Loading

Privacy Policy

4 min read

Last updated: March 10, 2026

The Credittus portal adopts this Privacy Policy to reaffirm its commitment to security, transparency, and respect in processing user data. This document explains how data is handled in strict compliance with Brazil’s General Data Protection Law (Law No. 13.709/18 – LGPD) and Google’s global Publisher Policies.

1. TRANSPARENCY: WHO OPERATES THIS PORTAL?

1.1. Data Controller

This financial news and education portal is owned and operated by SPUN MIDIA LTDA, registered with Brazilian CNPJ No. 43.629.487/0001-89, with administrative headquarters in Rio Grande do Sul, Brazil. For legal purposes, this company is the "Controller" of the collected data.

1.2. Communication Channel (DPO)

In compliance with Article 41 of the LGPD, we have appointed a Data Protection Officer (DPO) as the liaison between the portal, users, and Brazil’s National Data Protection Authority (ANPD). Requests may be sent to: [email protected].

2. AUDIENCE AND AGE RESTRICTIONS

2.1. Scope

This Privacy Policy applies to everyone who accesses any website, portal, or digital platform owned by SPUN MIDIA LTDA or by companies in its holding and economic group.

2.2. Adults Only

The financial education and news content on this portal is designed solely for individuals aged 18 or over.

2.3. Protection of Minors

We do not knowingly collect or request data from children or adolescents. If the system identifies registration by a minor, all associated data will be promptly deleted from our databases without prior notice, in the best interest of the minor as set out in Article 14 of the LGPD.

3. DATA CATEGORIES AND PROCESSING PURPOSES

We process only data that is strictly necessary to operate the portal, as described below:

3.1. Data You Provide

Data: full name; email address.

Purpose: subscription to our mailing list for newsletters, market alerts, educational materials, and email marketing.

Legal basis: free and unequivocal consent (LGPD, Art. 7, I).

3.2. Automatically Collected Data

  • IP address
  • Browser
  • Operating system
  • Pages visited
  • Time on site
  • Interactions with the site
  • Cookie and online identifier information

Purpose: access identification for cybersecurity, fraud prevention, and compliance with legal log retention duties.

Legal basis: legal obligation (Brazilian Civil Rights Framework for the Internet, Art. 15) and fraud prevention (LGPD, Art. 11, II, "g").

3.3. Browsing Data and Profiling (Cookies)

Data: page view history; interaction with banners; time on site.

Purpose: audience analytics and ad personalization through interest-based segmentation.

Legal basis: legitimate interest (LGPD, Art. 7, IX).

4. ADVERTISING, GOOGLE ADS, AND THIRD PARTIES

To keep our content free, we use third-party advertising technologies:

4.1. Third-Party Providers

Google, as an ad vendor, may use cookies to serve ads on our portal based on your previous visits.

4.2. Advertising Cookies

These cookies allow Google and its partners to show ads that are relevant to you based on your interests and browsing history.

4.3. Your Choices

You may turn off personalized ads by visiting Google Ads Settings.

5. SHARING DATA WITH THIRD PARTIES AND STAFF

5.1. Employees and Collaborators

Access to your information is limited to Controller staff who need it for legitimate technical or administrative duties. All personnel are bound by strict confidentiality and data protection training.

5.2. Use Limitation

We require service providers to use shared data solely for the purposes described in this Policy; use for their own purposes or sale of data to others is prohibited.

5.3. Legal and Court Requests

We may share data with police, judicial, or administrative authorities when required by law or a specific court order.

6. RETENTION AND DATA LIFECYCLE

We follow the necessity principle and keep data only as long as needed:

6.1. Personal Data

Name and email remain active while you are interested in our content. Data is removed after an opt-out request, as quickly as practicable.

6.2. Connection Logs

Retained for at least six (6) months, as required by the Brazilian Civil Rights Framework for the Internet.

6.3. Tracking Data

Cookies may last for varying periods, up to 24 months.

6.4. Exceptional Retention

We may keep information beyond these periods only to meet legal duties, court orders, or to defend administrative proceedings.

7. INTERNATIONAL TRANSFERS AND SECURITY

7.1. Global Infrastructure

Because we use cloud and international analytics tools (such as Google servers), your personal data may be processed outside Brazil. We work with providers that follow recognized security and privacy standards.

7.2. Security Measures

We implement robust technical measures, including HTTPS (SSL/TLS) with strong encryption, so communication between your device and our servers remains private and intact.

8. DISCLAIMER AND AFFILIATE LINKS

8.1. External Browsing

Our portal is educational and informational. If you click links to banks or financial institutions, you will be taken to external sites.

8.2. Limitation of Liability

We do not control third-party privacy practices. Once you leave our domain, data processing is solely the responsibility of the destination site. We encourage you to read the privacy policies of every site you visit.

9. DATA SUBJECT RIGHTS

Under Article 18 of the LGPD, users (or their legal representatives) have the right to:

  • Confirmation and access: know which data we process and request a copy.
  • Correction: request updates to incomplete or inaccurate information.
  • Deletion: request deletion of data collected on the basis of consent.
  • Withdrawal of consent: cancel authorization for email marketing at any time.

To exercise these rights, contact our DPO at: [email protected]. You may also withdraw consent using the opt-out link in our emails.