Privacy Policy

This policy describes how we collect, use, store, share and protect your data personal This appropriation is intended to cover expenditure related to the provision of information and communication services to the Commission and the Member States., o Civil Marco da Internet (Law 12.965/2014), the General Protection Regulation European Data (GDPR — EU 2016/679), a CCPA/CPR California, the EU AI Act (EU 2024/1689) and the other applicable rules.

2. Driver identification

O controller the personal data processed on this site, in accordance with Article 5, VI, of LGPD, is:

Mauricio Yokoyama Issei

• Acting: professional portfolio, technical content, consulting proposals, contact forms and interactive tools
• CPF/CNPJ: [PLACEHOLDER — inform masked CPF or CNPJ if MEI]
• Address: [PLACEHOLDER — full address]
• E-mail: mauricio@issei.com.br

To speak with the in charge/DPO, see Section 14.

3. Definitions

• Personal data: any information related to the natural person identified or identifiable (LGPD, Art. 5, I).
• Sensitive data: personal data on racial origin, religious conviction, opinion policy, health, sexual life, genetic or biometric data (LGPD, art. 5, II). We don't handle data. Sensitive on this site.
• Holder: the natural person to whom the personal data refer.
• Treatment: any operation performed with personal data (collection, use, access, storage, disposal etc.).
• Controller: who are responsible for decisions on treatment.
• Operator: who handles data on behalf of the controller (e.g. AWS, Google).
• Anonymisation: process that makes the data non-associable to the determined individual.
• Charged (DPO): person indicated to act as a channel between holders, controllers and ANPD.

4. Data we collect

5. Legal basis by purpose

Each treatment operation is based on a specific legal basis (LGPD, Art. 7 and 11; GDPR, Art. 6):

6. Sharing with third parties

We don't sell personal data. We share only with operators contractually linked exclusively to the purposes described:

Eventually, we can also share data with public authorities by court order, administrative request supported by law or to defend rights in lawsuits.

7. International data transfer

Our main operators (AWS, Google, Meta, GitHub) process data on servers located in United States and in other countries. Transfers take place on the basis of guarantees provided for in art. LGPD 33 and Resolution CD/ANPD 19/2024:

• Contractual standard clauses (SCCs) signed with each operator.
• EU-U.S. Data Privacy Framework for certified operators.
• Specific contractual guarantees equivalent to the LGPD level of protection.

8. How long have we kept your data?

After the deadline, the data are anonymised or disposed of, except in case legal that authorize the guard (art. 16 of the LGPD).

9. Your rights as holder

You are entitled to (LGPD art. 18; GDPR art. 15-22):

• Confirmation the existence of treatment
• Access to your data
• Correction incomplete, inaccurate or outdated data
• Anonymisation, blocking or elimination Unneeded or processed data on non-compliance
• Portability to another supplier
• Elimination data processed with your consent
• Information about who we share your data with
• Information on the possibility of not consenting and its consequences
• Repeal consent
• Opposition treatment based on legitimate interest
• Human Review automated decisions affecting your interests

We attend requests in up to 15 days (LGPD) or 30 days (GDPR), free of charge.

For California residents (CCPA/CPRA)

You have the additional right to know which categories of personal data were collected, sold or shared, and the right to opt for do not sell or share data Personal. Although We don't sell your data, we automatically respect the signal Global Privacy Control (GPC) and we offer full opt-out via cookie banner.

10. Cookies and similar technologies

We use cookies in four categories:

• Strictly necessary: essential to navigation and safety. Always active.
• Analysis: Aggregated metrics via Google Analytics 4. Opt-in.
• Marketing: remarketing via Meta Pixel and Google Ads. Opt-in.
• Customization: a reminder of preferences. Opt-in.

The consent banner appears on your first visit, according to the Cookie Guide from ANPD. You can review your choices at any time by clicking on the icon in the corner bottom of the screen. The full nominal list is in cookies. html.

11. Artificial intelligence and automated decisions

Some public demonstrations (e.g.: Knowledge OS) may include conversational interfaces based on language models (LLMs). In accordance with EU AI Act (EU Regulation) 2024/1689) and the positioning of the DPRK on generative AI:

• Content generated by AI is identified as such to the user.
• We don't train. AI models with your personal data without explicit consent and specific.
• Decisions with relevant effect (e.g. approval of a lead) go through review human before any communication to the holder (LGPD, art. 20).
• You can request a human review of any automated decision via DPO.

12. Information security

We adopt technical and administrative measures proportional to risk (LGPD art. 46-49; Decree 8.771/2016):

Technical measures

• Encrypted connection with TLS 1.3
• Encryption at-rest in storage buckets
• Principle of lower privilege (IAM, MFA)
• Federated authentication (OIDC) for IC/CD — no hardcoded credentials
• Safety Heads (HSTS, CSP, X-Frame-Options)

Organisational measures

• Internal data protection policy
• NDA with providers
• Training and periodic review

In case of an incident

According to CD/ANPD Resolution 15/2024, we will communicate to ANPD and the holders affected in reasonable time, containing: description of the incident, data involved, measures adopted and contacts for additional information.

13. Children and adolescents

The site is not directed to under 18 years of age. We do not intentionally collect data personal of children or adolescents. If we identify such collection, the data will be deleted. Any treatment will respect the best interest and require consent specific to at least one parent or legal guardian (LGPD art. 14; Law 14.708/2023).

14. Responsible (DPO) and contact channels

To exercise your rights, clarify doubts or report incidents, please contact our In charge of Data Protection:

• E-mail: mauricio@issei.com.br
• Postal address: [PLACEHOLDER — full address with zip code]
• Response SLA: up to 15 business days

15. Claims to the competent authority

If you understand there's been a violation of your rights, you can claim National Data Protection (ANPD): www.gov.br/anpd.

For residents of the European Union, the data protection authority of your country (list no. EDPB). Stop residents of the United Kingdom, ICO. For residents of California, to California Attorney General.

16. Changes and forum

Changes in this policy

This policy is reversed. Changes materials (to extend collection, purpose or share) reactivate the consent banner and are notified at the top of the page by at least 30 days.

Revision history

• v2.0 (08/05/2026): full rewrite with Dark Tech theme, inclusion of IA sections Act, CCPA/GPC, international transfer ANPD 19/2024, Consent Mode v2 and unified PDO.
• v1.0 (fev/2026): initial version focused on basic Meta/LGPD compliance.

Applicable law and forum

This policy is governed by Brazilian law. It is elected the forum of County of São Paulo, SP in order to resolve controversies, the consumer's right to opt for the forum of his home (CDC, art. 101, I).

This policy was written in clear and objective language. In case of doubt about any term, consult Section 3 or talk to DPO.