Privacy Policy

1. Data controller

The data controller is KIWIBIT SERVIÇOS DE TECNOLOGIA LTDA (CNPJ 68.004.918/0001-42), based in São José dos Campos — SP, Brazil. Data Protection Officer (DPO) contact: tech@kiwibit.com.br.

2. Data we collect

We only collect the data you voluntarily provide through the contact form:

• Name
• Email
• Company (optional)
• The content of the message you send

In addition, when an authenticated user from the administrative panel connects their own LinkedIn account to sync their profile photo, we may receive and process basic profile data (such as a unique identifier and photo) and store an access token encrypted in our database solely for the execution of that feature. This processing is limited to authenticated users of the administrative area and is not used as a public login mechanism.

We use PostHog Cloud in the United States region, only after your consent, for analytics, error diagnosis, and session replay. Text and inputs are masked before transmission, and this data is not used for advertising. Your decision is stored in the analytics_consent cookie for up to 180 days; you can decline or withdraw it at any time through “Privacy preferences”. We also use the functional NEXT_LOCALE cookie to remember your language preference.

3. Purpose and legal basis

We process this data to respond to your contact, carry out the requested business communication, and, where applicable, execute the user’s voluntary connection with LinkedIn for profile photo synchronization. The legal basis is your consent and pre-contractual procedures, under Article 7 of the LGPD, as well as the express consent provided through the LinkedIn authorization flow.

4. Sharing and retention

Contact form messages are forwarded to our team through an internal notification (Discord). We do not store these messages in a website database and we do not sell or share your data with third parties for marketing purposes. We retain communications only for as long as necessary to handle your request.

5. Your rights (Article 18, LGPD)

At any time, you may request:

• Confirmation that processing exists;
• Access to your data;
• Correction of incomplete, inaccurate or outdated data;
• Anonymization, blocking or deletion of unnecessary data;
• Deletion of data processed based on consent;
• Withdrawal of consent.

To exercise your rights, write to tech@kiwibit.com.br.

6. Security

As an information security company, we apply appropriate technical and organizational measures to protect data against unauthorized access, loss or destruction.

7. Changes

This policy may be updated periodically. The date of the last update is shown at the top of this page.