Last updated: November 11, 2026.
1. Who we are
This Privacy Policy explains how Upside Finanças Corporativas Ltda. (“Upside Finance”, “we”) handles the personal data of people who visit this website and contact us, in accordance with the Brazilian General Data Protection Law (Law No. 13,709/2018 – LGPD).
For the purposes of the LGPD, Upside Finance is the controller of the data processed through this website.
2. What data we collect
Data you provide when you fill in the contact form: name, email, phone, subject and the content of your message. Only the email address is required.
Data recorded automatically: when the form is submitted, we record the IP address and the date and time of the message; and the server hosting the website may keep technical access logs (such as IP address, browser, pages visited and times), which are necessary for the operation and security of the site.
We do not collect sensitive personal data through this website and ask that you do not include it in your messages.
3. Why we use the data and on what legal basis
We use the data for the purposes below, always supported by a legal basis under the LGPD:
- Replying to messages and requests sent through the contact form and moving forward with business proposals and conversations (legal basis: preliminary procedures related to a contract, at the data subject’s request, and legitimate interest – Art. 7, V and IX);
- Security and abuse prevention, such as spam and fraud attempts, including recording IP address and time (legitimate interest – Art. 7, IX);
- Complying with legal and regulatory obligations and exercising rights in judicial, administrative or arbitration proceedings (Art. 7, II and VI).
4. Who we share data with
We do not sell or rent personal data. We may share it only with:
- Service providers that help us maintain the website and email (such as hosting and email services), who may use the data only to provide the service to us;
- Providers of resources embedded in the website (Google Fonts and Google Maps), as described in section 5;
- Public authorities, when there is a legal obligation or a court order.
5. Cookies and third-party resources
This website does not use our own audience-analytics or advertising cookies. Some embedded resources are provided by Google and may process technical data from your browser (such as the IP address) and set their own cookies, according to Google’s policies: the text fonts (Google Fonts) and, on the Contact page, the map (Google Maps).
You can manage or block cookies in your browser settings. If we start using analytics or advertising tools, we will update this policy and, where required, ask for your consent.
6. International transfers
The Google services mentioned above may involve processing data outside Brazil. When that happens, it will be done with the safeguards provided for in Articles 33 et seq. of the LGPD.
7. How long we keep data
We keep data only for as long as necessary to fulfil the purposes described in this policy, to handle your request and to comply with legal or regulatory obligations, or for the regular exercise of rights. After that, the data is deleted or anonymized.
8. Your rights
Under Article 18 of the LGPD, you may request, at any time:
- Confirmation that we process your data, and access to it;
- Correction of incomplete, inaccurate or outdated data;
- Anonymization, blocking or deletion of unnecessary or excessive data, or data processed in non-compliance with the LGPD;
- Data portability, upon express request;
- Deletion of data processed on the basis of your consent;
- Information about the parties with whom we share data;
- Information about the possibility of denying consent and the consequences of refusal, and withdrawal of consent;
- Objection to processing carried out on another legal basis, in case of non-compliance with the LGPD.
9. Security
We adopt reasonable technical and administrative measures to protect personal data against unauthorized access, loss, alteration or improper disclosure. No system is completely free of risk; therefore, in the event of a security incident that may cause relevant risk or harm to data subjects, we will notify those affected and the Brazilian National Data Protection Authority (ANPD), as required by law.
10. Children and teenagers
This website is aimed at companies and professionals and is not intended for people under 18. We do not knowingly collect data from children and teenagers.
11. Links to other websites
This website may contain links to third-party websites, including the Upside Finance blog at blog.upsidefinance.com.br. Those websites have their own privacy practices, which are not covered by this policy.
12. Changes to this policy
We may update this policy from time to time. The date of the last update is shown at the top of this page.
13. Contact us
To exercise your rights, ask questions about this policy or reach the person responsible for personal data processing, write to contato@upsidefinance.com.br or call +55 (11) 3016-1530. You may also file a complaint with the ANPD (gov.br/anpd).