Privacy policy
Short version: this site runs no tracker and no advertising. We collect the minimum the services on it need to work. The table below is the whole list.
What we collect and why
| Data | Why | Legal basis (LGPD) |
|---|---|---|
| Your e-mail, when you write to us | To answer you and execute a service you asked for | Execution of contract / legitimate interest |
| The URL you submit to the audit demo or to a purchased audit | To run the audit and deliver the report; not linked to an identity in the demo — the demo asks for no name or e-mail | Execution of contract |
| Payment data | Processed by our payment processor (Stripe) to charge you; we do not store card data | Execution of contract |
| Conversations handled by an attendant we operate for a client business | To answer customers of that business on its behalf, keep the log the client is entitled to, and produce the monthly report | Execution of the client's contract; we act on the client's behalf (operator) |
What we do not do
- No sale or sharing of data with advertisers; no analytics or tracking scripts on this site.
- No newsletter — we do not keep a mailing list.
- No research on private individuals — our research services work on public sources only.
- No bulk messaging by the attendants we operate: they answer who writes first.
Who processes data for us
The payment processor (Stripe) and the e-mail provider — each under its own contract as a processor. Payment processing may involve international transfer; the processor's own privacy policy applies to that step.
How long we keep it
E-mails: while the exchange and any contracted service last, plus the time the law requires for accounting and tax duties. Audit inputs and reports: while the contract lasts and up to 1 year after, unless deletion is requested earlier. Attendant conversations: while the client's contract runs; deleted on request at its end.
Your rights
Confirmation of processing, access, correction, anonymization, portability, deletion, information about sharing, and revocation of consent — the rights of art. 18 of the LGPD. Write to contato@oroborolabs.com and we answer. If you believe a right was violated, you may also file a complaint with the ANPD (Brazil's data protection authority).
Changes
This policy can change; the version in force is the one published here, identified by the version date above.