Privacy

Text of November 14, 2026. It says what Confere receives, what it keeps and who it passes data to. If this text and the Portuguese one differ, the Portuguese one prevails.

What Confere receives

• The CNPJ (company ID) that you, or your assistant, send to be checked.
• On the paid door, if you ask for the payee comparison: the payee name and document, as the bank shows them. They are used only at the moment of the comparison and are not kept. When the document is a personal tax ID (CPF), it is not looked up anywhere and is not returned.
• Technical data present in any internet access, such as the network (IP) address and the program used. It goes through Cloudflare, which hosts the service, and is used to deliver the answer and apply the usage limit.
• On the paid door, the public address of the wallet that paid and the payment authorization. This data is public on the network where the payment is made.

There is no sign-up, login, cookie or tracker. The pages load nothing from other addresses.

What is kept

• One usage record per lookup, with: the door used (free or paid), the outcome, whether a CNPJ, a website and payee data were given (yes or no), the name of the calling program and the duration. The CNPJ, the website and the payee data are not part of that record.
• One record per page opened, with the page path and, when the browser provides it, the name of the site the visit came from. It is used to count visits; it does not identify the visitor.
• These records stay on Cloudflare's systems for up to 7 days and are then deleted.
• The result of the lookup is not kept.

Who the data goes to

• BrasilAPI: receives the CNPJ looked up, to fetch the Receita Federal registry record. In the payee comparison it also receives the payee's CNPJ when it belongs to another company. Names and CPF numbers are never sent to it.
• Payment facilitator (today, api.cdp.coinbase.com): on the paid door, receives the payment authorization to verify and settle it on the network. The CNPJ, the website and the payee data do not travel with that request.
• Cloudflare: hosts the service and processes every access.

Confere does not sell data and does not build a record of who looks things up.

On the HTTP route, what you send travels in the request address, protected by HTTPS, and Confere does not log that address. On the connector for assistants, it travels in the request body.

About company data

Responses carry public company data: registration status, opening date, registered name, trade name, main activity, city and size class. Partners and full address are left out.

In the payee comparison, when the document given is another company's CNPJ, the response carries that company's registered name, main activity and registration status. The name and document you gave are not repeated in the response.

Personal tax ID (CPF) numbers are never returned: when one appears inside the name of a sole proprietor, it is removed. There is no lookup of individuals.

Your rights and contact

Brazil's data protection law (LGPD) gives you the right to know whether data about you is being processed and to ask for access, correction or deletion. Since Confere has no sign-up and does not keep what was looked up, there will rarely be anything to hand over or delete, but every request will be answered.

The service is run by Guilherme Gaiga. Contact: guilherme.gaiga@hotmail.com.

Changes

If this text changes, the date at the top changes with it.