Privacy Policy

This Privacy Policy explains how Pllay, as a company, collects, uses, shares and protects personal data when you visit the pllay.ai website or contact us. It does not cover the products Pllay develops; see “Our Products” below.

The controller responsible for your personal data is Marcelo Moraes Motta de Mattos, an individual entrepreneur (MEI) registered under CNPJ 24.550.478/0001-53, doing business as Pllay or Pllay AI, at Avenida Juscelino Kubitschek de Oliveira 5000, 93 C — Integrato Iguatemi, São José do Rio Preto, SP 15093340, Brasil.

We have not appointed a formal Data Protection Officer. Privacy questions and data-subject requests should be sent to contact@pllay.ai, which serves as our data-protection point of contact (the encarregado for LGPD purposes).

Information you give us. When you use the contact form on pllay.ai or write to us by email, we collect your name, your email address and the content of your message, along with anything else you choose to share.

Information collected automatically. When you visit pllay.ai, our hosting provider automatically records technical data needed to deliver and protect the website, such as your IP address, browser type, device and operating system, the pages requested, and the date and time of the visit.

The pllay.ai website does not offer user accounts, and we do not ask for payment or other sensitive information on it.

We process your personal data under the following legal bases (GDPR Article 6; LGPD Article 7):

• Legitimate interests — operating and securing the website and answering the messages you send us, balanced against your rights and freedoms;
• Pre-contractual and contractual steps — when you contact us about a business relationship with Pllay;
• Consent — where the law requires it, for example for non-essential cookies; and
• Legal obligation — tax and record-keeping, and responding to lawful requests from authorities.

Where processing relies on your consent, you may withdraw it at any time, without affecting processing carried out before the withdrawal. For users in Brazil, we also observe the Marco Civil da Internet (Lei 12.965/2014).

We use this information to:

• operate, maintain and secure the pllay.ai website;
• answer your messages and handle business, partnership and press inquiries;
• remember your language preference; and
• comply with our legal obligations.

We do not sell your personal data, and we do not use it for advertising.

We do not sell your personal data. We share it only with service providers that help us run the website and our communications, under confidentiality and data-protection commitments that prevent them from using it for their own purposes:

• Vercel — website hosting; and
• Google Workspace — email.

We may also disclose information when required by law, to protect the rights and safety of Pllay, our users or the public, or as part of a merger, acquisition or sale of assets, in which case this Policy will continue to apply to your data.

The pllay.ai website uses only cookies that are strictly necessary for it to work, such as a cookie that remembers the language you selected. We do not use advertising or analytics cookies on pllay.ai.

If we introduce non-essential cookies, we will update this Policy and ask for your consent where the law requires it. You can manage or delete cookies at any time through your browser settings.

We keep personal data only for as long as necessary for the purposes described in this Policy or as required by law. Messages and business correspondence are kept for as long as needed to handle your request and any resulting business relationship. Technical logs are kept by our hosting provider for a limited period for security and troubleshooting. Where the law requires us to keep certain records — for example, tax or contract records — we keep them for the period the law requires.

We use reasonable technical and organizational measures to protect personal data, including encryption in transit, access controls, and infrastructure providers with recognized security practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting your personal data, we will notify you and the competent authorities — such as the ANPD or your EU supervisory authority — where required by law.

Depending on where you live and the applicable law — including the EU/UK GDPR, the Brazilian LGPD (Article 18) and U.S. state privacy laws — you have the right to: confirm whether we process your data and access it; correct incomplete, inaccurate or outdated data; request deletion or anonymization; receive your data in a portable format; object to or restrict certain processing; withdraw consent at any time; and know which entities we share your data with.

To exercise any of these rights, contact contact@pllay.ai. We will answer within the time limits set by applicable law. You also have the right to lodge a complaint with a supervisory authority, such as the Brazilian National Data Protection Authority (ANPD) or your local data-protection authority.

The pllay.ai website has no age restriction, and it is not designed to collect personal data from children. If a parent or legal guardian believes that a child has sent us personal data — for example, through the contact form — please contact contact@pllay.ai and we will delete it.

Pllay is based in Brazil, and our service providers operate data centers in several regions, including the United States and the European Union. As a result, your personal data may be processed outside your country of residence, including in jurisdictions whose data-protection laws differ from your own.

We rely on transfer mechanisms recognized by applicable law, including the European Commission's Standard Contractual Clauses for transfers from the European Economic Area and, for personal data collected in Brazil, the bases permitted under Article 33 of the LGPD, such as contractual guarantees of compliance.

Pllay develops and operates independent products. Each product has its own privacy policy, which governs the personal data processed when you use it; this Policy does not apply to them. For example, the privacy policy of Galleria Art is available at galleria.art/privacy.

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new “Last updated” date. Your continued use of the pllay.ai website after an update takes effect constitutes acceptance of the updated Policy, except where additional consent is required by law.

If you have questions about this Privacy Policy or want to exercise your rights, contact us at contact@pllay.ai.

Pllay — Avenida Juscelino Kubitschek de Oliveira 5000, 93 C — Integrato Iguatemi, São José do Rio Preto, SP 15093340, Brasil.