What we do with your document

ROXO INC, a Florida corporation trading as Roxo Apostille, is the controller of the data described here. Two offices, one company:

• ROXO INC · 12761 Westside Village Loop, Windermere, FL 34786 · +1 (407) 798-8575
• ROXO INC · Rua Rio Grande do Norte, 1435, sala 708, Savassi, Belo Horizonte, MG 30130-138 · +55 (31) 91014-0564

Only what the order needs:

• Your name, email address and WhatsApp number.
• The country and state that issued the document, and the destination country.
• The documents you send us, as scans or photographs. These are the sensitive part of everything here.
• Any other data required to process your order, such as a case number or a recipient's address, when the receiving authority asks for it.
• Payment data is entered directly with the payment provider. We never see or store your card number.

To carry out your order, and nothing else. We do not build profiles, we do not run advertising and we do not send marketing you did not ask for. If you write to us and never place an order, we keep the conversation only as long as it takes to answer you.

Apostilling a document means handing it to the authority that can stamp it. That sharing is the service, not a side effect:

• The issuing authority: the Secretary of State of the US state that issued the document, or an authorised registry in Brazil. Without this, there is no apostille.
• The payment provider, which processes the charge and never receives your documents.
• Our hosting and email providers, which store and deliver what you send.
• The provider that serves and protects this website.
• The courier, when a paper document has to travel.
• A court or authority, if the law compels us.

Not to advertisers, not to data brokers, not to anyone. There is no version of this business where selling your birth certificate makes sense.

Two different clocks, because two different rules apply:

• The scan of your document: 60 days after the order is delivered, then deleted. The 60 days exist so we can reissue or correct something that comes back refused.
• The order record — name, email, what was ordered and what was charged: seven years, which is what tax and company law require of us.
• Messages you send without ordering: deleted once the matter is closed.

This site does not use cookies. No tracking, no advertising, no analytics — nothing is written to your browser by us, and there is no consent banner because there is nothing to consent to. The provider that protects the site may set a technical cookie during an attack to tell a person from a bot; it carries no identity and no history.

Wherever you are, you can ask us for a copy of what we hold, ask us to correct it, or ask us to delete it. If you are in Brazil, the LGPD (Law 13.709/2018) gives you these rights; if you are in the European Union or the United Kingdom, the GDPR does, and adds the right to receive your data in a portable format and to object to processing. We answer within one hour and act within thirty days. Deletion has one limit: the order record we are legally required to keep for seven years.

If we change how any of this works, we change this page and update the date at the top. We do not change it quietly and we do not backdate it.

Write to the email below, or use any of the channels on the contact page. Ask for whatever you want to know: there is no form to fill in and no department to go through.

info@roxoapostille.com · Privacy