Skip to main content

Understand data retention rules in Brazil (LGPD)

Learn about data retention requirements under LGPD for AstroPay accounts in Brazil.

L
Written by Luma Senna
Updated over 3 weeks ago

Under Brazil's LGPD (Lei Geral de Proteção de Dados), you have the right to request data deletion. However, this right is not absolute. AstroPay is required by BACEN and CMN regulations to retain certain data.

Why data is retained

  • Anti-money laundering (AML) compliance.

  • Regulatory supervision by BACEN and CMN.

  • Legal defense and court compliance.

  • Data retention periods range from 5 to 10 years depending on the data type.

How your data is handled

  • Data is stored securely with restricted access.

  • Processing follows LGPD principles of necessity and purpose.

  • Data is only used for the legally required purposes.

Your options

  • Suspend your account: Temporarily restrict access while retaining the option to reactivate.

  • Close your account: Permanently close your account. Data is retained only for the legally required period.

After the mandatory retention period, your data is securely deleted.

Did this answer your question?