What we collect, why we use it and what remains public by design.
DATA PRINCIPLES
Measure the platform without exposing people.
TopBid World is built around public brands and private account controls. Analytics are aggregated, deduplicated and designed to avoid unnecessary visitor identity data.
Version 1.0 · Published October 14, 2026
00 / PRIVACY CONTACT
LGPD and GDPR contact
For data-subject requests, use the Support Center or partner@bedtecnologia.com.br and identify the account or order involved. We do not publish a named DPO in this notice; requests are routed through the operator's support channel.
01 / CONTROLLER
Controller and contact
B&D SOLUCOES EM TECNOLOGIA LTDA, CNPJ 01.468.471/0001-91, Brazil, operates TopBid World and acts as controller for processing purposes and means it determines for the platform. Independent providers remain responsible for processing they determine under their own terms.
02 / CATEGORIES
Data we process
Depending on how you use the service, this may include account name and email, company profile fields and logo, public links, support messages, authentication records, payment and order references, public wallet address and blockchain transaction data, and sharing or analytics events.
03 / PURPOSES
Why we use it
We use data to create and secure accounts, save private profiles, publish eligible profiles, verify payments, calculate positions and durations, provide dashboards and support, automatically produce public traffic and visibility counters, prevent abuse and send service notifications.
04 / BASIS
Legal bases
Depending on the activity and jurisdiction, processing may be based on performance of a requested service or contract, consent where requested, legitimate interests such as security and measurement, and compliance with legal obligations. We do not use one single basis for every purpose.
05 / COOKIES
Cookies and measurement
The online counter automatically uses a random per-tab session identifier and a heartbeat that expires after 90 seconds. Site visits, public profile views, ranking impressions and company-link clicks are also measured automatically using a first-party browser identifier for up to 30 days to deduplicate activity. These counters do not depend on a consent prompt. Browser settings, blocking and automated traffic can affect counts. Analytics event records do not store raw IP addresses; network rate limits are used to prevent abuse.
06 / PAYMENTS
Payments and authentication
Stripe receives information needed to process eligible checkout payments. Authentication can use email/password or Sign in with ChatGPT. Crypto payment data is public on BNB Smart Chain and may include the wallet address, transaction hash, asset, amount, network and confirmation details needed to verify the bid.
07 / PUBLIC
What becomes public
An eligible published company profile may show the company name, logo, description, country, links, position, bid-related public status and public visibility counts. Private account, support and credential data is not displayed on the profile. Blockchain records are public by design.
08 / RETENTION
Retention
We retain account, profile, payment, support and security records for as long as needed to operate the service, resolve disputes, prevent abuse and meet legal, accounting or provider requirements. Exact retention can vary by record type and legal duty.
09 / RIGHTS
Access, correction and deletion
Subject to applicable law, you may request access, correction, deletion, restriction, objection, portability or withdrawal of consent where consent is the basis. Use the Support Center. Deleting an account may not erase public blockchain records or records we must retain for legal or security reasons.
10 / PROCESSORS
Processors and international transfers
Payment, authentication, hosting, email, analytics and security providers may process data only as needed for their services and under their own terms. Some providers may process information in another country. We use the safeguards required by applicable law for relevant transfers.
11 / SECURITY
Security
We use server-side access controls, protected session cookies and payment verification before a bid enters the ranking. No online service can promise absolute security. Never share a password, seed phrase or private key through support.
12 / CHILDREN
Children and minors
The service is intended for companies and adults with authority to represent them. It is not directed to children. If you believe a minor provided personal data, contact Support so we can review the request under applicable law.
13 / CHANGES
Changes to this notice
We may update this notice when the service, providers or legal requirements change. The current version and date are published on this page. Material changes will be communicated through the service when required.