This page uses cookies to improve the user experience on our website. By clicking "Accept", you consent to the collection and use of the information to ensure the best browsing experience. To find out more, read out our Privacy Policy.



Last Updated: 22/09/2022

The protection of your data is very important to us.

This is the Privacy Policy of PagBrasil, in which we explain how we process data provided to us by merchants, through their legal representatives (“Merchants”) and end users (“Users”) for the purpose of browsing, accessing and/or using our website (“Website”) or for the purpose of using the Services (defined below) provided by PAGBRASIL PAGAMENTOS ELETRÔNICOS LTDA., a legal entity, enrolled in the National Register of Legal Entities (CNPJ/MF) under No. 14.630.124/0001-65, headquartered in the City of Porto Alegre, State of Rio Grande do Sul, at Avenida Dr. Nilo Peçanha, nº 1.221, Conj. 902, Três Figueiras, CEP 91330-000 (“PagBrasil”).
The terms “PagBrasil”, “we” or “our” refer to PagBrasil; and the terms “you” or “your” refer to the Merchant or the User (depending on the case).

What is PagBrasil?

PagBrasil is a payment service provider, offering the services of (i) intermediation, (ii) processing and (iii) a payment gateway (jointly “Services”) to national and international digital platforms of Merchants, under the terms of applicable legislation and in accordance with the provisions of this Policy.

How PagBrasil stores, uses and protects your personal data when the Merchant or the User browses and uses the Website or uses PagBrasil’s Services

PagBrasil adopts internal policies and good governance practices regarding compliance with the rules applicable to data protection. PagBrasil is committed to the security of the data of Merchants and Users during the entire process of navigation, access and use of the Services and sending of support requests to PagBrasil. Therefore, the data of Merchants and Users are kept strictly confidential and are not sold, exchanged or disclosed to any third parties, except in the cases expressly established in this Policy.

We do not knowingly collect or request data from minors under 18 years old. Users under 18 years of age should not send us data through our Website. If we become aware that we have collected data from an individual under 18 years old, we will disregard the data provided and will not keep them in our databases.

1. Collected data

By accepting the terms of this Policy, Merchants and Users expressly agree to provide only true, current, and accurate data and refrain from misusing their identity or their bank data in any way when accessing and using the Website and/or the Services.

1.1 What data do we collect when you visit and browse our Website?

Even if you are not registered or logged in, by visiting and browsing the Website, we may receive data from your device (mobile or computer), and collect internet protocol (IP) addresses and other data that internet browsers usually make available, such as the pages visited, the duration of the visit, Website browsing, browser type and geolocation, to learn about Merchants and Users and improve our products.
In addition, PagBrasil uses cookies and other similar technologies to identify when you visit the Website. For more information about the collection of cookies, please see Section 4 of this Policy.

1.2 What data do we collect when a Merchant registers on our Website?

We collect data such as name, last name, Individual Taxpayer Registry (CPF), email, mobile phone (all referring to the Merchant’s legal representative), as well as the Merchant’s name, National Register of Legal Entities (CNPJ/ME), address, Merchant’s website, years in business and type of company. We may ask for the balance sheet and profit and loss account of Merchants.

1.3 What data do we collect when a User files a complaint on our Website?

We collect data necessary for PagBrasil to contact the Merchant or the User, such as name, email, phone number and address, as well as relevant information on the content of your support request to find out the best way to help you.

1.4 What data do we collect to provide the Services?

To provide the Services, we may receive from Merchants: data from Users, individuals and legal entities, name, last name (from individuals), CPF/CNPJ, email, address, telephone number, and credit card and bank account details (depending on the type of transaction). Information may be shared with companies that provide anti-fraud services, banks or credit card acquirers to provide the Services.
Merchants declare that such personal data is for the purposes established in the agreement signed with the Users. If you have questions/suggestions/complaints about the process of collecting this data, please contact the Merchant directly.

