LGPD at Kobana
We are committed to protecting your personal data and complying with the Brazilian General Data Protection Law.
Our Commitment
Kobana recognizes the importance of privacy and personal data protection. As a platform that processes sensitive financial information, we have the responsibility to ensure that your data is handled with the utmost care and security.
Our LGPD compliance program includes robust internal policies, continuous employee training, technical security measures and clear processes to address data subject rights.
We have designated a Data Protection Officer (DPO) responsible for ensuring compliance and serving as a point of contact between Kobana, data subjects and the National Data Protection Authority (ANPD).
Your Rights as a Data Subject
LGPD guarantees you the following rights over your personal data
You can confirm whether we process your data and request a copy of the information we hold about you.
Art. 18, I and IIYou can request the correction of incomplete, inaccurate or outdated data.
Art. 18, IIIYou can request the anonymization, blocking or deletion of unnecessary or excessive data.
Art. 18, IVYou can request the portability of your data to another service provider, upon express request.
Art. 18, VYou can request the deletion of data processed based on your consent, except in cases of data retention required by law.
Art. 18, VIYou can revoke consent given for data processing at any time, through express and free manifestation.
Art. 18, IXYou can request information about the public and private entities with which we share your data.
Art. 18, VIIYou have the right to be informed about the possibility of not providing consent and the consequences of refusal.
Art. 18, VIIITo exercise any of your rights under LGPD, follow the steps below:
- 1
Send an email
Send your request to lgpd@kobana.com.br
- 2
Identify yourself
Provide your full name, registered email and, if applicable, company CNPJ
- 3
Describe your request
Specify which right you wish to exercise and provide relevant details
- 4
Wait for our response
We will respond within 15 business days, as required by LGPD
Legal Bases for Processing
Personal data processing by Kobana is based on the following legal grounds
Consent
Art. 7, I- - Newsletter sending
- - Direct marketing
- - Satisfaction surveys
Legal or Regulatory Obligation
Art. 7, II- - Invoice issuance
- - Compliance with Central Bank regulations
- - Tax data retention
Contract Execution
Art. 7, V- - Service provision
- - Transaction processing
- - Customer support
Legitimate Interest
Art. 7, IX- - Fraud prevention
- - Platform improvement
- - Information security
Frequently Asked Questions
What is LGPD?
The General Data Protection Law (Law No. 13,709/2018) is Brazilian legislation that regulates the processing of personal data by companies and organizations. It establishes rules on collection, storage, processing and sharing of personal data, guaranteeing rights to data subjects.
What personal data does Kobana collect?
We collect registration data (name, email, phone, CNPJ), financial data necessary for service provision (banking information, transaction history), access data (IP, browser) and platform usage data. Full details are in our Privacy Policy.
How does Kobana protect my data?
We use cutting-edge encryption (TLS 1.3 and AES-256), strict access control and 24/7 monitoring. Our infrastructure is hosted on AWS, which maintains SOC 2, ISO 27001 and PCI-DSS certifications. More details on our Security page.
Does Kobana share my data with third parties?
We only share data when necessary for service provision (partner banks, infrastructure providers) or when required by law. All partners are subject to data protection contracts.
How long is my data stored?
The period varies depending on the type of data: registration data is kept while the account is active + 5 years; transaction data for 10 years (legal obligation); access logs for 6 months. Full details in the Privacy Policy.
How can I exercise my rights?
Send an email to lgpd@kobana.com.br identifying yourself and describing the right you wish to exercise. We will respond within 15 business days, as provided by Art. 18, §5 of the LGPD.
For questions related to privacy, data protection and exercising rights under LGPD, contact our Data Protection Officer (Art. 41, §1):
Matheus Oliveira Gonçalves
Controller: Kobana Tecnologia Ltda.
CNPJ: 05.813.794/0001-26
Calçada das Margaridas, 163, Sala 02 Centro Comercial
Alphaville - Barueri, SP - CEP 06453-038
National Data Protection Authority (ANPD)
You can also contact ANPD if you believe your rights have not been met: www.gov.br/anpd
International Data Transfer
To provide our services, some personal data may be transferred to servers located outside Brazil, specifically to cloud infrastructure providers (AWS) that operate in compliance with international security standards.
These transfers are carried out in compliance with Art. 33 of the LGPD, based on the following safeguards:
- Standard contractual clauses ensuring an adequate level of data protection
- Providers certified with SOC 2, ISO 27001 and PCI-DSS
- Data encryption in transit (TLS 1.3) and at rest (AES-256)
- Continuous monitoring and periodic security audits
Last updated: March 9, 2026
Related Documents
Questions about your data?
Contact our Data Protection Officer. We are ready to help.