Privacy Policy

Aptabit, headquartered at Av. Doutor Altino Bondensan, 500, PIT - Centro Empresarial I, Sala 103E, São José dos Campos - SP, 12247-016, Brazil, is the controller of personal data processed through www.aptabit.com and its commercial contact channels. This policy applies to site visitors, business contacts, partners, and customer representatives.

Data processed inside an Aptabit Platform installation (documents, conversations, data contexts) belongs to the customer and stays on the customer's infrastructure. In those cases Aptabit acts, at most, as a processor under the license agreement and the EULA, and no such data is sent to Aptabit.

We collect only what each purpose requires:

• Contact form: subject, name, email, phone, company, preferred contact method, and message, plus job title if you provide it.
• Browsing: IP address, browser type, and pages visited, in technical security logs, plus the consent and language cookies described in the Cookie Policy.
• Business relationship: contact details of customer and partner representatives, meeting history, proposals, and contracts.

• Answering contacts and commercial proposals: steps prior to entering a contract (LGPD art. 7, V; GDPR art. 6(1)(b)).
• Evaluating and managing partnerships and contracts: contract performance and legitimate interest (LGPD art. 7, V and IX; GDPR art. 6(1)(b) and (f)).
• Site security, fraud and bot prevention: legitimate interest (LGPD art. 7, IX; GDPR art. 6(1)(f)).
• Compliance with legal, tax, and regulatory obligations (LGPD art. 7, II; GDPR art. 6(1)(c)).
• Optional cookies and external media: consent (LGPD art. 7, I; GDPR art. 6(1)(a)).

We do not sell personal data. We share only with processors that provide services to us under contract and instructions, and only what is necessary:

• Microsoft (Microsoft 365): corporate email and delivery of contact form messages.
• Cloudflare: anti-bot protection (Turnstile) on the contact form.
• Google (YouTube): embedded videos, only with your consent.
• Site hosting and infrastructure providers.
• Public authorities, when required by law or court order.

On the Portuguese version, the site also loads VLibras, a Brazilian Federal Government tool that translates content into Brazilian Sign Language (Libras). The tool's files come from vlibras.gov.br and from the jsDelivr content delivery network (cdn.jsdelivr.net). As a result, your browser connects directly to these services, which receive technical connection data such as your IP address and browser type. If you activate the translation, the text you choose is sent to the VLibras servers. Processing by these services follows the rules of the respective providers. Details are in the Cookie Policy.

Aptabit has an office in Lewes, Delaware, USA, and some processors handle data outside Brazil. In those cases we adopt the safeguards provided by the LGPD (arts. 33 to 36) and the GDPR (standard contractual clauses and supplementary measures) and limit transfers to what is strictly necessary.

• Business contacts without a contract: up to 24 months after the last contact.
• Customer and partner data: for the duration of the contractual relationship and the legal retention periods after it ends (generally 5 years).
• Technical access logs: 6 months, as required by the Brazilian Internet Act.
• Cookie consent: 12 months.

We apply technical and organizational measures proportional to the risk: encryption in transit (TLS), role-based access control, multi-factor authentication on corporate accounts, access logs, environment segregation, and staff training. Security incidents that may pose relevant risk to data subjects are reported to the ANPD and to those affected within the legal deadlines.

You may at any time request: confirmation that processing exists; access; correction of incomplete or outdated data; anonymization, blocking, or deletion of unnecessary data; portability; information about sharing; withdrawal of consent; and objection to processing based on legitimate interest. We respond within 15 days. You may also lodge a complaint with the Brazilian National Data Protection Authority (ANPD) or, in the European Union, with the competent supervisory authority.

Aptabit's data protection officer can be reached at contact@aptabit.com with the subject "Privacy".

This policy may be updated to reflect legal or operational changes. The current version is always the one published on this page, with the update date at the top.