Customer areaSign upnow

Privacy policy

Last updated: October 10, 2026

This is a translation for convenience; in case of any conflict, the Portuguese version prevails. Here we explain, in plain language, what data we collect, how we use it and how you can exercise your rights.

1Who we are and how to reach us

Desperta Energia (CNPJ 44.579.996/0001-07), headquartered at Av. Afonso Pena, 4121, sala 406, Cruzeiro, Belo Horizonte, MG, CEP 30130-008, Brazil, is the controller of the personal data processed on the despertaenergia.com website and in the customer area (app.despertaenergia.com). This policy explains what data we collect, what we use it for, who we share it with and how you can exercise your rights.

For personal data matters, write to dpo@despertaenergia.com. For other matters, talk to us on WhatsApp (21) 99084-4058 or by email at contato@despertaenergia.com, Monday to Friday, 9 am to 6 pm (Brasília time).

2What data we collect

We only collect the data needed for each step:

  • Estimate and proposal request: name, CPF or CNPJ (Brazilian tax IDs), email, mobile number, state, utility company and average electricity bill amount.
  • Sign-up and contract: registration data (such as nationality, marital status and address), the electricity bill, an identity document (RG or CNH), the details of legal representatives, for businesses, and, when the utility company requires it, the login and password for its website (see section 4).
  • Bank details, when you provide an account to receive amounts set out in the contract.
  • Support via WhatsApp and email: the messages and files you send, such as electricity bills, photos and invoices.
  • "Let me know" and help requests on the website: name, WhatsApp, email, state and what you tell us. These forms send nothing to our servers: they prepare the message you send on WhatsApp.
  • Browsing: pages visited, where the visit came from and device and browser information, collected by cookies and similar technologies according to your preferences (see section 8). We also store in your browser, for up to 90 days, the parameters of the campaign that brought you to the website and the code of the partner who referred you, to record where your proposal came from.

3How we use your electricity bill

Your electricity bill shows how much you consume and how much you pay. We use this data to:

  • calculate the estimate and the proposal;
  • register your consumer unit with the utility company, so you receive energy credits;
  • track how the credits are applied to your bill;
  • when you ask, run the bill check-up and handle requests about overbilling, complaints or compensation.

We do not use your electricity bill for other purposes without telling you.

4Access to the utility company's website

Some utility companies only make bills and consumption data available on their website. In these cases, during sign-up, we ask for the login and password you use on that website and, if there is one, the additional access key.

We use this access only to obtain your bills, track consumption and energy credits and check for billing errors. We do not change your registration with the utility company or make requests on your behalf without your authorization.

The access details are stored with restricted access and are no longer used when you leave the consortium or withdraw your authorization. You can change the password on the utility company's website at any time; if you do, let us know so we can keep tracking your bill.

5Legal basis for each use

We process your data under the legal bases of article 7 of Brazil's General Data Protection Law (LGPD):

  • Performance of a contract and preliminary steps: estimate, proposal, sign-up, registration with the utility company, billing and support.
  • Compliance with a legal or regulatory obligation: keeping tax and contract documents and information required by ANEEL and by utility companies.
  • Regular exercise of rights: keeping records for defense in legal proceedings.
  • Legitimate interest: website security, fraud prevention and improving our services, always respecting your rights.
  • Consent: analytics and marketing cookies and marketing communications. You can withdraw your consent at any time.

6Who we share data with

We only share data when it is needed to provide the service or comply with the law:

  • Utility companies: to register your consumer unit in the consortium, record the credits and make the requests you authorize.
  • Companies that help us operate, each with only the data it needs: cloud hosting and storage (such as Amazon Web Services and Netlify), electronic contract signature (ClickSign), billing (Iugu), email delivery (MailerSend), support (WhatsApp, from Meta, and Neppo) and the analytics and marketing tools you allow in the cookie settings.
  • Partners who referred you, when the proposal came from a referral, so they can follow its progress.
  • Public authorities, when required by law or a court order.

We do not sell your data.

Some of these providers may store data on servers outside Brazil. In these cases, the transfer follows what the LGPD allows (article 33), such as data protection contract clauses.

7How long we keep data and how we protect it

We keep data while you are a customer and, afterwards, for as long as the law requires or as needed for defense in any legal proceedings, such as tax and limitation periods. When data is no longer needed, it is deleted or anonymized.

We adopt technical and administrative measures to protect data, such as role-based restricted access, encrypted connections (HTTPS) and storage with cloud providers that apply access control.

8Cookies and how to change your preferences

Cookies are small files the website stores in your browser. We use three types:

  • Necessary: they make the website work, such as remembering your cookie choices and keeping forms working. Always on.
  • Analytics: they show how the website is used, so we can improve it (Google Analytics, Hotjar and Microsoft Clarity). Only with your permission.
  • Marketing: they help show more relevant ads and measure campaigns (Meta Pixel, Google Tag Manager, RD Station, ActiveCampaign and DataUnion). Only with your permission.

Google Tag Manager includes tools from both categories, including Google Analytics, so it is only loaded when you allow Analytics and Marketing.

You can change your choices at any time. You can also delete cookies in your browser settings.

9Your rights and how to exercise them

Under the LGPD (article 18), you can request:

  • confirmation that we process your data and access to it;
  • correction of incomplete, inaccurate or outdated data;
  • anonymization, blocking or deletion of unnecessary or excessive data, or data processed in breach of the law;
  • portability of your data to another provider;
  • deletion of data processed based on consent;
  • information about who we share your data with;
  • information about the possibility of not giving consent and what happens in that case;
  • withdrawal of consent.

To exercise any of these rights, write to dpo@despertaenergia.com. We may ask for information to confirm your identity. We reply within 15 days.

To stop receiving marketing communications, write to marketing@despertaenergia.com.

If you believe your rights have not been respected, you can also file a complaint with the ANPD, Brazil's data protection authority.

10Data protection officer

Data protection officer: contact by email at dpo@despertaenergia.com.

11Updates to this policy

We may update this policy to reflect changes to the website, the services or the law. The date of the last update is at the top of the page. When a change is significant, we will let you know on the website or through the contact channels you gave us.

Sign upnow