2. Where do we store the data of Merchants and Users?

The data collected when accessing or using the Website and/or retaining the Services may be transferred and stored at a destination outside Brazil, to the extent permitted by law, also through service providers that use cloud technology (AWS, for example). By accessing and using the Website and sending us your personal data, Merchants and Users agree with the transfer, storage, and processing of your data in the format set out in this Policy. We take all reasonable care to ensure that your data is processed safely and in accordance with this Policy.

3. What do we do with the data we collect?

We only collect, store, process, and/or use your data for the purposes described in this Policy, under the applicable law and regulations.
We collect your data to provide the Services, analyze the experience of Merchants and Users, prevent fraud, send marketing messages via the Website, and comply with other legal and regulatory obligations imposed on PagBrasil, for our legitimate interest (to the extent permitted by law), and based on consent.
To fulfill the Services, for legal and regulatory obligations and credit protection, the data may be shared with companies that provide anti-fraud services, banks, credit card acquirers, and other financial institutions.

PagBrasil may contact Users with questions related to the Services.

The information collected may be used for setting up a pre-paid payment account in the User’s name, with the exclusive purpose of providing the payment Services offered by PagBrasil, being that the funds are automatically transferred for the settlement of the transaction carried out in the case of transactions with Merchants domiciled in foreign territories, and requires the settlement amount to be transferred abroad.

The use of your data will occur under the purposes and lawful basis presented below:

Providing payment processing Services, refunds and chargebacks, identifying and preventing fraud, sending transaction notifications, contacting Users about transactions
Name, last name (of individuals), CPF/CNPJ, email, address, telephone number, credit card and bank account details (depending on the type of transaction)
– performance of a contract
– compliance with a legal obligation
– credit protection

Setting up a pre-paid payment account in the User’s name in case of transactions with Merchants domiciled in foreign territories, requiring the settlement amount to be transferred abroad
Name, last name, CPF, address, telephone number, and bank account
– performance of a contract
– compliance with a legal obligation

Sending marketing communications
Name, last name, CPF, email, telephone number (all related to the Merchant’s legal representative)
– legimate interest

Managing complaints and requests
Name, last name (of individuals), CPF/CNPJ, email, address, telephone number, credit card and bank account details (depending on the type of transaction)
– performance of a contract
– compliance with a legal obligation

4. How do we use cookies and other technologies?

PagBrasil may use certain technologies to collect data from activities carried out on our Website, to identify problems in usability, measure the performance of the Website, and define User preferences, among others.

Below are some of the technologies that may be present on our Website:

Cookies: A cookie is a small file added to the User’s device or computer to provide a customized experience when accessing the Website. Cookies help to analyze internet traffic and allow us to know when a User visited a specific website, as well as to promote remarketing, set the User language preference, and for fraud and risk analysis and better knowledge of the User. A cookie does not give access to a computer or disclose data other than the data the User chooses to share with us.
We emphasize that the User is not obliged to accept cookies to use our Website, but in these situations, we cannot guarantee the correct functioning of the Website. Cookies can be accepted, deleted, or rejected through your browser management tools.
Web beacon: Web beacon is a technique used to map those visiting a certain web page, identifying the User’s behavior on different websites or webservers.
Analytics tools: We use analytics tools to improve the Website and Services. These tools may collect data such as: how Merchants and Users visit this Website, what pages they visit, and when they visit said pages, and other websites visited before coming to our Website.

