Privacy Policy

Last Updated: April 13, 2025

1. INTRODUCTION

WePray ("we," "us," or "our") operates the website www.wepray.org, its language variations (such as en.wepray.org or pt.wepray.org), and the WePray mobile application (collectively, the "Services").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services. By accessing or using our Services, you consent to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

2. INFORMATION WE COLLECT

2.1 Personal Data

While using our Services, we may collect personally identifiable information that can be used to contact or identify you ("Personal Data"), including but not limited to:

Email address
Full name
Username
Phone number
Address, state, province, ZIP/postal code, city
Payment information (processed securely through our payment processors)
Account credentials
User preferences
Profile information
Cookies and Usage Data

2.2 Usage Data

We also collect information that your browser or device sends when you access our Services ("Usage Data"). This may include:

IP address
Browser type and version
Pages visited and time spent
Time and date of your visit
Device information (type, ID, operating system)
Diagnostic data
Referring websites

2.3 Location Data

With your consent, we may collect and process information about your geographic location ("Location Data"). You can enable or disable location services at any time through your device settings.

2.4 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Services and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, some portions of our Services may not function properly.

Types of cookies we use:

Essential cookies: Necessary for the operation of our Services
Preference cookies: Remember your settings and preferences
Analytics cookies: Help us understand how visitors interact with our Services
Marketing cookies: Used to deliver relevant advertisements and marketing communications

3. LAWFUL BASIS FOR PROCESSING

We process your Personal Data based on the following legal grounds:

Consent: Where you have explicitly consented to the processing
Contract: Processing necessary for the performance of a contract with you
Legitimate Interests: Processing necessary for our legitimate interests, provided those interests are not overridden by your rights
Legal Obligation: Processing necessary to comply with our legal obligations

4. HOW WE USE YOUR INFORMATION

We use your data for various purposes, including to:

Provide, maintain, and improve our Services
Process transactions and manage your account
Communicate with you, including responding to your inquiries and providing updates
Personalize your experience with our Services
Monitor and analyze usage patterns and trends
Detect, prevent, and address technical issues and security breaches
Comply with legal obligations
Enforce our Terms of Service
Provide targeted advertisements and marketing communications (with your consent where required by law)

5. DATA RETENTION

We retain your Personal Data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

The length of time we have an ongoing relationship with you
Whether there is a legal obligation to which we are subject
Whether retention is advisable considering our legal position (such as for statutes of limitations, litigation, or regulatory investigations)

Typically, we retain:

Account information: For the duration of your account plus 2 years
Transaction data: For 7 years for tax and accounting purposes
Communications: For 3 years after your last interaction with us
Usage data: In aggregated form for up to 2 years

6.1 Service Providers

We may share your information with third-party vendors, service providers, and contractors who perform services on our behalf. These parties are only provided with access to information needed to perform their functions and are prohibited from using it for other purposes.

Categories of service providers we use:

Cloud storage providers
Payment processors
Analytics providers
Customer support services
Marketing and advertising partners
Communication services

6.2 Business Transfers

If we are involved in a merger, acquisition, financing, or sale of business assets, your information may be transferred as part of that transaction.

6.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency) or to:

Comply with legal obligations
Protect and defend our rights or property
Prevent or investigate possible wrongdoing
Protect the personal safety of users or the public
Protect against legal liability

We may share your information in other contexts with your consent.

7. INTERNATIONAL DATA TRANSFERS

Your information, including Personal Data, may be transferred to and processed in countries other than the one in which you reside. These countries may have data protection laws that differ from those in your country.

If you are located outside the United States and provide information to us, we transfer and process that data in the United States and other countries where our service providers operate.

When we transfer Personal Data outside your jurisdiction, we implement appropriate safeguards, which may include:

Standard Contractual Clauses approved by relevant data protection authorities
Ensuring the recipient country has been deemed to provide adequate protection
Obtaining your explicit consent to the proposed transfer
Implementing technical and organizational measures to protect your data

8. DATA SECURITY

We implement appropriate technical and organizational measures to protect your Personal Data, including:

Encryption of sensitive information
Regular security assessments
Access controls and authentication requirements
Staff training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

9. YOUR DATA PROTECTION RIGHTS

Depending on your location, you may have the following rights regarding your Personal Data:

Right to Access: Request copies of your Personal Data
Right to Rectification: Request correction of inaccurate or incomplete information
Right to Erasure: Request deletion of your Personal Data in certain circumstances
Right to Restrict Processing: Request limitation of processing of your Personal Data
Right to Data Portability: Request transfer of your Personal Data to you or a third party
Right to Object: Object to processing of your Personal Data for certain purposes
Right to Withdraw Consent: Withdraw consent where processing is based on consent
Right to Non-discrimination: Receive equal service and pricing even if you exercise your privacy rights

California Residents' Rights

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have additional rights regarding their Personal Data, including:

The right to know what Personal Data is collected, used, shared, or sold
The right to delete Personal Data
The right to opt-out of the sale or sharing of Personal Data
The right to correct inaccurate Personal Data
The right to limit the use and disclosure of sensitive Personal Data

To exercise your rights, please contact us using the information in Section 14. We may ask for specific information to confirm your identity before processing your request.

10. CHILDREN'S PRIVACY

Our Services are not intended for children under 13 years of age ("Children"). We do not knowingly collect personally identifiable information from Children. If you are a parent or guardian and believe your child has provided us with Personal Data, please contact us, and we will take steps to remove that information from our servers.

In certain jurisdictions, the minimum age may be higher (16 in the European Economic Area under GDPR). We comply with these varied age requirements and do not knowingly collect data from underage users.

11. AUTOMATED DECISION MAKING AND PROFILING

We may use automated decision-making and/or profiling in regard to your Personal Data for certain activities, including:

Personalized product recommendations
Customized content delivery
Risk assessments for fraud prevention

You have the right not to be subject to a decision based solely on automated processing if the decision produces legal effects or similarly significantly affects you, unless:

It is necessary for entering into or performing a contract with you
It is authorized by applicable law
It is based on your explicit consent

If you wish to contest an automated decision, please contact us using the information in Section 14.

12. THIRD-PARTY SERVICES

12.1 Analytics Providers

We use third-party analytics services to monitor and analyze the use of our Services, including:

Google Analytics: Google's Privacy Policy
Google Firebase: Firebase Privacy Policy
Matomo: Matomo's Privacy Policy

12.2 Behavioral Remarketing

We use remarketing services to advertise on third-party websites after you have visited our Services:

Google Ads: You can opt out via Google Ads Settings
Facebook: You can learn more about Facebook's interest-based ads at Facebook's Ad Preferences and review their Data Policy

12.3 Links to Other Sites

Our Services may contain links to third-party websites not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We strongly encourage you to review the privacy policy of every site you visit.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we will provide additional notice, such as a prominent website notice or an email notification.

Your continued use of our Services after changes to the Privacy Policy constitutes acceptance of those changes.

14. CONTACT US

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Email: privacy@wepray.org
Website: en.wepray.org/contact
Phone: +55 19 99925-2434
Mail: WePray, Rua Joao Fructuoso Miranda Filho, 331, Hortolandia, SP, ZIP 13184-060, Brazil
Data Protection Officer: dpo@wepray.org

Complaints: If you have unresolved concerns, you have the right to complain to your local data protection authority.