Privacy policy

The Seamoney team is the controller of the personal data processed through the service. For privacy requests, contact the team through the project’s repository, https://github.com/Repositorio-de-projetos-da-faculdade/Seamoney-Hackathon.

On the website: there is no account and no form, and we use no analytics or advertising trackers. The hosting provider processes technical data (IP address, browser and the pages requested) to deliver the site and protect it from abuse. A cookie stores the language you choose.

In the application, when you sign in:

• Account: your email, your company and your role. Your password is stored only as a one-way hash (bcrypt), never as plain text.
• Audit trail: sign-ins, failed sign-ins, company switches and every decision on orders and supplier wallets, with the time and the IP address it came from.
• Business data you enter: suppliers and their wallet addresses, invoices (number, amounts and items), orders and payment records.
• Invoice files you upload to be read by AI.

In the application without signing in, the data you enter stays in your browser’s local storage and is not sent to us.

• To provide the service you asked for: sign-in, orders, payments, reconciliation, proof and reports (LGPD, art. 7, V).
• To keep the service secure, prevent fraud and keep an audit trail of who did what (legitimate interest, art. 7, IX, and legal obligations, art. 7, II, where they apply).
• To remember your language (legitimate interest).

We do not sell personal data and do not use it for advertising.

Payments are recorded on public blockchains, where anyone can see them and nobody can delete them. What is recorded: the sending and receiving wallet addresses, the token, the amount, the time and the memo.

The memo carries only an opaque order code. We never write the invoice number, the company’s name or personal data on the blockchain.

• Google (Firebase and Google Cloud), which hosts the site and the application.
• Anthropic, the AI provider, when invoice reading is turned on: the invoice file is sent to it to extract the fields.
• The Tempo and Solana networks, with the public payment data described above.
• Public authorities, when the law or a court order requires it.

The proof page of a payment shows the supplier’s name, the invoice number, the amount and the wallet to anyone who has its link. Share that link only with your supplier.

Some of these providers process data outside Brazil, for example in the United States. These transfers follow the mechanisms of article 33 of the LGPD.

• Account data and the audit trail: while the account is active, and afterwards for as long as the law requires.
• Data in the test environments: it may be erased at any time.
• Data in your browser’s local storage: until you clear it.
• Data on the blockchain: permanently, since public blockchains cannot be erased.

Passwords are hashed with bcrypt. The session lives in a cookie that page scripts cannot read and that expires after one hour. Each company sees only its own data, roles limit what each person can do, and repeated failed sign-ins are blocked for a while.

No system is completely secure. If you find a problem, please tell us through the contact above.

Under article 18 of the LGPD you can ask us to confirm that we process your data; to access it; to correct it; to anonymize, block or delete data that is unnecessary or processed unlawfully; to port it; to know with whom we share it; and to withdraw consent where processing depends on it. You can also complain to the National Data Protection Authority (ANPD).

Data already recorded on a public blockchain cannot be changed or deleted, by us or by anyone.

We use no third-party or advertising cookies. Only these:

• lang: the language you chose. Kept for one year.
• seamoney_api: your signed-in session in the application. Unreadable by page scripts; expires after one hour.
• seamoney_session: access to a private environment, when one is protected by a password. Expires after 12 hours.
• seamoney.demo (local storage): the data you enter in the application without signing in. It stays in your browser.

The service is meant for companies and is not directed to people under 18.

When we change this policy we update the date at the top of this page and announce material changes on the site.