# Security and privacy (LGPD) at GoLiveCommerce

> A live sale involves data from the store, which uses the platform, and from the shopper, who enters their name, CPF (Brazilian taxpayer ID) and address at checkout. Here is how we protect that data and each party's role under Brazil's data protection law, LGPD. The legally binding text is the [privacy policy](https://golivecommerce.com.br/en/privacy).

Original page: https://golivecommerce.com.br/en/security-and-privacy
Updated: 2026-10-16
Summary: How GoLiveCommerce protects store and shopper accounts and data: LGPD roles, vendors, payments, data subject rights and how to request data deletion.

## Who is responsible for the data

- **Stores and site visitors:** GoLiveCommerce is the controller of sign-up, subscription and browsing data.
- **Shoppers:** the controller is the store that ran the live. It decides what the shipping and contact data is used for. GoLiveCommerce acts as the processor, handling the data on the store's behalf and only to make the sale happen.

Requests about purchase data can be made to the store or to us. When appropriate, we pass them on to the store.

## What data the platform handles

- **Store:** name, email, store name, subscription details and store content (products, stock, coupons and automations).
- **Instagram:** identifiers of the connected account and the comments and messages exchanged with the store during and after the live.
- **Shopper:** name, CPF, email, phone and address entered at checkout, plus the items, amounts and payment status.

Card data, when there is any, is entered on the payment provider's side and never passes through our servers.

## How the data is protected

- Always-encrypted connection (HTTPS) and security headers on the site.
- Instagram access credentials stored encrypted.
- Passwords stored in an irreversible format by the authentication service.
- Each store's data kept separate from other stores' data, with access control in the database.
- Internal access limited to the people who need it to run the service.

No system is fully immune to incidents. If you find a vulnerability, email contato@golivecommerce.com.br. The address is also in [security.txt](https://golivecommerce.com.br/.well-known/security.txt).

## Who the data is shared with

We don't sell personal data. We share only what's needed with the vendors that make the service work.

| Vendor | What for |
|---|---|
| Cloudflare | Site hosting and protection against attacks |
| Supabase | Database and store sign-in |
| Meta (Instagram) | Reading comments and sending messages from the connected account |
| Mercado Pago | Creating and confirming the PIX on the store's account |
| Stripe | Subscription billing |
| Melhor Envio | Shipping quotes |
| OpenAI | Interpreting comment text to identify the product, on the Pro plan |
| GoHighLevel | CRM, only when the store turns on the integration |

The full list, with where each vendor processes data, is in the [privacy policy](https://golivecommerce.com.br/en/privacy). Some vendors process data outside Brazil, and those transfers follow Article 33 of the LGPD.

## Your rights as a data subject

Under Article 18 of the LGPD, you can ask for confirmation that your data is processed and for access, correction, anonymization or deletion, portability and information about sharing, and you can withdraw consent. Ask at contato@golivecommerce.com.br. We reply within 15 days. Some data, such as tax records, must be kept even after a deletion request. You can also file a complaint with the ANPD, Brazil's data protection authority.

## Disconnect Instagram and delete data

To disconnect Instagram and request deletion of data linked to Meta, follow the steps on [data deletion](https://golivecommerce.com.br/en/privacy/delete-data). It explains the confirmation code Meta provides and how to track your request.

## Cookies and audience measurement

Analytics and marketing cookies are only turned on with your consent, which you can change at any time under “Cookie preferences” in the footer. Before you accept, the site only takes aggregate measurements, without cookies. Details are in the cookies section of the [privacy policy](https://golivecommerce.com.br/en/privacy#cookies).

## Frequently asked questions

### Is my store's data and my customers' data safe?

The site uses an encrypted connection (HTTPS), Instagram access credentials are stored encrypted, and card data never passes through our servers. Under Brazil's data protection law, LGPD, the store is the controller of shoppers' data and GoLiveCommerce is the processor. See [security and privacy](https://golivecommerce.com.br/en/security-and-privacy).

### How do I request deletion of my data?

Email contato@golivecommerce.com.br or follow the instructions on [data deletion](https://golivecommerce.com.br/en/privacy/delete-data), which also show how to disconnect Instagram and track your request with the confirmation code Meta gives you. We reply within 15 days.

### Do I need a card machine or a specific bank account?

You don't need a card machine, just a Mercado Pago account. PIX payments go straight into that account. GoLiveCommerce never receives or holds the money from your sales.

### Does it work with any Instagram account?

It works with professional accounts, meaning Business or Creator accounts. You connect through Meta's official login in a few minutes, without sharing your password. Personal accounts don't work.

## See also

- [Privacy Policy](https://golivecommerce.com.br/en/privacy)
- [Terms of Service](https://golivecommerce.com.br/en/terms)
- [Data deletion](https://golivecommerce.com.br/en/privacy/delete-data)
- [Frequently asked questions](https://golivecommerce.com.br/en/faq)

Contact: contato@golivecommerce.com.br