Privacy | ALIS LABS

1. Introduction

ALIS LABS ("we", "us", "our") is committed to protecting your privacy and ensuring that your personal data is handled in accordance with the Brazilian General Data Protection Law (LGPD - Law No. 13.709/2018) and other applicable legislation. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you interact with us through our website, contact forms, or our artificial intelligence consulting services.

2. Data Controller

ALIS LABS is the controller of your personal data, as defined by the LGPD. This means we are responsible for determining how your data will be processed and for ensuring its adequate protection. For any privacy-related questions or requests, you may contact us through the channels available on our Contact page.

3. Personal Data We Collect

We collect the following types of personal data: • Identification Data: name and company (optional), provided in the contact form. • Contact Data: email address and, if you write to us through other channels, the details you provide. • Project Data: information about your AI challenge or need, business context, technical requirements. • Browsing Data: IP address, browser type, pages visited, time spent, referrer (collected automatically through cookies and similar technologies). • Communication Data: messages, emails, and records of interactions with our team.

4. Legal Bases for Processing

We process your personal data based on the following legal bases provided by the LGPD: • Consent: when you fill out our contact forms or accept our cookies. • Contract Performance: when necessary for the provision of our consulting services. • Legitimate Interests: to improve our services, ensure website security, and conduct anonymous statistical analysis. • Legal Obligation: when required by law or competent authority.

5. Purposes of Processing

We use your personal data for the following purposes: • Responding to your contact requests, questions, and commercial proposals. • Preparing and sending personalized service proposals. • Providing contracted consulting services. • Sending administrative communications and project updates. • Improving website browsing experience and functionality. • Conducting anonymous statistical analysis to enhance services. • Complying with legal, tax, and regulatory obligations. • Preventing fraud and ensuring information security.

6. Data Sharing

ALIS LABS does not sell your personal data. We may share your information only in the following situations: • Service Providers: with vendors who assist us in operating the website and providing services (e.g., hosting, email, analytics), always under contractual confidentiality obligations. • Legal Obligations: when required by law, court order, or competent authority. • Rights Protection: to protect our rights, property, or safety, our users or the public. We do not transfer your data to foreign countries, except when necessary for the operation of essential services (e.g., cloud infrastructure), always ensuring an adequate level of protection as required by the LGPD.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected: • Contact and project data: maintained during the business relationship and for up to 5 years after the last contact, for potential future opportunities and legal compliance. • Browsing data: retained for up to 12 months for statistical analysis purposes. • Contractual data: retained for the applicable legal limitation period (generally 5 to 10 years). After the retention period ends, data is securely deleted or anonymized.

8. Your Rights (LGPD)

According to the LGPD, you have the following rights regarding your personal data: • Confirmation: confirm the existence of processing of your data. • Access: access the personal data we hold about you. • Correction: request correction of incomplete, inaccurate, or outdated data. • Anonymization, blocking, or deletion: of unnecessary, excessive, or non-compliant data. • Portability: request the portability of data to another service provider. • Deletion: request deletion of data processed based on consent. • Information: be informed about entities with which your data is shared. • Revocation: revoke consent at any time. • Opposition: oppose processing when based on legitimate interest. To exercise any of these rights, contact us through the Contact page. We will respond to your request within 15 business days.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including: • Data encryption in transit (HTTPS/TLS). • Access control restricted to authorized employees. • Continuous security monitoring. • Regular backups and recovery procedures. • Staff training in data protection. • Periodic review of security policies and procedures. While we strive to protect your data, no transmission or storage method is 100% secure. In the event of a security incident that may affect your rights, we will notify you and the National Data Protection Authority (ANPD) as required by law.

10. Cookies and Similar Technologies

We use cookies and similar technologies to improve your experience on our website. For detailed information about which cookies we use, their purposes, and how to manage them, please refer to our Cookies Policy.

11. Links to Third-Party Sites

Our website may contain links to third-party websites. This Privacy Policy applies only to our website. We recommend that you review the privacy policies of any third-party website you visit, as we have no control over their privacy practices.

12. Minors

Our services are aimed at businesses and professionals. We do not intentionally collect personal data from individuals under 18 years of age. If we become aware that we have collected data from a minor, we will take steps to delete it immediately.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technologies, or legal requirements. The date of the last update will always be indicated at the top of this page. We recommend that you review this policy regularly. Significant changes will be communicated through a prominent notice on our website.

14. Contact and Data Protection Officer (DPO)

For any questions, requests, or complaints related to this Privacy Policy or the processing of your personal data, please contact us: • Through the form on the Contact page • Email: available on the Contact page You also have the right to file a complaint with the National Data Protection Authority (ANPD) if you believe your rights have not been addressed.