AI Tribo respects your privacy. This policy describes what data we collect, why we collect it, how we use it, and your rights as a data subject under Brazil's General Data Protection Law (LGPD, Law 13.709/2018).
1. Controller
AI Tribo — contact: privacy@aitribo.com. DPO: dpo@aitribo.com.
2. Data collected
- Registration: name, email, authentication-protected credential, and optional phone.
- Profile: role, goals, company size, and stack preferences.
- Newsletter: subscription choice and consent or withdrawal history.
- Usage: browser favorites, preferences, and onboarding/tour history.
- Security: verification attempts, pseudonymized technical identifiers, timestamps, administrative role changes, administrative access to personal data, IP, and user-agent processed by infrastructure.
- Cookies and local storage: language, theme, interface state, and consent records.
3. Legal bases (Art. 7)
- Contract performance to deliver requested account features.
- Optional and revocable consent for newsletter delivery.
- Legitimate interest for security and abuse prevention.
- Legal obligation when applicable.
4. Sharing
- Infrastructure: Railway, Supabase Cloud, and Cloudflare.
- Email: Resend.
We do not sell your data.
5. Retention
- Confirmed account, profile, and preferences: while the account is active.
- Newsletter consent history: while the account is active, to demonstrate and respect the current choice.
- Unconfirmed email sign-up: up to 7 days.
- Expired or used verification codes: up to an additional 24 hours.
- Pseudonymized security counters: up to 48 hours after the rate-limit window.
- Operational privacy request records: up to 90 days; after account deletion, without user linkage.
- Administrative role and personal-data access audit: up to 365 days; after account deletion, without direct user linkage.
Self-service deletion immediately removes the account and linked data from the active system. Operational logs and managed backups follow the technical and legal cycles of those service operators.
6. Your rights (Art. 18)
Access, correction, anonymization, portability, consent withdrawal, and deletion. Visit /meus-dados to export application-held data or permanently delete the account. For data held exclusively by processors, legal exceptions, or additional requests, write to privacy@aitribo.com. We respond within up to 15 days.
7. Security
We use encrypted transport, credentials managed by the authentication service, mandatory MFA for administration, Row-Level Security, HIBP checks, rate limiting, access audits, and least privilege.
8. Bot protection (Cloudflare Turnstile)
We use Cloudflare Turnstile to distinguish humans from bots during login and sign-up, protecting the service against abuse. Data processed by Cloudflare in this context is limited and includes IP address, TLS fingerprint, User-Agent header, sitekey, and associated origin.
Cloudflare states that it cannot directly identify individuals from these signals. Processing occurs to detect and block malicious traffic and to improve bot-detection algorithms, according to the roles Cloudflare describes.
The collected signals are strictly necessary for site security and are not used to profile, identify, or target ads to you.
To exercise rights over this data, contact privacy@aitribo.com or dpo@cloudflare.com. Full addendum: Turnstile Privacy Addendum.
9. International transfer
Some providers process data outside Brazil under equivalent contractual clauses.
10. Minors
The service is not intended for people under 18.
11. ANPD
You may also exercise rights or submit a petition through the official channels of Brazil's National Data Protection Authority.
See also: Terms of Use.