Privacy Policy

1. Who we are and who this applies to

Riftei is the controller of the personal data processed in the desktop app, on the websites (riftei.com and riftei.lol) and in the account panel (admin.riftei.com). By using Riftei, you acknowledge the practices described in this Policy.

2. Data we collect

We collect the following data, depending on how you use the service:

• Account and sign-up: name, email, password (stored encrypted/hashed) and preferred language.
• Linked Riot account: your Riot ID (summoner name and tag) and region, when you choose to connect your game account.
• Game and usage data: matches, app usage metrics and requests made to the coach, sent by the app to build your statistics and improve guidance.
• Payment and subscription: billing data processed by Asaas. We do not store your full card details — we only keep non-sensitive status, plan and invoice information returned by the gateway.
• Technical data: IP address, device and browser type, approximate country (IP geolocation to set the language), access logs, cookies and identifiers.

3. How we collect it

• Directly from you, when you create your account, link your Riot account, subscribe to a plan or contact us.
• Automatically, through your use of the app and websites, via cookies and telemetry.
• From third parties: Asaas (payment status) and OP.GG (public performance data for your summoner).

4. Why we use it and legal bases

We process your data for the purposes below, with the corresponding LGPD legal bases:

• Provide and operate the coach, account and app — performance of the contract.
• Process subscription and payments — performance of the contract and compliance with legal/regulatory obligations.
• Improve the product, ensure security and prevent fraud and abuse — legitimate interest.
• Send transactional communications (account, billing, support) — performance of the contract; marketing communications — based on your consent.
• Comply with legal obligations and defend rights in proceedings — compliance with legal obligations and regular exercise of rights.

5. Cookies and similar technologies

We use cookies and similar technologies to keep the site working, remember your preferences (such as language and theme) and understand how Riftei is used. On the public sites, a banner lets you accept or customize the categories.

• Essential: required for sign-in, security and basic functionality — cannot be turned off.
• Analytics: help us understand usage in aggregate to improve the experience.
• Marketing: used to measure and personalize campaigns.

6. Who we share it with

We do not sell your personal data. We may share it with:

• Processors that handle data on our behalf and under contract — such as Asaas (payments), hosting/infrastructure, email delivery and usage analytics providers.
• Authorities and third parties, where required by law, court order or to exercise/defend rights.
• Successors, in the event of corporate reorganization, merger or acquisition, keeping the protection set out in this Policy.

7. Public data (OP.GG)

To enrich your statistics and the coach’s guidance, we use public performance data for your summoner obtained via OP.GG. This data reflects information that is already public in the game ecosystem and is accessed from the Riot ID you link.

8. International transfer

Some of our providers may process data outside Brazil. In those cases, we adopt appropriate safeguards and require protection standards compatible with the LGPD.

9. How long we keep it

We keep your data for as long as your account exists and for the time needed to fulfill the purposes of this Policy and legal obligations. Once that need ends, the data is securely deleted or anonymized.

10. Security

We adopt technical and organizational measures to protect your data, such as encryption in transit, hashed password storage and access controls. No system is 100% secure, but we work continuously to reduce risks and respond to incidents.

11. Your rights

Under article 18 of the LGPD, you may, at any time, exercise the following rights:

• confirm the existence of processing and access your data;
• correct incomplete, inaccurate or outdated data;
• request anonymization, blocking or deletion of unnecessary data or data processed unlawfully;
• request data portability;
• obtain information about the entities we share data with;
• withdraw consent and object to processing, where applicable;
• request review of decisions made solely on an automated basis.

12. Children and teenagers

Riftei is not intended for children under 13. Processing of children’s and teenagers’ data observes the best interest of the data subject and, where required, the specific consent of at least one parent or legal guardian.

13. Data Protection Officer and contact

To exercise your rights or ask questions about this Policy and the processing of your data, contact our data protection officer at privacidade@riftei.com. For general matters, use suporte@riftei.com.

14. Changes to this Policy

We may update this Policy to reflect changes to the service, the law or our practices. The "last updated" date at the top indicates the current version, and relevant changes will be communicated by reasonable means.