Política de Privacidade

This policy explains which data QUAEP collects at signup and on the site, what we use it for, who we share it with and how you can exercise your rights, in line with Brazil’s General Data Protection Law (LGPD, Law 13.709/2018).

1. Who the controller is

QUAEP, responsible for decisions about your data. Contact for any privacy matter: contato@quaep.com.br. [To be defined: company name, CNPJ (company registration number) and data protection officer (DPO).]

2. Which data we collect

• That you provide at signup: name, email, mobile phone, date of birth (used to confirm that you are 18 or older), type of participant (person or professional) and, if you choose, profession and professional registration (on the professional signup), city and state. There is no open field for you to write about your life: we ask only for what is necessary.
• That we record to prove your consent: what you accepted (terms, email, WhatsApp, cookies), the version of this policy, date and time, IP address and browser.
• Where you came from: link parameters (campaign, source, ad click identifiers) and the code of the person who invited you, if any.
• What you do at signup: email confirmation, shared invitations and unsubscribing.
• From your account: the password you created (we store only an encoded version, never the password itself), your profile (the “about you” text, city, state and the photo, if you upload one) and the access record we need to keep you signed in securely.
• What you write in the pioneers’ area: the answers to the “Your voice matters” questionnaire are free text. We ask you to avoid sensitive information or information about other people. They stay only in our database, are seen only by the QUAEP team and are not sent to ads or measurement tools.

We do not collect health data, and we neither ask for nor use information about your life moment for ads.

3. What we use it for and the legal basis

• Create your account, let you sign in to it and use your answers to build QUAEP with the pioneers (performance of what you asked for).
• Create and confirm your signup, and talk to you about QUAEP (performance of what you asked for and consent).
• Send news by email and WhatsApp, only if you tick each option, separately (consent).
• Understand where signups come from and measure ads (consent, through the cookie banner).
• Invitation programme: count how many people joined through you, only after they confirm their email (legitimate interest).
• Security and abuse prevention (limit on attempts per IP) and compliance with legal obligations.

4. Who we share it with (processors)

We use providers that process data on our behalf. Each receives only what is necessary:

• Google (Google Tag Manager, Google Analytics, Google Ads and Google Workspace): measuring visits and ads, only with your consent, and sending our emails.
• Meta (Pixel and Conversions API): ad measurement, only if you accept marketing cookies. We send email and mobile number encrypted (hashed), browser identifiers, IP and browser. We do not send interests, profession or any profile information.
• Hotjar: heatmaps and usage recordings, only with your consent. Form fields are hidden in the recordings.
• Amazon Web Services: hosting of the site and the database.

Some of these providers store data outside Brazil. In those cases, the transfer takes place with the safeguards provided for by the LGPD. We do not sell your data.

5. Cookies

We explain each cookie, and how to change your choice, in the Cookie Policy. You can reopen the banner at any time under “Cookie preferences” in the footer.

6. How long we keep it

For as long as your signup is active. If you unsubscribe, we stop sending communications and keep only what is needed to respect your request and prove consents. If you ask for deletion, we erase the data within 15 days. [Retention periods to be validated with legal.]

7. Your rights

You can, at any time: confirm that we process your data, access it, correct it, request anonymisation or deletion, request portability, find out who we share it with, and withdraw consent. To request deletion on your own, use the page Delete my data: we send a link to your email to confirm that the request is yours. For any other requests, write to contato@quaep.com.br. You can also complain to the National Data Protection Authority (ANPD).

8. Under 18s

For now, signup is allowed only for people aged 18 or over.

9. Changes to this policy

If this policy changes in a significant way, we will let you know by email and ask for new consent when necessary.