Privacy policy

Who is responsible for the data

The data controller is Brutalit Serviços e Treinamento de Tecnologia LTDA, trading as Brutalit Technologies, Brazilian company registration (CNPJ) 29.967.675/0001-96. Anything about your data goes to our privacy channel: privacidade@brutalit.com.br.

What we collect

• Proposal request: name, e-mail, company, role, WhatsApp, website and your answers about the business (revenue, ticket, symptoms, timing and investment range).
• Newsletter and studies: e-mail and, for studies, name, company, role and revenue range.
• Technical data: IP address and browser information, logged by our infrastructure for security and abuse prevention.
• Preferences on your device: theme, text size and language, stored in your own browser.

Why we use it and on what legal basis

• Answering your proposal request and preparing the diagnosis: steps prior to a contract (Brazilian General Data Protection Law, LGPD, art. 7, V).
• Sending the newsletter and studies you asked for: consent (art. 7, I), which you can withdraw at any time through the unsubscribe link.
• Protecting the site against fraud, bots and attacks: legitimate interest (art. 7, IX).
• Meeting legal and regulatory obligations: art. 7, II.

We do not use your data for automated decisions that affect your rights, and we do not sell data.

Who we share it with

Data is processed by providers that run our infrastructure (cloud hosting and e-mail delivery), always under contract and only to deliver those services. It may also be shared under a court order or legal requirement.

International transfers

Part of our infrastructure may process data outside Brazil. In those cases, the transfer follows the safeguards in art. 33 of the LGPD.

How long we keep it

Proposal requests that do not become a contract are kept for up to 24 months and then deleted. Newsletter data is kept until you unsubscribe. Client data follows the contract and the law.

Your rights

At any time you can ask for: confirmation that we process your data, access, correction, anonymisation, blocking or deletion of unnecessary data, portability, information about sharing and withdrawal of consent (LGPD, art. 18). Just write to privacidade@brutalit.com.br. We reply within 15 days. You can also file a complaint with Brazil's National Data Protection Authority (ANPD).

Security

Forms with validation and protection against injection, encrypted connections across the whole site, restricted access to data and access logs. No system is invulnerable, so we treat any incident as a priority and notify those affected, as the law requires.

Cookies

How we use cookies and browser storage is described in our cookie policy.

Changes to this policy

When this policy changes, the date below the title changes with it. Relevant changes are announced on the site.