Milewa values privacy, security, and the responsible use of personal data. This Privacy Policy explains how we collect, use, store, share, and protect information related to your use of our platform, especially when you connect marketplace accounts, such as Mercado Livre and Shopee, to access operational, financial, and performance analysis features.
By using Milewa, you acknowledge this Policy. If you have any questions, requests, or wish to exercise your data rights, you can contact us through the official channels listed on this page.
Last updated: June 2026.
Controller and Data Protection Officer (DPO)
Data controller: Milewa — WCG Tecnologia da Informação LTDA (trade name Inflexão Digital), CNPJ 61.039.489/0001-08, Rua Pais Leme, 215, suite 1713, Pinheiros, São Paulo/SP, ZIP 05424-150. Contact: [email protected].
Data Protection Officer (DPO): email [email protected]. The DPO is the contact between you, Milewa, and the National Data Protection Authority (ANPD) for privacy matters. To exercise your rights, see the Data Subject Rights page.
What data we process
We may process registration and contact data of the user responsible for the account, such as name, email, business phone, company, position, and login identifiers. We may also process data from the marketplace account, order data, products, fees, shipping, costs, operational history, and other data needed to provide reports, dashboards, alerts, integrations, and support. Milewa does not use data for purposes incompatible with the contracted service.
How data is collected
Data may be collected directly from the user through site forms, registration flows, sales support, onboarding, and customer service. Data may also be received through authorized integration with marketplaces, ERPs, partner platforms, and services contracted by the client. In some cases, we collect technical data on navigation, security, and platform usage for authentication, fraud prevention, stability monitoring, and service improvement.
How we use your data
We use data to: create and manage accounts; authenticate access; provide dashboards, reports, and alerts; process marketplace integrations; respond to support requests; send operational and commercial communications related to the service; improve the platform's experience, stability, and security; comply with legal, regulatory, and contractual obligations; prevent misuse, fraud, and security incidents.
Legal bases for processing
Each purpose relies on a legal basis provided by the LGPD (art. 7 and art. 11). The table below summarizes the main bases and retention periods (reference — adjust according to operations and legal guidance):
| Purpose | Legal basis | Retention (reference) |
|---|---|---|
| Create/manage account and provide the service | Contract performance | While the account is active |
| Marketplace integration (orders, fees, shipping, costs) | Contract performance | Term of contract + applicable legal retention |
| Billing and tax issuance | Legal/regulatory obligation | Up to 5 years (tax period) |
| Customer support | Contract performance | Up to 2 years after support |
| Marketing communications (email) | Consent | Until consent is withdrawn |
| Sending requested materials (e.g., course spreadsheet) and notifications of new content by email and, if you select this option separately, by WhatsApp | Consent (one box for each channel) | Until consent is withdrawn (unsubscribe by email or "SAIR" on WhatsApp) |
| Product usage analysis and improvement | Legitimate interest / consent (cookies) | Up to 12 months or until withdrawn |
| Security, fraud prevention, and stability | Legitimate interest | As long as needed for the purpose |
Data sharing
Milewa may share data with operators and suppliers necessary to provide the service, such as cloud infrastructure, authentication, analytics, communication, storage, and monitoring. Data may also be shared when needed to perform integrations requested by the client or to comply with legal, regulatory, or authority requirements. We do not sell personal data.
Security and protection
We adopt reasonable technical and organizational measures to protect personal data and operational information against unauthorized access, loss, leaks, alteration, or improper destruction. This includes access controls, event logging, environment segregation, encryption in line with industry standards, permission reviews, and incident response routines. Some marketplace integrations may require additional controls for retention, access, and auditing, which we also follow as applicable.
Retention and disposal
Data is kept for as long as necessary to fulfill the purposes described in this Policy, meet legal and contractual obligations, resolve disputes, exercise rights, and maintain the security and integrity of the service. When data is no longer needed, it is deleted, anonymized, or kept blocked, according to the applicable legal basis and the requirements of the integrated ecosystem.
Data subject rights
The data subject may request confirmation of data processing, access, correction, update, anonymization, blocking, deletion when applicable, portability, information about data sharing, review of automated decisions, and withdrawal of consent, where applicable. Milewa will review each request within the limits of applicable law and the responsibilities of the controller or processor in the context of processing.
Requests are free of charge and answered within 15 days. You can exercise your rights on the Data Subject Rights page or through our Data Protection Officer.
Cookies and similar technologies
We use strictly necessary cookies for the operation and security of the site and, with your consent, functionality, analytics, and marketing cookies. Non-essential cookies are only enabled after you consent in the banner shown on your first visit — none are pre-enabled. You can review or withdraw your choices anytime in Cookie preferences.
Transfer and internationalization
Part of Milewa's technology infrastructure may involve suppliers located outside Brazil. When this happens, we will adopt appropriate contractual and organizational measures to protect the data, in compliance with applicable law.
Contact and ANPD
For privacy, security, or data subject rights matters, contact our Data Protection Officer at [email protected] or through the Data Subject Rights page. If needed, you may also file a complaint with the National Data Protection Authority (ANPD) — gov.br/anpd. This Policy may be updated periodically, and the current version will always be available on the website.