Privacy Policy

1. Who processes your data

NLConsulting is the controller of the personal data processed on this website. Our data protection officer (DPO) is Rafael Fernandes, who serves data subjects and Brazil's National Data Protection Authority at rafael.fernandes@nlconsulting.com.br or through the form at the end of this page.

2. What data we process

• Browsing, only if you accept: pages opened, clicks on links and buttons, search terms, form submissions (without what you typed), IP address, approximate city and state, browser, operating system, device type and referring page.
• Security, always: sign-ins and sign-in attempts to the Client Area (email entered, date, IP and approximate location) and the questions asked to Aura, our AI assistant, with IP and approximate location.
• What you send us: name, email, company and message from the contact form, and the data in requests made under the LGPD.
• Clients: name, email, company and profile of the account used in the Client Area and on the platforms.

We do not ask for sensitive data. Please avoid writing third parties' personal data in questions to Aura.

3. Why we use it and on what legal basis

4. Who we share it with

We do not sell personal data. We use providers that process data on our behalf, under contract: Vercel (website hosting), Supabase (database), Anthropic (processes questions to Aura to generate answers) and Microsoft (email). Some of these services are located outside Brazil, and international transfers follow art. 33 of the LGPD, with contractual clauses and appropriate security measures.

5. How long we keep it

• Browsing, sign-ins and Aura questions: up to 180 days. After 30 days, the IP is truncated and the browser identifier is deleted.
• Record of your privacy choices: as long as needed to prove consent. The IP in that record is deleted after 30 days.
• Contacts, contracts and LGPD requests: as long as needed for the service and legal deadlines.

6. How we protect it

Encrypted connections, access to records restricted to authorized NLConsulting staff, automatic lockout after failed password attempts and logging of who consults the audit trail.

7. Your rights

Under art. 18 of the LGPD, you may request: confirmation that we process your data, access, correction, anonymization, blocking or deletion of unnecessary data, portability, information about sharing, withdrawal of consent and objection to processing based on legitimate interest. We reply within 15 days. You may also file a complaint with Brazil's National Data Protection Authority (ANPD).

Make a request

Name

Email

What you want to request Confirm whether you process my data Access my data Correct my data Delete my data Anonymize or block data Data portability Know who they were shared with Withdraw consent Object to processing Other privacy matter

Details (optional)

Site

For your security, we may ask you to confirm your identity before fulfilling the request.

Send request