Privacy Policy

What data we collect

In the founders' list form, we collect:

• Name, email, WhatsApp number and page language: required for the sign-up.
• Law firm name: optional, provided by you.
• Technical access data: IP address, date and time, and browser, logged by the servers and the network protection.
• Data on how you reached the list: the origin of the visit (campaign parameters) and the code of whoever referred you, when there is one.
• Consent record: the exact text you saw, the version, the language, the date and time, a scrambled version (hash) of your IP address and the browser used. It serves to prove what you accepted.
• Place in the queue and your referral code, generated when you confirm the sign-up.

If you agree to appear on the Founders Wall, the Wall shows name, city and practice area. The Wall is not live yet; before publishing it, we will ask for your city and practice area in a separate, optional step, with its own consent.

We do not ask for CPF (Brazilian individual taxpayer ID), payment data or documents to join the list.

What we use it for and on what legal basis

• Waiting list and launch communication: confirming your sign-up by email and notifying you about the launch and the founder conditions. Legal basis: your consent (art. 7, I, of the LGPD).
• WhatsApp updates: sending the confirmation and the launch updates through this channel as well. Legal basis: the same sign-up consent, which covers email and WhatsApp.
• Founders Wall: displaying your name, your city and your practice area. Legal basis: your specific consent, separate from the others.
• Security and spam prevention: limiting excessive attempts and discarding automated sign-ups. Legal basis: legitimate interest (LGPD, art. 7, IX), limited to what is needed to keep the form working.
• Aggregate statistics on site access, without cookies and without identifying you. Legal basis: legitimate interest (LGPD, art. 7, IX); the figures are aggregated and identify no one.

We do not sell your data and do not use it for any other purpose without asking for new consent.

Cookies and third parties

The site does not use cookies. Audience measurement is aggregate, done on the same domain as the site, without identifying visitors. No third-party service is loaded when you open the pages.

Who we share it with

We share data only with providers that operate on our behalf, such as hosting, email delivery and WhatsApp messaging, under contract and only as far as necessary for the service. Currently: Hostinger (servers in Brazil), Cloudflare (network protection and site delivery), a transactional email provider and Meta (WhatsApp Business).

We may also share data when required by law or by an order from an authority. Cloudflare, the email provider and Meta may process data outside Brazil; in that case, the transfer follows article 33 of the LGPD and ANPD Resolution CD/ANPD No. 19/2024.

How long we keep it

• List data: until 12 months after the launch, or until you ask for deletion or withdraw consent, whichever comes first.
• Consent record: 5 years after processing ends, to prove what was accepted.
• Access logs (IP address, date and time): 6 months, as required by Brazil's Internet Civil Framework (Law 12,965/2014, art. 15).

After this period, the data is deleted or anonymized.

Your rights

Under the LGPD (art. 18), you may request at any time:

• confirmation that we process your data, and access to it;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary data or data processed in breach of the law;
• data portability;
• deletion of data processed on the basis of consent;
• information about whom we share your data with;
• information about the possibility of not giving consent and its consequences;
• withdrawal of consent, at no cost and without prejudice to what was done before it.

To stop receiving emails, use the unsubscribe link in every message: it works with one click. For other requests, write to our privacy channel (see below). We respond within the legal deadline.

How we protect the data

We use encrypted connections, role-based restricted access and access logs, and we store the IP address only in scrambled form. No system is infallible; in the event of an incident with relevant risk, we will notify you and the Brazilian National Data Protection Authority (ANPD), as the law requires.

Privacy channel

BZI is a small-sized processing agent under ANPD Resolution CD/ANPD No. 2/2022 and, as that rule allows, serves data subjects through a communication channel instead of appointing a data protection officer: [email protected]. Use it to exercise the rights above and to ask about this policy.

If you believe your data has been processed improperly, you may also file a complaint with the ANPD.

Changes to this policy

If we change what we do with the data, we update this page and, when the change requires new consent, we ask for it again. The date and version at the top show the latest update.