Privacy Policy
Last updated: July 9, 2026
Preliminary version (beta) — under legal review.
Panteo is operated by Lince XP (CNPJ 41.701.008/0001-62), the data controller.
Real privacy is one of Panteo's founding promises. This policy explains, without legalese, what we collect, why, and what your rights are (LGPD and GDPR).
1. The honest summary
We collect the minimum needed for the service to work. We do not sell personal data — ever. You can export everything and delete your account whenever you want, no red tape.
2. What we collect
At signup: email, password (stored with irreversible encryption), @username and language. If you sign in with Google: the name and email provided by Google. At import: the TV Time export file you upload and the tracking data it contains (followed shows, watched episodes, movies, ratings and lists).
3. What we discard on purpose
The TV Time file also contains sensitive data, such as access tokens and session data. Our importer ignores and discards those files by design — they are never read or stored.
4. What we use it for
Creating and maintaining your account; storing and displaying your history; sending transactional emails (account confirmation, password recovery, import confirmation). If you checked the optional box: launch news — revocable at any time.
5. Legal basis (LGPD/GDPR)
Performance of contract (your account and the import you request) and consent (optional news communications). Consent is recorded with date and time.
6. Where your data lives
Database and authentication: Supabase (AWS servers in São Paulo, Brazil). Site hosting: Vercel. Product analytics: PostHog (US servers), used in privacy mode — anonymous data, no session recording and no IP address. These providers process data on our behalf under data protection agreements. We use no advertising and no cross-site trackers.
7. Your rights
Access, correction, portability and deletion. Deleting your account (on the account page) permanently erases your profile, @username and imported data; backup copies are removed within 30 days. Data Protection Officer (DPO) and channel to exercise your rights: contato.lincexp@gmail.com.
8. Cookies
We only use essential cookies: keeping you logged in and remembering your language. No advertising cookies. Our product analytics (PostHog) runs without cookies, storing an anonymous identifier only in your browser.
9. Changes
If this policy changes in a relevant way, we'll notify you by email. The date of the last update is at the top.