Last updated: June 2026
1. Who we are
Sunfy24 is an online technology and payment processing platform operated by Y7 Sky Digital LTDA, registered under CNPJ 62.961.673/0001-92, headquartered in São Paulo, Brazil ("Sunfy24", "we"). Sunfy24 provides checkout and payment processing on behalf of third-party sellers ("Sellers") who sell their own products and services. Sunfy24 is not the seller of the products — we act as a payment intermediary.
This Policy complies with the Brazilian General Data Protection Law (Law No. 13,709/2018 — LGPD).
2. Data we collect
We only collect the data needed to process payments and operate the platform:
- From the buyer: name, email, phone (when provided), identification document when required by the payment method, and transaction data (amount, product, country).
- Payment data: card details are captured and processed directly by our payment partners (secure PCI-DSS environment). Sunfy24 does not store the full card number.
- From the seller: registration, contact and tax data needed for settlement and to meet legal obligations.
- Browsing data: IP address, device and cookies, used for security, fraud prevention and service improvement.
3. How we use the data
- To process and confirm payments and payouts;
- To send receipts, confirmations and purchase communications;
- To prevent fraud and keep transactions secure;
- To support the buyer and mediate communication with the seller;
- To comply with legal, tax and regulatory obligations.
4. Who we share it with
We only share data when necessary to provide the service, with:
- Payment processors (e.g. dLocal, Stripe, Mercado Pago) to carry out the charge and settlement;
- The seller of the product you purchased, so they can deliver it and provide support;
- Authorities, when required by law or court order.
We do not sell your personal data to third parties.
5. Cookies
We use essential cookies for the checkout and session to work, and security/anti-fraud cookies. You can manage cookies in your browser, but some are required to complete the payment.
6. Security
We adopt technical and organizational measures to protect data, including encryption in transit (HTTPS) and card processing in our partners' PCI-DSS environment. No system is 100% infallible, but we work to maintain the highest standard of protection.
7. Retention
We keep data for as long as needed to fulfil the purposes above and legal obligations (e.g. tax and fraud-prevention periods). After that period, data is deleted or anonymized.
8. Your rights (LGPD)
You may request at any time: confirmation of processing, access, correction, anonymization, portability, deletion and information about sharing. To exercise your rights, write to support@sunfy24.com.
9. Data protection officer / Contact
Questions about privacy and personal data: support@sunfy24.com.
10. Changes
We may update this Policy from time to time. The current version will always be available on this page, with the update date.
11. Governing law
This Policy is governed by the laws of Brazil, with jurisdiction in the courts of São Paulo, Brazil.