Privacy Policy

Data controller: ESPIRITO SANTO MUSIC PRODUÇÃO E COMÉRCIO LTDA-ME, CNPJ 33.179.602/0001-07, under the VERMUS brand (vermus.com.br) / Espírito Santo Music. Contact for privacy matters and to exercise your rights: vermus@thiagoespiritosanto.com.br.

Registration: name, e-mail, tax ID (CPF or CNPJ), telephone (country code, area code and number), instrument(s) and, when subscribing to a plan, the billing address.

Payment: card details are collected and processed directly by Asaas, our payment processor. We do not store the card number; we receive only the confirmation and the data needed to manage your subscription. With Pix, we process the transaction data needed to identify the payment, release access and record when that happened.

Support: when you contact us by WhatsApp or e-mail, we process the messages and the data you send through those channels.

Content you upload: chord charts and songs you upload, the analyses generated and, where you choose to share, your name displayed alongside the content in the Users' Library.

Usage and technical data: access logs, device, browser and IP address, for security and operation.

Cookies: used to keep you signed in, remember preferences and measure usage (see section 6).

To create and maintain your account and provide the service — performance of a contract.

To process subscriptions, payments and the release of access — performance of a contract and legal (tax) obligation.

To generate the musical analyses you request — performance of a contract.

To display, where you choose to share, your content and your name in the Users' Library — consent, which you may withdraw by taking the content down.

To communicate important notices about the service, including the generation and the due date of your subscription's charges — performance of a contract / legitimate interest.

To send news and offers — consent, which you may withdraw at any time.

Security, fraud prevention and improvement of the platform — legitimate interest.

To comply with legal and regulatory obligations — legal obligation.

We share data only with those necessary to operate the service:

Asaas (Asaas Gestão Financeira Instituição de Pagamento S.A.) — processing of payments, subscriptions and charges.

Database and hosting provider (Supabase and infrastructure services) — secure storage of data.

Artificial intelligence service used to generate the analyses from the chord charts. That processing handles musical content (chords and charts) and is not intended to identify you; we do not send unnecessary sensitive personal data.

Other subscribers, solely as regards the content you choose to share in the Users' Library and your name displayed alongside it.

Authorities, where required by law or court order.

We do not sell your personal data.

Some providers (infrastructure and AI) may process data on servers outside Brazil. In such cases we adopt safeguards to ensure protection equivalent to that required by the LGPD (Brazilian General Data Protection Law).

We use essential cookies (for login and operation) and, subject to your choice, usage-measurement cookies. You can manage cookies in your browser; disabling the essential ones may impair operation.

We keep your data while your account is active and for as long as necessary to comply with legal obligations (for example, tax and accounting) and to resolve any disputes. Once the account is closed, the data is deleted or anonymised, except for what the law requires us to keep. Content you have shared goes offline when you remove it or when the account is closed.

Under the LGPD you may, at any time: confirm the existence of processing; access your data; correct incomplete or out-of-date data; request the anonymisation, blocking or deletion of unnecessary data; request portability; obtain information about sharing; and withdraw consent. To exercise these rights, write to vermus@thiagoespiritosanto.com.br.

We adopt technical and organisational measures to protect your data, including access control and visibility restrictions — each student accesses only their own account and their own content, save for what they themselves choose to share. No system is 100% infallible; in the event of a material incident we will inform you and the competent authority as required by law.

The platform may be used by students of any age. The processing of data of persons under 18 takes place in the best interests of the minor and depends on the consent of a parent or legal guardian, who carries out the registration and the purchase.

We may update this Policy. Material changes will be communicated on the platform or by e-mail, with the update date revised at the top.

This Policy is published in Portuguese, English and Spanish. In the event of any divergence between the versions, the Portuguese version prevails.

Questions about privacy or your data: vermus@thiagoespiritosanto.com.br.

Google Analytics and Microsoft Clarity measure pages and usage. Meta Pixel measures visits for Facebook and Instagram advertising. We do not send form data. You can decline or change your choice here anytime.

Navigation data, visited pages, language and interactions are shared with Google, Microsoft and Meta for usage and advertising measurement according to your choices. These tools may receive browser information, IP addresses and cookie identifiers; we do not send names, emails, tax IDs, phone numbers or card data. Permission is recorded in this browser with the date, region, notice version and separate analytics and advertising choices. Withdraw permission through Cookie preferences on the site to stop new transmissions. We honor applicable browser opt-out signals. You may also contact vermus@thiagoespiritosanto.com.br.