Privacy Policy

1. What data we collect

When you sponsor a project or make a contribution, we only collect the data needed to process your donation and issue a receipt: full name, CPF/CNPJ (Brazilian tax ID), email and, optionally, phone number. If the contribution is made by credit card, card details are sent directly to our payment processor and are never stored on FEPAS servers.

When you sign up as a volunteer, we collect name, email, phone, city, area of interest and availability. When an entity requests affiliation, we collect the organization's data (name, CNPJ, city, area of focus) and the contact person's data (name and email). In both cases, the data is used only to enable contact and the FEPAS team's review of the submission.

2. What we use your data for

• Processing the contribution and generating the charge (Pix, bank slip or card) with our payment processor.
• Issuing a donation receipt, including for income tax deduction purposes where applicable.
• Sending confirmations and communications related to your contribution.
• Reviewing and responding to volunteer applications, directing you to a suitable area of activity.
• Reviewing entity affiliation requests to the FEPAS network.

3. Who we share data with

We share only the data strictly necessary with Asaas, our payment processor, to enable billing. FEPAS does not sell or pass on your personal data to third parties for marketing purposes.

4. Legal basis and retention

Data processing is based on performing the donation agreement and complying with legal obligations (issuing receipts, accounting for funds). We keep the data for as long as necessary for these purposes and to meet tax and accounting requirements.

5. Your rights

You can request access to, correction of, or deletion of your personal data at any time by writing to fepas@fepas.org.br.