Data processing agreement
How marketapi processes your sellers' and buyers' personal data on your behalf.
Updated on October 19, 2026
1. Parties
On one side, webtrigger, registered in Brazil under CNPJ 30.947.185/0001-07, which provides marketapi. On the other, the customer who accepted the Terms of use.
2. Purpose
This agreement complements the Terms of use. It applies whenever marketapi processes personal data on the customer's behalf to provide the service.
3. Roles
The customer is the controller, or acts on behalf of the sellers who are the controllers. marketapi is the processor.
4. Instructions
marketapi processes data only to follow the customer's instructions. The instructions are the API calls, the account settings and this agreement.
5. Confidentiality
Everyone at marketapi who processes the data is bound by confidentiality.
6. Security
marketapi keeps the measures described on the Security and LGPD page, such as encrypted tokens, a log of every read of buyer data and isolation per account.
7. Subprocessors
marketapi uses login, payment, hosting, database and storage suppliers. We notify the customer before adding a new subprocessor that handles seller or buyer personal data.
8. Incidents
If a security incident affects personal data, marketapi notifies the customer without delay, with what they need to meet the ANPD deadlines.
9. Data subject rights
marketapi helps the customer answer data subject requests, such as access and deletion.
10. End of the contract
When the contract ends, marketapi deletes the personal data processed on the customer's behalf, except what the law requires us to keep.
11. Proof of compliance
marketapi provides the information the customer needs to prove LGPD compliance.
12. Contact
Questions about this agreement: contato@marketapi.shop.