01Overview
This page summarizes our commitment to the LGPD (Brazilian General Data Protection Law, Law No. 13.709/2018) and works as a quick guide to your rights. It supplements the Privacy Policy, which describes in detail what data we process, for what purposes, and for how long.
02Processing roles
Depending on the context, Moviie acts as Controller or Processor:
- Controller: account registration data, billing, communication, security, support, and essential telemetry.
- Processor: personal data of customers' end users, processed on behalf of the customer (player events, technical logs, transcriptions/subtitles, and AI artifacts).
As a rule, the B2B customer is the Controller of its end users' data, and Moviie is the Processor. Joint-control situations (e.g., fraud prevention) are documented contractually when applicable.
03Legal bases
We process personal data based on the hypotheses provided for in the LGPD, according to the purpose:
| Purpose | Legal basis |
|---|---|
| Account creation and management; provision of the Services | Contract performance |
| Billing, invoices, and compliance with orders | Legal obligation |
| Security, fraud prevention, and essential analytics | Legitimate interest |
| Marketing (when applicable) | Consent or B2B legitimate interest with opt-out |
You may object to processing based on legitimate interest (Article 18, §2). We currently accept requests via chat or through support@moviie.ai and disable the processing when technically feasible and without preventing the essential provision of the service.
04Data subject rights
At any time, you may exercise the rights provided for in Article 18 of the LGPD:
- Confirmation of the existence of processing and access to the data;
- Correction of incomplete, inaccurate, or outdated data;
- Anonymization, blocking, or deletion of unnecessary or excessive data;
- Portability to another supplier (CSV/JSON when feasible);
- Deletion of data processed with consent;
- Information about data sharing;
- Withdrawal of consent;
- Review of decisions made solely on an automated basis.
05How to exercise and contact the DPO
- Channel: platform chat or
support@moviie.ai(also serves as the Data Protection Officer/DPO). - Response time: up to 15 days.
- Identity verification: we may request additional information or authentication through the account itself to prevent fraud.
You may also file a complaint with the ANPD (Brazilian National Data Protection Authority).
06International transfers
Data may be processed in Brazil, the United States, and the European Union. When there is an international transfer, we apply safeguards compatible with the LGPD (Article 33 et seq.), such as standard contractual clauses and equivalent security obligations.
07Retention, security, and incidents
We keep data only for as long as necessary for the purposes and legal obligations: the reference periods are set out in the Privacy Policy. We adopt technical and organizational measures proportionate to the risk (encryption in transit, access control with least privilege, environment segregation, logs, and backups).
In case of a relevant security incident, we will assess notification to the ANPD and to data subjects under the terms of the law. To report a vulnerability or incident, write to support@moviie.ai.