Privacy Policy

Last updated on October 29, 2026

This Privacy Policy explains, clearly and directly, how your personal data is processed when you use an Event site hosted on the Taagui platform: when you create your account, place Orders, receive Registrations, go through Accreditation, watch the Live stream or show your QR to a Sponsor. It follows Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018), the Brazilian Civil Rights Framework for the Internet (Law No. 12,965/2014) and the Brazilian Consumer Protection Code (Law No. 8,078/1990).

1. Who is responsible for your data

The site you are visiting belongs to the Event Organizer, the company identified in the footer, which sells the Tickets and holds the Event. Taagui is the technology platform that provides the site, the account, checkout, Registrations and Accreditation, operated by GAMA VASQUES CONSULTORIA EM TI LTDA, registered under CNPJ No. 69.582.078/0001-68, headquartered at Av. Cristóvão Colombo, 2176, room 205, Porto Alegre/RS, Brazil, ZIP 90560-001.

  • The Organizer is the controller of the data of those who buy, attend and watch the Event: it is the Organizer who decides to sell Tickets, accredit, run prize draws, stream, issue certificates and send announcements.
  • Taagui acts as processor of this data, processing it on behalf of the Organizer and according to its instructions (article 39 of the LGPD).
  • Taagui is the controller only of the data it processes for its own purposes: maintaining your single account on the platform, ensuring security and preventing fraud, keeping the access logs required by the Brazilian Civil Rights Framework for the Internet, blocking email addresses that do not receive messages, calculating the platform commission, complying with legal obligations and defending itself in legal proceedings.

You can exercise your rights with either of them, through the channels listed in section 12.

2. What data we process

  • Account and access: name, phone number and the one-time verification code sent via WhatsApp for you to sign in. Your phone number identifies you across the whole platform.
  • Orders: name, phone, email and CPF or CNPJ provided at checkout, the Tickets chosen, quantities, amounts, Discount code used and the status of the Order. When the Organizer asks, also your company, industry, job title and how you heard about the Event.
  • Payment: payment method, transaction status and identifier, installments and, for cards, the brand and the last four digits. The full card details are entered in a Mercado Pago form and turned into a single-use token in your own browser: they never pass through Taagui's servers and are not stored by us.
  • Registrations and Accreditation: name, email and phone of the person attending the Event, the credential QR Code, the date and time of Accreditation and participation in prize draws.
  • Refunds: the request, its status and the information needed to return the amount paid.
  • Contacts with Sponsors: the snapshot of name, email, phone and company recorded when you show your Registration QR to a Sponsor.
  • Live stream: name, phone, email, company and job title provided when signing up to watch.
  • Reviews and Certificates: the rating and comment you choose to submit and the details of your Certificate.
  • Emails: delivery, opens and clicks on the Organizer's announcements, bounced messages and requests to stop receiving announcements.
  • Browsing and device: IP address, date and time of access, browser and operating system (user-agent), cookies, the campaign parameters of the page through which you arrived and ad click identifiers.

We do not ask for sensitive personal data, such as health, religion or biometrics. Please do not include it in review comments.

3. What we use the data for and on what legal basis

Each use has a legal basis under article 7 of the LGPD:

  • Creating your account, sending the access code and keeping you signed in: performance of a contract (item V).
  • Processing Orders, payments, Discount codes and Refunds: performance of a contract (item V). The CPF or CNPJ and the Order records also meet legal and tax obligations (item II).
  • Issuing Registrations, sending credentials by email and WhatsApp and carrying out Accreditation: performance of a contract (item V).
  • Sending emails about the Order and the Registration (payment confirmation, pending payment reminder, credential, thank-you note, review invitation and Certificate): performance of a contract (item V).
  • Granting access to the Live stream: performance of preliminary procedures at your request (item V). The Organizer may also use the sign-up to keep in touch with you about the Event, based on legitimate interest (item IX).
  • Running prize draws among accredited Attendees and using reviews to improve the Event: legitimate interest of the Organizer (item IX). Reviewing is optional and reviews are not published on the site.
  • Sending the Organizer's announcements about the Event: legitimate interest (item IX), with the option to stop receiving them at any time through the link in the email itself.
  • Sharing your data with a Sponsor: consent (item I), which you give by showing your Registration QR to them.
  • Measuring the results of the Organizer's ads (section 6): consent (item I), given in the site's cookie notice and revocable at any time in Cookie preferences, in the footer.
  • Ensuring security and preventing fraud and abuse: legitimate interest (item IX).
  • Keeping access logs for the legal period: compliance with a legal obligation (item II and article 15 of the Brazilian Civil Rights Framework for the Internet).
  • Exercising rights in judicial, administrative or arbitration proceedings: item VI.

We do not use your data to make automated decisions that produce legal effects on you, nor to build profiles sold to third parties.

