All legal documents

Privacy Policy

What we collect, why we keep it, and how to get it deleted.

APPLIES TO
PZX, Link and Konn
LAST UPDATED
May 11, 2026
READING
4 minutes
ON THIS PAGE
  1. 1. Data We Collect
  2. 2. Purpose and Legal Basis for Processing
  3. 3. Data Sharing
  4. 4. Cookies and Tracking Technologies
  5. 5. Data Retention
  6. 6. Data Security
  7. 7. Your Rights as a Data Subject
  8. 8. Minors
  9. 9. Data Protection Officer and Contact
  10. 10. Changes to This Policy

PZX (CNPJ: 62.054.402/0001-26), headquartered in the State of São Paulo, Brazil, is committed to protecting your personal data in compliance with the Brazilian General Data Protection Law (LGPD — Law No. 13,709/2018). This Policy describes how we collect, use, store, and share your data when you use any of PZX's products and services, including Link (available at pzx.link), Konn (available at konn.app), and the Account Hub (available at auth.pzx.app — the centralized authentication and account system shared across all PZX products).

1. Data We Collect

Depending on the products and features you use, we may collect the following personal data:

Account and identity data (all products): name, email address, password hash, and profile information provided at registration through the Account Hub.

Link-specific data: bio link pages, shortened URLs, QR codes created by the user; click, view, and engagement metrics associated with published pages.

Konn-specific data: workspace content including documents, notes, and knowledge entries submitted by the user or their organization; team membership and organizational structure.

Technical data (all products): IP address, browser type, operating system, device identifiers, and request metadata. For public bio pages on Link, we additionally collect and store approximate geolocation data derived from Cloudflare network headers (country, city, region, and timezone), used exclusively for aggregate analytics displayed to the page owner.

Payment data: billing information for paid plans, processed by our payment partners. PZX does not store credit card or banking data directly.

Cookies and similar technologies: as described in Section 4.

Your data is processed for the following purposes, under the respective legal bases provided by the LGPD:

  • Provision and maintenance of services: performance of the contract between you and PZX (art. 7, V);

  • Generation of usage metrics and reports: performance of the contract (art. 7, V);

  • Improvement of user experience and products: legitimate interest of PZX (art. 7, IX);

  • Service-related communications: performance of the contract and, where applicable, consent of the data subject (art. 7, I and V);

  • Fraud prevention and platform security: legitimate interest of PZX (art. 7, IX);

  • Compliance with legal and regulatory obligations: legal obligation (art. 7, II).

3. Data Sharing

We do not sell your personal data. We may share it with:

  • Service providers: companies that assist us in operating our products, such as hosting, analytics, and payment processing services. These providers are contractually required to treat your data with confidentiality and security;

  • International transfers: some of our service providers operate servers outside Brazil, including in the United States. These transfers are conducted based on adequate contractual safeguards, in accordance with art. 33 of the LGPD;

  • Legal obligations: when required by law, regulation, or competent judicial or administrative order.

4. Cookies and Tracking Technologies

We use the following types of cookies across our web products and websites:

  • Essential cookies: required for the basic operation of the services. These cannot be disabled;

  • Analytical cookies: used to understand how users interact with our products, and may include third-party tools such as Google Analytics;

  • Preference cookies: store user-selected settings.

You can manage or disable analytical and preference cookies in your browser settings or through the cookie banner displayed on our websites. Disabling essential cookies may impair the functionality of the services. API-based products do not use cookies for end-user tracking.

5. Data Retention

We retain your personal data according to the following criteria:

  • Account data: for the period the account remains active and for up to 30 days after closure, for recovery purposes;

  • Usage and content data: for the duration of the active plan or subscription;

  • Tax and payment data: for a minimum period of 5 years, as required by Brazilian tax legislation;

  • API usage logs: for up to 90 days, for debugging and abuse prevention purposes;

  • Data required for legal compliance: for the periods determined by applicable legislation.

After the expiration of the above periods, data will be deleted or anonymized.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or destruction, including encryption in transit and at rest, role-based access control, and security monitoring.

No system is completely secure. In the event of an incident that may pose a risk or relevant harm to data subjects, PZX will notify the National Data Protection Authority (ANPD) and affected users within the timeframes established by the LGPD.

7. Your Rights as a Data Subject

Under the LGPD, you have the right to:

  • Confirm the existence of processing of your data;

  • Access your personal data;

  • Correct incomplete, inaccurate, or outdated data;

  • Request anonymization, blocking, or deletion of unnecessary data or data processed in non-compliance with the LGPD;

  • Request data portability to another service provider;

  • Obtain information about with whom your data has been shared;

  • Revoke consent at any time, when processing is based on that legal basis.

To exercise any of these rights, please contact us through the channel indicated in Section 9. We will respond within 15 business days.

8. Minors

PZX's products are not intended for individuals under 18 years of age. We do not intentionally collect personal data from minors. If we identify that a minor's data has been collected without proper consent, we will proceed with its immediate deletion.

9. Data Protection Officer and Contact

The contact channel for privacy and data protection inquiries is:

Data Protection Officer, pursuant to Article 41 of the LGPD:

  • Name: Filipe Albuquerque Brauns Cazelgrandi

  • Email: dpo@pzx.app

10. Changes to This Policy

This Policy may be updated periodically. Significant changes will be communicated with a minimum of 15 days' advance notice through the affected products or via email. Continued use of any PZX product after this period constitutes acceptance of the updated version.

Questions about this policy? Ask.

legal@pzx.app