AcaiSafe Privacy Policy
Last updated: October 30, 2026.
AcaiSafe is a Chrome extension and a website (acaisafe.com) that warn you before you fall for scams online. It is provided by CREATORRAI TECNOLOGIA LTDA, a Brazilian company, CNPJ 55.678.024/0001-96, Av. Paulista, 1106, Sala 01, Andar 16, Bela Vista, São Paulo/SP, 01310-914, Brazil ("Acai", "we").
In short: your browsing history does not go to Acai. Only what you choose to check does. Below is what happens to each piece of data, with no fine print.
1. What stays on your computer
The extension checks the sites you open on your own computer: addresses that imitate brands, the list of dangerous sites, payment recipients and disguised downloads. The addresses of the sites you visit are not sent to Acai.
Extra protection (Plus) is off until you turn it on, and Chrome then asks you for two more permissions: "Read and change all your data on all websites" and "Manage your downloads". With them, the extension reads the text of the pages you open and the names of the files you download, on your computer only, to warn about card or ID numbers typed into a suspicious site, a Pix code on a new site, a store or listing with scam signs, and a program disguised as a document. That text and those file names are not sent to Acai or anyone else. The only things that leave are the site address and a company number found on the page, sent straight to the public sources below. You can turn it off by removing these permissions in Chrome's extension settings.
To learn a site's age or a store's company registration, your computer asks public sources directly: domain registries (RDAP) and, in Brazil, BrasilAPI or minhareceita.org. Those sources receive the site address or company number, and your IP address, just as when you open them yourself. Acai does not receive these lookups.
The "Your Acai" dashboard (the counts of what was avoided) is stored only on your computer.
2. What leaves your computer, and when
| When | What is sent | To whom | How long |
|---|---|---|---|
| You click "Is this a scam?" on a message or page | The text you chose or the page's visible text, after we remove ID numbers, card numbers, phone numbers, emails and payment keys; for a page, also the site address | Acai (Cloudflare) and the AI providers: OpenRouter and TypeSafe | Acai does not keep the text. The AI providers are used in their zero-data-retention mode, except where this policy says otherwise |
| You use Acai (any call to our server) | Your IP address, date and time | Acai (Cloudflare) | Access logs: 6 months, encrypted, because Brazilian law requires it (Marco Civil da Internet, art. 15). Released only under a court order. Usage-limit counters: up to 32 days, never the plain IP (per network in scrambled form; per device by its random code) |
| At install | A random device code (we keep only a scrambled version) | Acai | Until you uninstall or ask us to delete it |
| You subscribe to Plus | Email; at checkout, name, tax ID where required, phone and payment details | Payment is handled by AbacatePay (in Brazil) or Paddle (outside Brazil). Acai never receives your card number; it keeps your email (encrypted), plan, dates and payments. Outside Brazil, if you start a purchase and don't finish it, Paddle may email you a reminder about that purchase | While the account exists, and what tax law requires afterwards |
| You use Family mode | The guardian's email and a periodic signal that Acai is on | Acai | While Family mode is on |
| We send you an email (code, receipt, alert) | Your email and the message | Resend | Under Resend's policy |
We do not sell data. We do not use your data for advertising. There are no ad trackers on the site or in the extension.
3. Legal bases
Under Brazil's LGPD (art. 7) and, where it applies, the EU and UK GDPR (art. 6):
- Contract: providing the service you asked for: checks, the subscription, Family mode, account emails.
- Legal obligation: access logs (Marco Civil, art. 15) and tax records.
- Legitimate interest: keeping the service secure and preventing fraud and abuse (usage limits), always with the minimum data.
4. Children
Family mode is set up by a parent or guardian. Acai creates no accounts for children, does not collect their names or history, and the filters run on the computer. The guardian gives consent when turning Family mode on.
5. International transfers
Cloudflare, OpenRouter, TypeSafe, Resend and Paddle process data outside your country, mainly in the United States, and Acai is based in Brazil. We make these transfers under LGPD art. 33 and, where the GDPR applies, with appropriate safeguards such as standard contractual clauses, and only with the minimum data described above.
6. Security
Data is encrypted in transit, and the sensitive data is encrypted at rest. Codes are stored in scrambled form, access is restricted, and every release gets a security review. No system is 100% secure. If an incident creates a relevant risk, we will notify you and the authorities.
7. Your rights
You can ask for confirmation, access, correction, portability, information about sharing, withdrawal of consent, objection and deletion.
- To delete your account, use acaisafe.com/excluir-conta. The account, devices and subscription are deleted, and only what the law requires is kept.
- For anything else, contact our data protection officer (the LGPD's encarregado, art. 41), which is CREATORRAI TECNOLOGIA LTDA itself: privacy@acaisafe.com. We answer within 15 days.
You can also complain to Brazil's data protection authority (ANPD) or to your local authority.
8. Changes
If this policy changes in a meaningful way, we will say so on the site and, for account holders, by email, before it takes effect.
9. Contact
privacy@acaisafe.com · help@acaisafe.com · CREATORRAI TECNOLOGIA LTDA, CNPJ 55.678.024/0001-96. The Portuguese version prevails for consumers in Brazil.