Privacy policy
Version: 2026-09-30.2
This policy explains what personal data Maré Moda processes, why, who we share it with and how you exercise your rights, under Brazil's General Data Protection Law (Law 13,709/2018 — LGPD).
1. Who processes your data
Maré Moda is the controller of the personal data processed on the platform. For any privacy matter, including reaching our data protection officer (DPO), write to contato@maremoda.com.br.
2. Data we collect
• Account: name, email, password (stored only as a hash) and role on the platform (sewist, designer or Maré Moda staff). If you sign in with Google or Facebook, we receive your name, email and profile photo. • Designers: studio or brand name, bio, city, state, Instagram, website, YouTube channel, logo, pattern types, the authorship declaration and the status of the connected Stripe account. • Patterns and usage: patterns in your library and where they came from (free, or a sale the Designer made outside Maré Moda, with the access code used), favorites, reviews, downloads (date and version) and delivery problem reports. • Acceptances: a record of when you accepted the terms and the privacy policy. Maré Moda does not process payments: paid patterns are bought directly from the Designers, and we receive no payment data. • Security: IP address, browser (user agent), date and time of logins and sensitive actions, denied access attempts and, if you turn on two-step verification, the authenticator key (encrypted) and recovery codes (encrypted). • Contact: whatever you write in the contact form. • Statistics: visit counts for pattern pages, without identifying who visited.
3. What we use it for, and the legal basis
• Create and keep your account, deliver patterns and deliver patterns (free or sold by the Designers) and handle delivery problem reports — performance of a contract (art. 7, V). • Send transactional emails (email confirmation, password reset, notices about your patterns) — performance of a contract. • Review designer applications and moderate uploaded images (automatic nudity check) — legitimate interest and enforcing the platform rules. • Protect accounts and the platform: limit login attempts, block abusive IPs, check you're not a bot (captcha), investigate fraud and unauthorized file sharing — legitimate interest (art. 7, IX) and the regular exercise of rights. • Keep access logs for the period required by Brazil's Internet Civil Framework and acceptance records for the legally required period — legal obligation (art. 7, II). • Show designers aggregated statistics (visits and unique downloads) without revealing who downloaded — legitimate interest.
4. Who we share it with
Only with providers that run the service on our behalf, as far as needed: Cloudflare (hosting, database, file storage and backups, Turnstile captcha, cookieless statistics and automatic image moderation), Stripe (payments, only if Maré Moda starts selling patterns directly), Resend (sending email) and GitHub (storing encrypted database backups). If you use social login, Google or Facebook take part in authentication. A pattern's designer only sees aggregated numbers, not who downloaded — except when you report a problem with the content of one of her patterns: then she gets the report and your email so she can fix it. We don't sell personal data and only hand it to authorities when legally required or under a court order.
5. International transfers
Some of these providers store or process data outside Brazil (for example, in the United States and the European Union). Such transfers happen to perform our contract with you and under the contractual clauses and safeguards those providers offer (LGPD art. 33).
6. Security and backups
All traffic uses HTTPS. Passwords are stored only as hashes; two-step verification keys are encrypted. Pattern PDFs are private and can only be downloaded by people with access, through short-lived signed links. Maré Moda staff accounts require two-step verification. We make daily backups of the database (encrypted) and of the files, kept for up to 30 days, to restore the service after a failure.
7. How long we keep it
While your account is active. When you delete your account, we erase or anonymize your name, email, profile, favorites, reviews and sessions right away; we only keep what the law requires or what is needed to defend rights — access logs for at least 6 months (Internet Civil Framework), access and acceptance records for the consumer-protection period (up to 5 years) and security records tied to fraud. Backups expire within 30 days.
9. Your rights
At any time you can: confirm we process your data and access it; correct it in your profile; download a copy (portability) at My account → Download my data; delete your account at My account; ask about sharing; withdraw consent and object to processing based on legitimate interest. For anything not available on the site, write to contato@maremoda.com.br — we reply within 15 days. You can also complain to Brazil's data protection authority (ANPD).
10. Minors
Maré Moda is not aimed at people under 18, and designer applications require legal age.
11. Changes to this policy
When this policy changes, we publish the new version on this page with its date at the top. Relevant changes are announced by email or on the site.
12. Contact
Privacy questions or requests: contato@maremoda.com.br.