Privacy Policy

1. Controller

The data controller is Alto Impacto Mentoria (Alto Impacto), Brazilian company ID (CNPJ) 48.780.935/0001-64, Jardins, São Paulo – SP, Brazil, represented by Evandro Gonçalves. Privacy contact: privacidade@altoimpactomentoria.com.br.

2. Data we collect

• Alto Impacto Diagnostic: name, company name, WhatsApp, email, industry, revenue range, headcount and your answers.
• Advisory form: name, company, email, phone, revenue range and the challenge you describe.
• WhatsApp and email: the content of the messages you send us.
• Payments: name, email and purchase details. Card data is handled directly by Stripe; we never receive or store it.
• Platform (clients): account data and the management and financial information you record.
• Sales calls: with your knowledge, the conversation may be transcribed in real time to support the meeting. Audio is not recorded; transcripts are stored with tax IDs, cards, emails and phone numbers masked.
• Browsing: technical data (IP address, browser, pages visited, referral source). Third-party visit measurement only with your analytics-cookie consent.

3. Purposes and legal bases

• Generating and sending your diagnostic and answering contact requests — pre-contractual steps at your request (art. 7, V).
• Delivering mentoring and the platform and processing payments — performance of contract (art. 7, V).
• Issuing tax documents and meeting legal duties — legal obligation (art. 7, II).
• Security, fraud prevention and site improvement with minimal technical data — legitimate interest (art. 7, IX).
• Sending content and sales contact and using analytics and marketing cookies — consent (art. 7, I), which you may withdraw at any time.

4. Who we share data with

We do not sell personal data. We share it only with providers needed to run the service, under contract and confidentiality:

• Website and platform hosting: Lovable.
• Database, authentication and server functions: Supabase (via Lovable Cloud).
• Payments: Stripe.
• Transactional email: Lovable email infrastructure.
• AI for drafting analyses and supporting meetings: AI model providers accessed via Lovable AI; call transcription: Deepgram.
• Visit measurement (consent only): Metricool. Website fonts: Google Fonts.
• WhatsApp (Meta), when you choose to talk to us there.
• Public authorities, when required by law or court order.

5. International transfers

Some providers store or process data outside Brazil (for example, in the United States and the European Union), under contractual clauses and safeguards compatible with the LGPD (art. 33).

6. Retention

• Diagnostic and sales-contact data: while there is a commercial relationship or interest, reviewed periodically; you may request deletion at any time.
• Sales-call transcripts: up to 90 days.
• Mentoring and platform client data: during the contract and as long as needed to defend legal rights.
• Tax and payment data: for the period required by law (generally 5 years).

7. Your rights and how to exercise them

Under the LGPD (art. 18) you may request: confirmation of processing; access; correction; anonymisation, blocking or deletion of unnecessary data; portability; deletion of data processed by consent; information about sharing; and withdrawal of consent.

How to ask: email privacidade@altoimpactomentoria.com.br with the subject “LGPD rights”, stating what you want (access, correction, deletion, portability or other) and the email or phone you used with us. We may ask you to confirm your identity. We reply within 15 days.

You may also file a complaint with Brazil's National Data Protection Authority (ANPD) at gov.br/anpd.

8. Data protection officer

Data protection officer: Evandro Gonçalves. Contact: privacidade@altoimpactomentoria.com.br.

9. Cookies

• Necessary (always on): keep the site, language, diagnostic draft and login working.
• Analytics (optional): visit measurement by Metricool, only after you accept.
• Marketing (optional): not used today. If we start (e.g. an ad pixel), it will only load with your consent.
• Change your choice anytime under “Cookie preferences” in the footer.

10. Security

We use encrypted connections, role-based access, database access rules and masking of sensitive data in transcripts. If a relevant incident occurs, we will notify affected people and the ANPD as required by law.

11. Children

Our services are intended for business owners, not for people under 18.

12. Changes

We may update this policy. The last-updated date is shown at the top. The Portuguese version prevails in case of discrepancy.