Dados (ANPD).

You can exercise most of these directly in your Privacy Center (logged in), or by contacting our DPO at [email protected].

9. Security

We use industry-standard practices: TLS in transit, encrypted passwords (bcrypt), encrypted database backups, role-based access for staff, and audit logs of privacy events. No system is perfectly secure; we will notify you and the ANPD without undue delay if we become aware of a personal data breach likely to result in risk to you (LGPD Art. 48).

10. Children

SerialPrint is a B2B platform intended for businesses and adults. We do not knowingly collect personal data from children. If you believe we hold data of a child, contact our DPO and we will remove it.

11. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email and/or a notification in the application before they take effect, giving you a chance to review and, if desired, close your account.

12. Contact

DPO / Encarregado: [email protected]
Postal address: Rua Professor Dario Veloso, 87, Apt 502, Bloco Colina Memphis, Vila Izabel, Curitiba - PR, 80320-050