Privacy Policy

1. Who we are

Robozão Max ([corporate name and tax ID to be filled in]) is responsible for processing personal data collected through this website and app, acting as data controller, under Brazilian Law No. 13,709/2018 (General Personal Data Protection Law — LGPD).

2. What data we collect

We only collect the data necessary to operate the service:

• Sign-up: name, email, and password (stored hashed, never in plain text).
• Phone number, when provided at sign-up or on the payment screen.
• Tax ID (CPF) and phone number for billing: when generating a Pix charge, we collect the tax ID and phone number to process the payment with our payment provider.
• Technical security data: a hash of your IP address and browser (user agent) — never the plain-text IP — used to prevent fraud, abuse, and brute-force login attacks.
• Telegram (chat ID and username), only if you choose to link your account to receive notifications.
• Referral (affiliate) code: if you reached us through a referral link, we store the affiliate code to correctly credit whoever referred you.
• Usage and audit logs: relevant administrative and security actions (e.g., password changes, access grants) are logged for security and compliance purposes.

We do not collect sensitive data (health, racial origin, sexual orientation, religious or political beliefs, etc.) nor do we use advertising cookies. On our public pages, and only with your consent, we use Google Analytics for visit statistics with anonymized IP addresses — see the Cookie Policy for details.

3. What we use your data for

• Create and maintain your account, authenticate your login, and keep your session active.
• Process the payment of your subscription via Pix.
• Send transactional emails: sign-up confirmation, password reset, and notices about your subscription.
• Send notifications via Telegram, if you link your account.
• Prevent fraud, abuse, and unauthorized access.
• Calculate aggregate metrics for our affiliate program (how many sign-ups/subscriptions came from each referral).
• Comply with legal and tax obligations related to charges made.

We do not use your personal data to train artificial intelligence models, nor do we sell it to third parties.

4. Who we share data with

We only share data with service providers that are strictly necessary to operate Robozão Max:

• Pix payment processor — receives the tax ID (CPF), phone number, and charge amount to generate and confirm the payment.
• Resend — platform used to send transactional emails (receives your email and name).
• Telegram — if you link your account, for sending notifications.
• Railway — hosting provider for our infrastructure (database and servers).
• Google (Google Analytics 4) — only on public pages and if you accept statistics cookies; receives browsing data with anonymized IP, never your name, email, or phone number.

None of these providers is authorized to use your data for its own purposes.

5. How long we keep your data

We keep your data for as long as your account is active. Billing data may be retained for an additional period to comply with tax and accounting obligations ([exact period to be confirmed with the tax/legal department]). Security and audit logs are kept for as long as necessary to investigate incidents.

6. Your rights as a data subject

In accordance with Article 18 of the LGPD, you may request at any time:

• Confirmation that we process your data, and access to it.
• Correction of incomplete, inaccurate, or outdated data.
• Anonymization, blocking, or deletion of unnecessary data or data processed in noncompliance with the law.
• Portability of your data to another service provider.
• Deletion of data processed with your consent, except data we must keep due to a legal obligation.
• Revocation of consent and information about who we share your data with.

To exercise any of these rights, contact us at [[email protected] — confirm monitored inbox] or via WhatsApp at (81) 99565-2137. We will respond within the applicable legal deadline.

7. Security

Passwords are stored hashed (never in plain text), traffic between your browser and our servers is encrypted (HTTPS), and access to sensitive data is restricted to features that genuinely need it.

8. Minors

Robozão Max is intended for users aged 18 and over. We do not knowingly collect data from minors.

9. Changes to this policy

We may update this policy to reflect changes to the service or to the law. The date at the top of this page indicates the last revision.

10. Contact

Questions about this policy or about how we handle your data can be sent to [contact/DPO email to be defined] or via WhatsApp at (81) 99565-2137.