Lumina Privacy Policy

This policy establishes how Zatt will process data in the public version of Lumina, an application for organizing, controlling, and displaying presentations. Shazam Empreendimentos Ltda. is the controller of the data processed for these purposes.

Shazam Empreendimentos Ltda., CNPJ 61.908.963/0001-82, is responsible for the Zatt brand and this application. Address: Rua São Lázaro, 486, Setor FSP051, Jardim Morumbi, Jundiaí/SP, CEP 13209-220.

Support and privacy: gerson@zatt.dev. Alternative contact: gerson@eshazam.com.br. State the application and your request, without sending passwords or access codes.

• Account: email, protected credentials, identifier, email confirmation, and workspace associations, for registration, access, recovery, and administration.
• Content: uploaded files, names and metadata, lyrics, media, themes, and settings, to store, prepare, and transmit your presentations.
• Security and operation: IP address, device identifier and name, browser or application information, and session records, for authentication, access protection, and operation of the service.
• Support: contact details and information you send to resolve questions and exercise your rights.

We will use this data to provide the requested service, protect its operation, and comply with legal obligations, under the applicable legal basis. Content may reveal personal or sensitive data, such as religious beliefs: send only what is necessary and with authorization or another appropriate basis.

This policy limits processing in the public version to these purposes, without behavioral advertising or optional telemetry. Any expansion will require an update to this policy and the information and choices required by law.

Content is made available to the people and devices authorized in your workspace. When projecting it onto a screen, consider who will be able to see it.

Hosting, storage, and media delivery providers receive only the data necessary for operation, subject to protection obligations. Authentication messages use Resend, which receives the email address and the data needed to send them.

Data may also be disclosed to comply with a legal obligation or valid order. We will not sell personal data or share it for advertising. If a provider processes data outside Brazil, the agreement and transfer must observe the safeguards required by law.

The service uses protected credentials, access control, and private media storage. The public version must use encrypted connections for personal data in transit. There is no absolute guarantee of security.

Files will be accessed according to your selection and system permissions. On the web, session cookies maintain authenticated access; they are not used for advertising. Protect your credentials and review authorized devices.

Account data and content will be retained for as long as necessary for the service and account maintenance. Technical records will be retained only as long as necessary for security, troubleshooting, or compliance with obligations. Support messages will be kept until the request is resolved and for any additional period needed to comply with a legal obligation or exercise rights.

Account deletion will cover registration, sessions, associations, and associated personal data, including data held by providers. Backups must remain isolated from normal use until removal in the disposal cycle, without reintroducing deleted data during recovery. Any exceptional retention must have a specific purpose and basis, restricted access, and a duration limited to the corresponding need; we will inform the data subject of the retained data, the reason, and the applicable period or criterion.

Submit a request through the account and data deletion page. We will confirm receipt, explain the required verification, and provide an estimated completion time. Requests will be handled without undue delay. Signing out or uninstalling the application does not delete cloud data.

You may request confirmation and access to data, correction, information about sharing, deletion, and the other rights provided by Brazil's General Data Protection Law (LGPD), such as objection and withdrawal of consent where applicable, through the contacts above. Requests are free of charge; we may verify your identity proportionately to protect your data.

Material changes will be communicated on this page and, when necessary, in the application, with the date of the new version. Use by children and adolescents must respect their best interests and the legally applicable authorization requirements.