4. Who we share data with

We do not sell your data. It is shared only to the extent needed for each purpose:

  • The Organizer of the Event sees your Order, Registration, Accreditation, Live stream, prize draw, review and Certificate data for that Event, and may export it to run the Event.
  • Mercado Pago receives the data needed to charge, prevent fraud, reverse charges and refund. It is an independent controller of this data and has its own privacy policy.
  • Sponsors to whom you show your Registration QR receive your name, email, phone and company. Sharing happens when the QR is scanned, and each Sponsor becomes responsible for how it uses this data.
  • Meta (WhatsApp) receives your phone number to deliver the access code and the Registration credential.
  • Meta and Google receive Order data when ad measurement is enabled on the site and you have accepted it (section 6).
  • Google displays the map of the Event venue and, through YouTube, the Live stream video. When this content loads, your browser connects directly to Google.
  • Infrastructure providers host the site, store files and backups and send emails, such as Resend, under a duty of confidentiality and security.
  • Public authorities receive data when there is a legal or regulatory obligation or a court order.

5. International transfer

Some providers process data outside Brazil, mainly in the United States: Meta, when delivering WhatsApp messages and receiving ad measurement data; Google, for ad measurement, the map and YouTube; and Resend, for sending emails. Sending the access code, the credential and the Order emails are transfers needed to perform the contract with you or to fulfil a request of yours (article 33, IX, combined with article 7, V, of the LGPD).

6. Cookies and ad measurement

Cookies are small files stored in your browser. The site uses:

  • Necessary cookies: keep your session, your Ticket selection and the fraud protection on forms. Without them, sign-in and checkout do not work.
  • Live stream cookie: remembers for up to 1 year that you have already signed up, to take you straight to the video when you come back.
  • Visit source cookies: keep for up to 30 days the campaign parameters and ad click identifiers through which you arrived, so the Organizer knows which promotion led to the Order.
  • Advertising cookies: only when ad measurement is enabled on the site and you accept it in the cookie notice, the Meta Pixel sets the _fbp and _fbc cookies and the Google tag sets _gcl_aw and similar cookies to record the visit and the ad click.
  • Third-party content: the Google map and the YouTube video may set their own cookies, under Google's policies.

If you accepted ad measurement, when an Order is paid the result is reported to Meta and Google to measure the ad. We send the Order amount and identifier, the Tickets, click identifiers, IP and browser, as well as email, phone, name and customer identifier irreversibly encrypted (SHA-256 hash) before sending. If you refused, none of this is loaded or sent.

You can change your choice at any time in Cookie preferences, in the site footer, without affecting your Orders. You can also block or delete cookies in your browser settings and adjust your ad preferences in your Meta and Google accounts.

7. How long we keep data

  • Account: while it is active or until you request its deletion.
  • Access codes: valid for 5 minutes and automatically deleted after they expire.
  • Orders, payments, Refunds and Registrations: for the period required by tax and consumer law, as a rule 5 years.
  • Access logs (IP, date and time): at least 6 months, as required by article 15 of the Brazilian Civil Rights Framework for the Internet.
  • Certificates: as long as the validation code can be checked, so the document remains authentic.
  • Contacts with Sponsors: on the platform, while the Sponsor remains registered in the Event. Whatever the Sponsor keeps on its own follows its own policy.
  • Live stream sign-up, reviews and email history: while they are useful to the Organizer for the Event, or until you request their deletion.
  • Requests to stop receiving announcements: for as long as needed to respect your choice.

Once the purpose ends, the data is deleted or anonymized, except for the retention allowed by article 16 of the LGPD, such as compliance with a legal obligation and the exercise of rights.

8. Your rights

Under article 18 of the LGPD, you may request at any time:

  • confirmation that we process your data and access to it;
  • correction of incomplete, inaccurate or outdated data, some of which you can change yourself on the site's Account page;
  • anonymization, blocking or deletion of unnecessary or excessive data or data processed in breach of the law;
  • portability of the data to another provider;
  • deletion of data processed with your consent and withdrawal of that consent;
  • information on who your data has been shared with;
  • objection to processing based on legitimate interest, such as announcements.

We will reply within 15 days, as provided by article 19 of the LGPD. Some data may remain stored even after a deletion request, when required by law. You may also file a complaint with the National Data Protection Authority (ANPD) and with consumer protection agencies.

9. Security

We adopt technical and administrative measures to protect your data (article 46 of the LGPD), such as encrypted connections (HTTPS), one-time code access, credentials that stop working when the attendee is changed, role-based access control for the Organizer's team and tokenization of card data. If a security incident occurs that may cause significant risk or harm, we will notify you and the ANPD, as required by article 48 of the LGPD.

10. Children and adolescents

The site is not aimed at children. Orders must be placed by people aged 18 or over or with the assistance of parents or guardians, and the data of a child or adolescent named as the person attending the Event should only be provided by their parents or guardians. If you learn that we process a child's data without a guardian's consent, let us know so we can delete it (article 14 of the LGPD).

11. Changes to this Policy

This Policy may be updated to reflect changes in the platform or in the law. The date at the top indicates the version in force. If a change alters the purpose of processing that depends on your consent, you will be informed before it takes effect.

12. Contact

For questions or to exercise your rights, contact the Organizer through the channels listed on the site or write to contato@taagui.com.br to reach Taagui. As a small-scale processing agent, Taagui has not appointed a data protection officer and keeps this email as the communication channel with data subjects, under article 11 of ANPD Board Resolution No. 2/2022. Requests sent to Taagui about data controlled by the Organizer will be forwarded to them.