This Privacy Policy describes how ACG Instituição de Pagamento SA (“ACG”), registered with the CNPJ under number 10.868.663/0001-86, collects, uses, shares and protects the personal data of users on its websites, systems and services.
This Policy is an integral and inseparable part of the PagCorp platform's Regulations. By using our services or accessing our platforms, you declare that you are aware of and agree to the terms of this Privacy Policy.
1. DEFINITIONS
- "USER": any individual who uses the services offered by ACG.
- "CUSTOMER": legal entity contracting PagCorp services.
- “PERSONAL DATA”: any information that allows a natural person to be identified, directly or indirectly.
- "SENSITIVE PERSONAL DATA": Information about racial or ethnic origin, religious beliefs, political opinions, health, sex life, genetic or biometric data.
- "COOKIES": Files stored on the user's device that help identify browsing preferences and behaviors.
- "APPLICABLE LEGISLATION": General Data Protection Law (Law No. 13.709/2018), Civil Framework for the Internet (Law No. 12.965/2014), Banking Secrecy Law (Complementary Law 105/2001), among others.
- "CONTROLLER": natural or legal person responsible for decisions relating to the processing of personal data.
- "OPERATOR": natural or legal person who processes personal data on behalf of the controller.
2. WHAT IS THIS PRIVACY POLICY?
This document explains how your personal data is used and protected by ACG. It establishes what data is collected, for what purposes the data is used, how the data is stored and protected, and what your rights are as the data subject.
Furthermore, this Policy fulfills the duties of transparency and publicity, as required by Brazilian law.
3. WHAT IS THE LGPD?
The General Data Protection Law, known as LGPD, guarantees you the right to control your personal data. This legislation establishes a series of rights for data subjects, such as access, correction, portability, and deletion of data, in addition to imposing duties and responsibilities on companies and public bodies that process this information.
Whenever data processing requires consent, ACG will clearly explain the reason for the collection and the specific purpose for which your data will be used.
4. What data does ACG obtain and how does it use it?
To offer its services safely, efficiently, and in compliance with legal requirements, ACG collects personal data from USERS. This data may be provided directly by the USER or CLIENT, or obtained automatically, depending on the use of the platform or the contracted service.
Among the data that may be requested are:
| Personal Data | Goal |
|---|---|
| Full name, CPF (Brazilian individual taxpayer registration number), CNPJ (Brazilian company taxpayer registration number), email, and phone number. Login and password information. | User identification and registration in the system. Secure authentication in services and access protection. |
| IP adress | Identifying the connected device for security purposes. |
| Access to the camera, geolocation, push notifications. | Specific system functionalities, subject to prior authorization. |
| Usage log, connection data, activity history on the platform. | Monitoring, auditing, fraud prevention, and continuous service improvement. |
This information is used exclusively to enable the contracting, operation, and improvement of ACG's services. Whenever necessary, ACG will request your consent clearly, also guaranteeing your right to object to the use of certain data, as provided for in current legislation.
5. What is the data storage period?
Personal data is kept only for the time necessary to fulfill its respective purpose for which it was collected. After that, it will be deleted, unless there is another legal basis that requires or permits its retention for an additional period.
6. In what situations can ACG process personal data, and what is its role in this process?
Except in cases where consent is required, ACG may process personal data based on the following grounds:
- For compliance with a legal or regulatory obligation;
- For the execution of the services provided by ACG and specified in the Regulations;
- For the regular exercise of rights in judicial, administrative or arbitration proceedings;
- For the protection of the life or physical safety of the holder or third parties;
- When necessary to meet the legitimate interests of ACG or third parties, provided that the fundamental rights and freedoms of the data subject that require the protection of personal data do not prevail; and
- For credit protection, in accordance with the relevant legislation.
ACG acts as a controller of personal data in processing related to platform administration, website and application management, as well as the direct handling of customer relationships. Conversely, in the context of USER data entered by CLIENTS, ACG acts as a processor , carrying out data processing on behalf of and at the order of the client.
7. Is my data being shared?
Your personal data may be shared with regulatory bodies and competent authorities whenever necessary to comply with legal and regulatory obligations. In addition, ACG may occasionally share your data with third-party companies contracted by ACG to support the provision, operation, and/or maintenance of services.
8. What are your rights as a personal data subject?
Under the General Data Protection Law (LGPD), you, as the data subject, may exercise the following rights with ACG:
- Request confirmation that your personal data is being processed;
- Access the personal data we hold about you;
- Request the correction of incomplete, inaccurate, or outdated data;
- To request the anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data;
- Request the portability of your data to another service provider;
- Request the deletion of data processed with your consent;
- Obtain information about the entities with which your data has been shared;
- To be informed about the possibility of not providing consent and about the consequences of such refusal; and
- Revoke previously granted consent.
To exercise any of these rights, please send a request to the Data Protection Officer, Magnun Kaiser , by email to [email protected ]
9. Does ACG collect information in case of an error in the application or website?
Yes. Whenever a failure occurs during the use of our services, ACG may automatically collect an Error Report containing technical information such as IP address, device name, operating system version, and time of the error, for correction and improvement purposes.
10. Does ACG use cookies?
Yes. On the ACG website, we use cookies to ensure proper functioning, security, and to offer relevant content. In the app, we don't use cookies directly, but integrated third-party libraries may use them. You can configure your browser to manage these permissions.
11. Does ACG share my data with third parties or use services from partner companies?
Yes. We have partners for technical support and operations processing, such as the companies BPM and Globalis . Sharing is restricted to what is necessary and done under a confidentiality agreement.
12. How does ACG protect my personal data?
We have adopted rigorous technical and administrative measures to protect your data against unauthorized access and other threats. However, we recommend that you do not share your information with unauthorized third parties.
13. Does ACG's privacy policy apply to other websites?
No. Our services may contain links to third-party websites. ACG is not responsible for the privacy practices of these external sites.
14. Can ACG send me communications about its products and services?
Yes. By registering, you authorize us to send you communications. If you wish to unsubscribe, please use the channels indicated in the messages themselves.
15. Could ACG's privacy policy change?
Yes. We may update this Policy to reflect legal or operational changes. We recommend that you review this page regularly.
Last updated: July 2025