Privacy Notice

Last updated 4 September 2026

Literah is operated by Apis-IA Tecnologia Ltda (CNPJ 18.579.767/0001-82), registered at Av. Des. Hugo Simas 1181, Loja 03, Vista Alegre, Curitiba - PR, CEP 80820-102, Brazil. We are the controller of the personal data described here. Contact us at servico@apis-ia.com about anything on this page.

The short version: we keep your email address, and very little else. We do not sell data, and we do not run advertising trackers.

What we collect

Your email address. This is your account. It arrives when you buy, join the waitlist, or request a sample.
Sign-in codes. Short-lived numeric codes we email you to log in. They expire and are not reusable.
What you own. Which library you bought, when, and the amount paid.
Ordinary server logs. Requests to the site, including IP address, kept briefly for security and debugging.

We do not collect your name, address or date of birth, and we never see or store your card details. Those go directly to Paddle.

Payment data

Purchases are processed by Paddle.com Market Limited, our authorized reseller and merchant of record. Paddle collects the payment and billing information it needs, including card details and the country used for tax. We receive only your email address, the amount, and confirmation that payment succeeded. Paddle’s own privacy notice covers what they hold.

Why we are allowed to hold it

To give you what you bought. Performing our contract with you: your account, your access, your receipts.
To keep the service working and secure. Our legitimate interest in preventing abuse and fixing faults.
To email you about Literah. Only with your consent, and only if you asked. Every such email can be unsubscribed from.
To meet tax and accounting duties. A legal obligation, which Paddle largely discharges as merchant of record.

Who else touches it

We use a small number of processors, and only for the purposes given:

Paddle — payments, tax and invoicing.
Supabase — the database holding your account.
Vercel — hosting and server logs.
Resend — sending sign-in codes and account email.
Cloudflare R2 — storing the library’s images.

We do not sell personal data, and we do not share it for anyone else’s marketing.

Where it goes

Our processors operate internationally, so your data may be handled outside Brazil, including in the European Union and the United States. Transfers rely on the safeguards those providers offer, such as standard contractual clauses.

How long we keep it

Your account is kept while you have access to the library, since lifetime access means we must be able to recognise you indefinitely. Sign-in codes expire within minutes. Server logs are kept briefly. Ask us to delete your account and we will, subject to any records tax law requires us to retain.

Your rights

Under Brazil’s Lei Geral de Proteção de Dados (LGPD), and under the GDPR if you are in the EU or UK, you may ask us to:

confirm whether we hold data about you, and give you a copy;
correct anything inaccurate;
delete it, or anonymise it;
restrict or object to how we use it;
withdraw consent to marketing email at any time;
have it ported elsewhere.

Email servico@apis-ia.com and we will respond within the time the law allows. If you are unhappy with our answer, you may complain to Brazil’s ANPD, or to your local supervisory authority.

Cookies

We use a single cookie to keep you signed in. It is essential to the service and is not used for tracking or advertising. Paddle’s checkout sets its own cookies, covered by their notice.

Children

Literah is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us data, write to us and we will remove it.

Changes

If we change this notice materially we will email account holders. See also our Terms of Service and Refund Policy.