This Policy explains how lo.cafe Ltda., CNPJ 35.124.367/0001-00, Brazil (lo.cafe, we, us or our), the data controller, handles personal data in the partner portal at affiliates.getnotchnook.com, the partner application and the NotchNook Pro Partner Program.
It supplements the NotchNook Privacy Policy, which still applies to the website and the app.
1. Data we handle
- Applications: name, e-mail, country, the platforms you publish on, your channel or website link, follower and view ranges, topics, content language, whether you use the app and the optional message about how you plan to promote it.
- Partners: name, e-mail, partner code, the version of the terms accepted and the dates of invitation, verification and access.
- Portal access: the e-mail used to sign in, the access code (stored only as a hash), IP address, date and time, browser and security logs.
- Sales and commissions: opaque references of the sales made with your code, amounts, statuses (confirmed, refunded, disputed) and payouts. We never share buyers' personal data with you.
- Payouts: once payouts are set up, the details needed to pay you. We'll explain which before asking for them.
2. Why we use it and legal bases
- To review your application and contact you: your consent, given in the form, and steps prior to a contract you requested.
- To run the Program, the Portal, commission calculations and payouts: performance of a contract (these Terms).
- Security, fraud and abuse prevention, and access logs: legitimate interests and compliance with legal obligations.
- Accounting, tax and regulatory obligations: compliance with legal obligations.
We don't use this data for advertising and we don't sell it.
3. Who we share it with
With providers that run the Program on our behalf, bound by contract to use the data only for that:
- hosting and infrastructure (Cloudflare);
- payments and sales calculation (Stripe);
- transactional e-mail, such as access codes and notices;
- the team's internal work tools, such as spreadsheets, to review applications.
We may also disclose data when required by law or to protect rights and safety.
4. International transfers
These providers may process data outside Brazil, including in the United States. Where required, we use the safeguards provided by law.
5. How long we keep it
- Applications that are not selected: up to 12 months after they are sent.
- Partner and sales data: for as long as the partnership lasts and then for the period required by accounting and tax obligations and for the defense of rights.
- Portal access logs: 6 months, as required by Brazil's Marco Civil da Internet.
6. Security
We use encrypted connections, single-use access codes that expire in 10 minutes, sessions that last at most 24 hours and restricted access to the data within the team. No system is completely secure, but we work to protect your data.
7. Your rights
Under Brazil's General Data Protection Law (LGPD), you can ask for confirmation of and access to your data, correction, anonymization, blocking or deletion, portability, information about sharing and withdrawal of consent, among other rights. You can withdraw your application at any time.
To exercise these rights, e-mail privacy@getnotchnook.com. We reply within 15 days and may need to confirm your identity. You can also complain to Brazil's National Data Protection Authority (ANPD). Rights under other laws, such as the GDPR, are preserved where they apply.
8. Cookies
The Portal only uses essential cookies, described in the Cookie Policy.
9. Minors
The Program is for people aged 18 or over. If you believe a minor has sent us data, e-mail privacy@getnotchnook.com so we can remove it.
10. Changes and contact
We may update this Policy. The current version is on this page with its effective date; partners will be notified of material changes by e-mail.
- Controller: lo.cafe Ltda.
- CNPJ: 35.124.367/0001-00
- Country: Brazil
- E-mail: privacy@getnotchnook.com