Scope & lawful basis
Livescraper processes only publicly visible data. Where Brazilian personal data is incidentally processed (e.g. a business owner's public phone number), we rely on Article 7, IX of the LGPD — legitimate interest — combined with Article 7, IV (the "public data" exception under § 4°). We do not process sensitive personal data (Article 5, II).
What personal data we process
- Customer account data: email, name, billing address, payment method (via Stripe). Lawful basis: contract performance (Article 7, V).
- Public business data exposed by your scrapes: we don't retain it; it streams to your destination. Where it incidentally contains LGPD personal data, you are the controller and we are the processor.
- Usage logs: IP, timestamps, user-agent — for security and abuse prevention. Retained 90 days.
Your rights under Article 18
If you are a Brazilian data subject, you have the right to:
- Confirmation of processing & access to data (Art. 18, I-II)
- Correction of incomplete or inaccurate data (Art. 18, III)
- Anonymisation, blocking, or deletion (Art. 18, IV)
- Portability to another provider (Art. 18, V)
- Information about with whom data has been shared (Art. 18, VII)
- Information about consequences of refusing consent (Art. 18, VIII)
- Revocation of consent (Art. 18, IX)
- Petition the ANPD (Art. 18, § 1°)
We respond to all Article 18 requests within 15 days (extendable once for 15 more if complex).
Brazilian Data Protection Officer (Encarregado)
Our Encarregado pelo Tratamento de Dados Pessoais is Anita Sharma. Contact: dpo@livescraper.com. Letters can be sent to our Brazilian Email of Authorised Receipt (EAR) representative on request.
International data transfers
Customer data may be transferred to AWS data centers in the US (us-east-1) or EU (eu-central-1). We rely on the safeguards in Article 33: explicit consent at signup, contractual safeguards in our DPA, and standard contractual clauses (SCCs) where the destination jurisdiction does not provide an adequate level of protection.
Breach notification
In line with Article 48, we notify the ANPD and affected data subjects of any incident that may cause relevant risk or damage — within 1 hour internal disclosure SLA, 72 hours regulatory notification SLA.
Exercise your rights
Email dpo@livescraper.com with the subject line "LGPD Article 18 request". Include enough information to identify the relevant data (your account email, or the URL whose data you are concerned about). We respond within 15 days.
Complaints can also be filed with Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados (ANPD).
Last updated: 02 May 2026