Privacy Policy

This Privacy Policy describes how Connexa Tecnologia (Brazilian company registration CNPJ 51.211.882/0001-75), hereinafter referred to as "Connexa", collects, uses, stores and shares your personal data, in compliance with Brazil's General Data Protection Law (LGPD — Law No. 13,709/2018).

By using our website (https://connexatech.com.br), you agree to the terms of this policy.

1. Data Controller

Company name: Connexa Tecnologia
CNPJ: 51.211.882/0001-75
Address: Rua Santa Cruz 2187, Suite 10, Vila Mariana, São Paulo — SP, 04121-002, Brazil
Privacy email: contato@connexatech.com.br

2. Data Protection Officer (DPO)

Connexa's data protection officer can be reached at contato@connexatech.com.br. Brazil's ANPD guidelines allow small businesses to have the controller exercise the DPO function.

3. Personal Data Collected

We collect the following categories of personal data:

• Identification data: full name, email, phone/WhatsApp.
• Business data: company name, company size, declared business needs.
• Technical data: anonymized IP address, language preference cookie, cookie consent cookie.

Payment data: Connexa does not store credit card data (PAN, CVV, expiration date) on its servers. Such data is encrypted directly by the payment provider responsible for the transaction.

We do not collect sensitive data as defined in Article 5, II of the LGPD (racial origin, religious beliefs, political opinions, health data, biometrics, etc.).

4. Purpose of Processing and Legal Basis

• Lead capture and commercial relationship — legal basis: consent (LGPD Art. 7, I).
• Execution of subscription terms — legal basis: contract performance (LGPD Art. 7, V).
• Security and fraud prevention — legal basis: legitimate interest (LGPD Art. 7, IX).
• Transactional communications — legal basis: contract performance (LGPD Art. 7, V) and legitimate interest (LGPD Art. 7, IX).

5. Data Retention

• Lead data: for the duration of the commercial relationship and for 5 years after its end (tax obligation — Brazilian Tax Code Art. 195).
• Checkout/subscription data: 5 years (Brazilian Tax Code Art. 195 and accounting obligations).
• Anonymized IP: ephemeral (window of minutes to hours, no further persistence).
• Language preference cookie: up to 1 year or until removed by the user.
• Cookie consent cookie: 1 year or until removed by the user.

6. Data Subject Rights (LGPD Article 18)

As a data subject, you have the following rights, which can be exercised at any time:

• Access: confirmation of the existence and access to the data processed.
• Correction: update of incomplete, inaccurate or outdated data.
• Erasure: deletion of unnecessary data or data processed in non-compliance with the LGPD.
• Portability: receipt of data in a structured format.
• Withdrawal of consent: revocation of consent at any time, without prejudice to processing already performed.
• Complaint to ANPD:right to petition Brazil's National Data Protection Authority (www.gov.br/anpd).

To exercise any of these rights, send an email to contato@connexatech.com.brwith the subject "LGPD Rights Request". Response time: 15 business days.

7. Cookies

The website uses essential cookies for operation and preference cookies to remember your selected language. We do not currently use analytics or marketing cookies. For detailed information, please refer to our Cookies Policy.

8. Changes to This Policy

This policy may be updated periodically. When significant changes occur, we will publish the new version on this page with the update date. We recommend periodic review.

9. Contact

For questions, requests or rights related to this policy, please contact us at contato@connexatech.com.br.