5. Internet security

We work to implement security measures to protect the privacy of the data that we keep in our records, using our best efforts to prevent violation attempts or undercover access to our database. These measures include data encryption, information access control, firewalls, software solution architecture with intrusion prevention, and HTTPS use.
The data processing is carried out through computers and/or enabled information technology tools, following organizational procedures and means strictly related to the objectives of this Policy, in addition to the fact that access to data is restricted to employees duly authorized by PagBrasil, guaranteeing the proper use of data by employees.
Despite our efforts, we emphasize that data transmission through the internet is not completely safe due to several factors, including network and operating factors, and PagBrasil cannot guarantee total security of the data transmitted by Merchants and Users to PagBrasil. Although we do our best to protect your data, we cannot guarantee the security of the data transmitted to our Website. Any transmission is the sole responsibility of Merchants and Users, who, by agreeing with this Policy, expressly acknowledge and assume such responsibility.
Once data is received through the Website, we are committed to ensuring that they are secure in the Website’s environment. To prevent unauthorized access or disclosure of the data of Merchants or Users, we have implemented appropriate physical, electronic, and administrative procedures to secure and protect the data we collect. We hold a PCI DSS Level 1 Certificate and all communication is encrypted and stored in our databases using state-of-the-art techniques for data security and protection.
We keep the date, time, and IP address of your access to our Website for at least six (6) months to comply with legal obligations.

6. Data sharing

Respecting legal limits, the data processed may be shared with anti-fraud checks, banks, card acquirers, competent authorities, and other financial institutions authorized by the Central Bank of Brazil. Data may also be shared when you permit it, according to the information provided at the time of the authorization request by PagBrasil.
Understand with whom your data is shared: you will be able to request data about the public and private entities with which PagBrasil has shared your data, through the mechanisms indicated on the Website, and PagBrasil may share these data to the extent that they do not violate business secrets and confidentiality duties.

7. Understand the mechanisms we provide to protect your rights

You have rights and guarantees in relation to your data. Below, you will find clear and transparent mechanisms for the legal representatives of Merchants and Users to exercise their rights. Whenever necessary, our team will be ready to respond to any requests.
– Confirm and access your data: You may request details and/or a copy of your data processed by us at
– Change or correct your data: If you want to change your data or if you have any reason to believe or suspect that any data we have about you is wrong or incomplete, please access
– If you wish, you may withdraw consents, and remove, block or request anonymization of your data: You may withdraw your consent, whenever the processing of personal data is based on consent under the terms of Law No. 13,709 of 2018, request the removal of your data or deactivate your account at any time, under the terms of the law. The withdrawal of consent will cause the removal of all personal data, except (i) anonymized data and (ii) data necessary for PagBrasil and/or third parties involved in the provision of the Services to have judicial, arbitration or administrative defense, and to comply with legal and regulatory obligations.
– We will store your history: You may contact PagBrasil and we are authorized to contact you so that you may access certain functionalities of our Services, ask questions about the Website, and make complaints or suggestions, through the email, and phone numbers provided by you or through WhatsApp (or other instant messaging apps). The conversations will be stored by us and we will be able to use their content as a means of evidence in court, for the provision of our Services, or in other events provided by law.

8. Duration of data processing

Your data will be stored for the time necessary to completely fulfill the Services, for judicial, administrative, or arbitration defense, to comply with legal and regulatory obligations, and for fraud prevention.

9. Applicable law and jurisdiction

This Privacy Policy shall be interpreted according to Brazilian law and irrevocably submitted to the courts of the city of Porto Alegre, state of Rio Grande do Sul, Brazil, for determining any dispute concerning this Policy, and PagBrasil hereby irrevocably waives any other venue to which it may be entitled.

10. Changes to this Policy

PagBrasil may change this Policy at any time. In the event of changes to the Policy, PagBrasil undertakes to inform Website Users about said changes by means of a post on our Website or by email. To make relevant changes that require the consent of the Merchant and the User, PagBrasil shall obtain that consent.
If the Merchant or the User do not agree with the new Policy, the Merchant or the User may reject it; however, they will not be able to use the Services or the Website.

11. Contact us

If you have any questions or complaints regarding this Privacy Policy, or if you want to exercise your rights under this Policy or under the applicable law, please contact us through our support channel. You can also contact our data protection officer, Júlia Fichtner, at