Privacy Policy
Last updated: 30 July 2026
This policy explains what happens to your personal data when you visit prebuiltflows.com or buy from us.
Controller: ENERGEO CONSULTORIA LTDA, CNPJ 03.826.173/0001-51, Rua Itapura, 96 — Ribeirão Preto/SP, 14090-082, Brazil, Brazil. Contact: support@prebuiltflows.com
The short version
We collect very little. We do not sell your data, we do not run advertising trackers, and we never see your card details.
1. Payment data — we never see it
Our order process is conducted by our online reseller Paddle.com, which is the Merchant of Record for all our orders. When you buy, you submit your payment details to Paddle, not to us.
Paddle acts as an independent data controller for the transaction. It processes your payment, verifies your location for tax purposes, and applies its own fraud checks. Paddle's privacy policy governs that processing.
What we receive back from Paddle is limited to: your name, your email address, the product purchased, the amount, and the country used for tax calculation. We never receive or store your card number, CVV or bank details.
2. What we collect directly
| Data | When | Why | Legal basis |
|---|---|---|---|
| Email address, name | When you buy | Deliver the product, provide support, send product updates | Performance of a contract |
| Email address | If you subscribe to the newsletter | Send content you asked for | Consent |
| Support correspondence | When you email us | Answer you and keep a record of the issue | Legitimate interest |
| Basic analytics (page views, referrer, approximate country) | When you visit | Understand which pages work | Legitimate interest |
We do not collect special categories of personal data, and we do not knowingly collect data from anyone under 16.
3. Cookies and analytics
The Site uses only what is necessary to function, plus privacy-friendly, aggregate analytics that do not build a profile of you across sites. We do not run advertising or retargeting pixels.
Paddle sets cookies necessary for checkout and fraud prevention when you go through the payment flow.
4. Who we share with
Only the processors needed to operate:
- Paddle — payment processing and tax compliance (independent controller).
- Our email provider — to deliver purchase emails and updates.
- Our hosting provider — to serve the Site.
We do not sell, rent or trade personal data. We disclose data to authorities only where legally required.
5. International transfers
We are based in Brazil and our providers are located in various countries, including the United States and the European Union. Where personal data is transferred out of the EEA, UK or Brazil, transfers rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.
6. How long we keep it
- Purchase and invoice records: for as long as required by Brazilian tax and accounting law, then deleted.
- Support correspondence: 2 years.
- Newsletter subscription: until you unsubscribe.
- Analytics: aggregated, retained up to 24 months.
7. Your rights
Under the Brazilian LGPD, and under the GDPR/UK GDPR where they apply to you, you can request:
- Access — a copy of the data we hold about you.
- Correction — fixing data that is wrong or incomplete.
- Deletion — erasure, subject to records we must keep for tax law.
- Portability — your data in a machine-readable format.
- Objection or restriction — to processing based on legitimate interest.
- Withdrawal of consent — at any time, without affecting processing already carried out.
- Information about the entities we share your data with.
Email support@prebuiltflows.com. We respond within 15 days (LGPD) or 30 days (GDPR).
If you are unhappy with our response you may complain to the ANPD in Brazil, or to your local supervisory authority in the EEA or UK.
8. Security
Data is transmitted over TLS. Access to purchase records is limited to people who need it to provide support. If a data breach occurs that presents risk to you, we will notify the relevant authority and affected individuals in line with LGPD Article 48 and GDPR Article 33.
No system is perfectly secure, and we do not claim otherwise.
9. What the products do with data
The workflows you buy run in your own environment, under your own API keys. Data processed by them never reaches us. When you deploy them, you are the controller for whatever they process, including any personal data of your own leads or customers, and you are responsible for having a legal basis for that processing.
10. Changes
We may update this policy. Material changes will be flagged on this page with a new "last updated" date.
11. Contact
ENERGEO CONSULTORIA LTDA CNPJ 03.826.173/0001-51 Rua Itapura, 96 — Ribeirão Preto/SP, 14090-082, Brazil support@prebuiltflows.com