← Back

Privacy Policy

Last updated: May 2026

1. Who we are

Khelp is a management platform for non-profit organizations. This policy describes how we process the personal data collected through our platform and by the organizations that use it.

Data controller (LGPD): K F DO ESPIRITO SANTO, CNPJ 68.276.397/0001-82, with registered office at Av. Alexandre Soares, 87, Anexo 03, Centro, Taboleiro Grande/RN, CEP 59840-000, Brazil.

2. Data we collect

We collect the following data when you interact with the platform:

  • Full name, email, CPF/CNPJ (taxpayer ID) and phone number (in registrations and donations)
  • Payment data processed by PCI-DSS certified processors (we do not store full card numbers)
  • IP address, device and browser, for security purposes
  • Interaction history (donations, messages, volunteering)

3. Purpose of processing

We use your data to:

  • Process donations and issue receipts
  • Communicate with you about your contributions and about the chosen NGO
  • Ensure the security of the platform (fraud prevention)
  • Comply with legal and tax obligations

4. Legal basis (LGPD)

Processing is carried out on the basis of your consent (art. 7, I), the performance of a contract (art. 7, V) and compliance with a legal obligation (art. 7, II).

5. Sharing

We share data only with: (a) the organization receiving the donation; (b) the payment processor it uses (varies by country and payment method); (c) infrastructure providers (Supabase, Vercel, Resend); (d) authorities when legally required. We never sell data.

6. Your rights (art. 18 LGPD)

You may, at any time:

  • Confirm the existence of processing of your data
  • Access, correct or request the deletion of your data
  • Request portability or anonymization
  • Withdraw consent

To exercise any of these rights, contact us by email atprivacidade@khelp.com.br.

7. Retention

We keep your data for as long as necessary for the purposes above and to comply with legal obligations (a minimum of 5 years for tax data).

8. Security

We adopt technical and administrative measures to protect your data: encryption in transit (HTTPS), multi-factor authentication, access monitoring and auditing.

Visit our Trust Center →

9. Data Protection Officer (DPO)

Contact of the officer in charge of data processing:dpo@khelp.com.br.

10. Changes

This policy may be updated. The current version will always be available on this page, with the date of the latest revision at the top.