Privacy Policy

1. Who the controller is

The data controller is Kefas Labs LTDA, responsible for deciding how and why your personal data is processed. The identification details and the contact channel for the Data Protection Officer are in the box above.

2. What data we collect

We do not ask for registration or collect your name, tax ID or payment data on this site. The data processed is limited to:

• Browsing data: pages visited, time spent, device type, browser and IP address (anonymized), collected by analytics cookies when you consent.
• Data you send us voluntarily: if you write to us by email, we process the information you choose to share (such as your name and the content of the message) solely to respond to your contact.

3. What we use the data for

We use the data for the following purposes:

• Operating, maintaining and protecting how the site works;
• Understanding how the site is used and improving the experience and content (audience analysis);
• Responding to messages and requests you send us.

4. Legal basis

The processing of browsing data through analytics cookies relies on your consent (art. 7, I, of the LGPD), given through the cookie banner and revocable at any time. The processing of messages you send relies on the legitimate interest of responding to your contact (art. 7, IX). Cookies strictly necessary for the site to work do not require consent.

5. Cookies

We use essential cookies (to remember preferences such as theme and language) and analytics cookies (Google Analytics), the latter only with your consent. You can accept, refuse or adjust the categories through the cookie banner and review your choice whenever you like. The details are in our Cookie Policy.

6. Sharing with third parties

We do not sell your data. We may share it with providers that make the site possible, always to the extent necessary:

• Google (Google Analytics) — audience measurement, with IP anonymization;
• Hosting and infrastructure provider (Vercel) — technical delivery of the pages;
• Public authorities, where there is a legal obligation or a court order.

7. International data transfers

Some of these providers (such as Google and Vercel) may process data on servers outside Brazil. In these cases, the processing takes place in countries or under mechanisms that ensure an adequate level of protection, in accordance with the LGPD.

8. How long we keep it

Analytics data is retained for the period configured in the measurement tool and for as long as it is useful for the purposes above. Contact messages are kept for as long as needed to respond and to meet any legal obligations. After that, the data is deleted or anonymized.

9. Security

We adopt reasonable technical and organizational measures to protect the data against unauthorized access, loss or alteration. No system is entirely immune to risk, but we work to reduce it continuously.

10. Your rights

The LGPD grants you, as the data subject, among others, the following rights:

• Confirm that processing exists and access your data;
• Correct incomplete, inaccurate or outdated data;
• Request the anonymization, blocking or deletion of unnecessary data or data processed in non-compliance;
• Request the portability of your data to another provider;
• Revoke consent and obtain information about whom your data has been shared with.

11. How to exercise your rights

To exercise any of these rights, write to the Data Protection Officer at the email listed in the box above. We may request information to confirm your identity before fulfilling the request.

12. Children and adolescents

This site is not directed at minors, and we do not intentionally collect data from children and adolescents. If we identify anything of the sort, the data will be deleted.

13. Changes to this policy

We may update this Privacy Policy to reflect legal changes or changes in how the site works. The current version will always be on this page, with the date of the last update at the top.

14. Contact

Questions about this policy or about the processing of your data can be sent to the Data Protection Officer at the email provided in the box above.