Privacy Policy – Bravonix
Last updated: January 20, 2026
We, Bravonix, a brand of LGPDNOW Tratamento e Hospedagem de Dados LTDA, registered under Brazilian Corporate Taxpayer ID (CNPJ) No. 35.101.516/0001-07, headquartered at Avenida Engenheiro Luiz Carlos Berrini, No. 1140, Suite 72, Cidade Monções, São Paulo, State of São Paulo, ZIP Code 04571-930, Brazil, respect your privacy and protect your personal data responsibly and transparently.
This Privacy Policy clearly explains:
- what data we collect;
- how we use and protect this data;
- with whom we may share it;
- what your rights are.
Terms You Need to Know
To make this Policy easier to understand, below are the main terms used throughout the document:
Personal data: information that identifies you, such as your name, Brazilian Individual Taxpayer ID (CPF), email address, and other information.
Sensitive personal data: data requiring special protection because it concerns intimate aspects of a person’s life and may result in discrimination or greater risks, such as:
- racial or ethnic origin;
- religious beliefs;
- political opinions;
- membership in a trade union or religious, philosophical, or political organization;
- data concerning health or sexual life;
- genetic or biometric data.
Data subject: an identified or identifiable natural person to whom the processed personal data relates.
Data processing: any operation performed on personal data, such as collection, use, access, storage, sharing, analysis, or deletion.
Data Protection Officer: the person appointed by the company to oversee personal data protection. The Data Protection Officer acts as a liaison between the data subject, the company, and the Brazilian Data Protection Authority.
Anonymized data: data modified using techniques that make it impossible to identify the individual at a later stage.
Pseudonymization: a technique that makes identifying an individual more difficult but does not completely prevent identification.
Controller: a natural person or legal entity responsible for making decisions regarding how personal data is processed.
Processor: a natural person or legal entity that processes personal data according to the Controller’s instructions.
Consent: a free, informed, and unambiguous authorization given by the data subject for the processing of personal data.
Information security: a set of practices, policies, and technical measures designed to protect the integrity, confidentiality, and availability of data and systems.
LGPD: the Brazilian General Data Protection Law — Federal Law No. 13,709/2018 — which establishes the rules governing the processing of personal data in Brazil.
ANPD: the Brazilian Data Protection Authority, the public authority responsible for regulating and enforcing the LGPD.
Who This Policy Applies To
This Privacy Policy applies to anyone whose personal data is processed by us in any way, including:
- users of our websites and platforms;
- clients and prospective clients;
- business partners and suppliers;
- service providers;
- legal representatives of contracting or contracted companies;
- candidates participating in recruitment processes;
- employees and other staff members.
What Data We Collect and How We Use It
We collect personal data only when necessary and in accordance with the LGPD.
If we change the way we use your personal data, you will be informed clearly and transparently.
The main personal data processing activities are listed below:
| Purpose | Legal basis | Data processed | Categories of data subjects |
|---|---|---|---|
| Employee management | Performance of a contract | Name, CPF, identity document number (RG), email address, address, telephone number, banking information, health information, professional and contractual information, professional profile, educational background, and certificates | Employees |
| Recruitment and hiring | Procedures prior to entering into a contract | Name, CPF, email address, telephone number, address, professional information, gender, educational background, employment history, compensation, and benefits | Candidates |
| Contract management | Performance of a contract | Name, RG, CPF, marital status, address, telephone number, and signature of the legal representative | Legal representatives |
| Commercial proposals | Procedures prior to entering into a contract and performance of a contract | Name, job title, telephone number, and corporate email address | Business representatives |
| Newsletters and informational materials | Consent | Name, email address, job title, and telephone number | Users, representatives, and business partners |
| Registration on platforms | Performance of a contract | Name and email address | Representatives and employees |
| Registration and identification of service providers and representatives of service provider companies | Performance of a contract | Name, job title, and email address | Representatives and employees |
| Project management | Performance of a contract | Name, job title, and email address | Representatives and employees |
Use of Cookies
Cookies are small files that store your preferences to improve your browsing experience.
We use three types of cookies:
- Necessary cookies: ensure that the website functions properly, including access to secure areas;
- Analytics cookies: help us anonymously analyze how the website is used, such as cookies used by Google Analytics;
- Marketing cookies: help us display relevant advertisements and content, such as cookies used by RD Station.
When accessing our website, you may choose which cookies you wish to allow using the cookie preferences tool located in the lower-left corner of the screen.
You may also delete cookies directly through your browser settings. Please refer to the following instructions:
- Manage cookies in Microsoft Edge
- Delete cookies and website data in Mozilla Firefox
- Manage cookies in Google Chrome
- Manage cookies in Safari
- Manage protections and cookies in Brave
Use of Artificial Intelligence
Bravonix uses and provides its clients with solutions that employ artificial intelligence — AI — to support their activities and continuously enhance, develop, and improve its products and services.
To ensure that AI is used responsibly, ethically, and in compliance with applicable laws, the use of AI resources, solutions, and tools will follow these guidelines:
- at every stage and in all circumstances, AI use will be guided by the principles of purpose limitation, necessity, transparency, security, and non-discrimination;
- the contracting party will be informed in advance and provided with clear and appropriate information about the features, characteristics, and potential impacts of the solution. When applicable, the contracting party will be responsible for expressly choosing whether to contract and use it;
- AI use will be subject to periodic risk assessments and to governance and human oversight mechanisms involving internal governance, ethics, information security, and privacy practices, applying privacy by design and by default to products and services;
- AI use will be assessed and approved in advance by the Data and Artificial Intelligence Committee, in accordance with our Artificial Intelligence Use Policy.
Who We May Share Your Data With
Your personal data may be shared with third parties, always subject to appropriate controls and security measures.
Your data may be shared with:
- service providers and technology partners: including technology, security, and support companies;
- organizations that contract our platforms and products: when you use our services on behalf of a company;
- public authorities: when required by law, court order, or an order issued by a competent authority.
We ensure that all third parties follow strict rules designed to protect your personal data.
How Long We Retain Your Data
We retain your personal data for as long as necessary to fulfill the purposes described in this Policy. The retention period may vary according to the purpose of the processing or applicable legal requirements.
Your personal data will be deleted when:
- the purpose of the processing has been fulfilled;
- you withdraw your consent, when applicable;
- deletion is required by law, court order, or an order issued by a competent authority.
Your Rights as a Data Subject
You may, at any time:
- confirm whether your personal data is being processed;
- access your personal data;
- correct inaccurate or outdated data;
- request the anonymization, blocking, or deletion of unnecessary or excessive data;
- request the portability of your personal data;
- obtain information about the public and private entities with which your personal data has been shared;
- refuse to provide consent and receive information about the consequences of that refusal;
- withdraw your consent;
- request the deletion of personal data processed on the basis of your consent.
These requests may be submitted free of charge through our Data Subject Portal.
To protect your security, we use authentication mechanisms and technical measures designed to safeguard the integrity and confidentiality of personal data and prevent unauthorized access, data breaches, leaks, or theft.
Data Protection Officer
If you have any questions, complaints, or wish to report an incident, please contact our Data Protection Officer:
Name: Sidnei Yokoyama
Email: dpo@lgpdnow.com.br
To exercise your rights, please visit our Data Subject Portal.
Updates to This Policy
This Policy is reviewed annually and may be updated at any time.
If any material changes are made, you will be clearly informed. The most recent version will always be available on our website.