Privacy and LGPD
This policy describes data processing on the website and commercial pilot. It is not a compliance certification. The controller’s complete business identity and supplier contractual details still need to be finalized before paid sales open.
1. Responsibility and privacy contact
Project lead: Bruno Batalha Galindo. Use the Requests and rights center or Instagram Direct @becabottrading. Marketing consent is not required to exercise rights. No formally appointed data protection officer is announced; appointment requirements or eligibility for an exemption need assessment under ANPD rules.
2. Data and purposes
- Interest list: name, email, language, submission date and consent version, for manual pilot contact; based on revocable consent.
- Pilot access: login ID, name and email for authentication and account isolation; based on providing the requested service.
- Dashboard: user-entered account labels, results, instruments, quantities and notes for storage, calculations, reporting and recovery; based on the requested service.
- Requests: name, email, request type, message, optional reference, receipt ID, dates and status; for support and rights handling under applicable legal obligations, service performance and legal claims.
- Optional AI: the submitted question for product assistance, based on specific consent to transmission.
Hosting, authentication and security providers may process necessary technical records. Legal bases and controller/processor roles must reflect actual flows and contracts. No checkout is active and the public form does not collect card details or Brazilian tax IDs.
3. Providers and international processing
Hosting uses ChatGPT Sites and Cloudflare infrastructure; login uses ChatGPT/OpenAI. Optional AI calls the OpenAI API. The private dashboard may request Google Fonts. External links such as Instagram have their own practices. These services may process data outside Brazil. Operators, destinations, contracts and international transfer safeguards still need to be mapped and finalized under LGPD and ANPD rules before commercial expansion. We do not claim Brazil-only storage or automatic compliance from provider selection. Platech payments are not integrated; this policy must be updated before payment data is processed.
4. AI and screenshots
Quick topics are answered locally. Optional AI receives the question and product instructions, not the private dashboard history. The website does not save chat text in its database; it keeps aggregated usage counts and budget reservations. store:false does not eliminate provider security logs. Do not submit personal data, statements or passwords to AI. Chat does not open support tickets. Pilot screenshot OCR runs locally, and extracted closing data is reviewed before saving.
5. Retention
- Interest entries: 180 days; cleanup is triggered by a new entry or administrator access, not a continuous scheduled job.
- Website requests: while open and for 90 days after closure. Cleanup runs on new requests or administrator listing. Any legal preservation exception must be assessed and explained.
- Pilot history and tickets: during participation and until closure/deletion requests are handled. Final post-closure retention must still be defined before sales; automatic erasure within an unimplemented period is not promised.
- Pilot recovery: up to 20 prior versions per user in the same database; not an external backup. Pending drafts may remain in the browser until synchronization or discard.
- Provider logs and technical backups follow their contracts and policies; application deletion does not imply instantaneous removal from all technical copies.
6. Rights
You may request confirmation and access, correction, information about sharing and consent, anonymization, blocking or deletion where applicable, portability under applicable rules and consent withdrawal. Legal retention obligations may limit deletion. You may contact ANPD or other competent authorities. Identity checks will be proportionate; do not submit identity documents through this form without a specific request through an appropriate channel.
Confirmation/access requests follow LGPD article 19: an immediate simplified response or a complete statement within 15 days, subject to applicable rules. Other requests follow their statutory deadlines. A receipt confirms submission and does not automatically verify identity or delete data.
7. Security and incidents
HTTPS, input validation, request limits and restricted administrator access are implemented; pilot records are isolated by login. These measures cannot eliminate all risks. Report incidents through the requests center for investigation and appropriate action, including legally required notifications to ANPD and affected individuals.
8. Changes
See the Cookie policy. Material updates receive a new publication date. Payments, advertising, new trackers or new purposes require prior review of disclosures and legal bases.