Legal
Privacy policy
What data we collect, why, who we share it with and how you exercise your rights under Brazil's General Data Protection Law (LGPD, Law 13,709/2018).
Effective October 6, 2026
Controller and data protection officer
The website machinainvestimentos.com.br and the subscriber area (app.machinainvestimentos.com.br) are operated under the name Machina Investimentos. The analyst responsible for the content is Thiago Ramos Almeida, a securities analyst certified by APIMEC (CNPI no. 10381). Contact: [email protected].
The data protection officer (DPO) is Thiago Ramos Almeida, at [email protected].
What we collect and why
| When | Data | Purpose | Legal basis |
|---|---|---|---|
| Letter and waiting list | Name, email, plan of interest | Send the monthly letter and subscription opening notices | Consent (art. 7, I) |
| Subscriber account | Email, password (stored hashed by the login provider), plan and expiry | Give access to the contracted content | Performance of contract (art. 7, V) |
| Payment | Name, Brazilian tax ID (CPF or CNPJ), email, invoice history | Bill the subscription and issue receipts | Contract and legal obligation (art. 7, II and V) |
| Use of the service | IP address, access date and time, technical logs | Security, fraud and account-sharing prevention | Legitimate interest and legal obligation (Brazilian Internet Act, art. 15) |
| Visit statistics | Aggregate page-view counts, without identifying visitors | Learn which sections of the site are useful | Legitimate interest (art. 7, IX) |
We never see or store your card details: they are entered directly on the Asaas payment page. We do not sell, rent or transfer personal data for third-party marketing.
Cookies and browser storage
The site uses no tracking or advertising cookies. Visit statistics are collected by Plausible, which uses no cookies and does not identify people. Your browser stores locally only your theme preference (light or dark) and, in the subscriber area, your login session and the plan chosen during checkout. You can delete this by clearing the site data in your browser.
Who we share data with
Only with the providers needed to run the service, which process data on our behalf under contract:
- Supabase — login and database for accounts and the email list.
- Asaas — billing and invoicing.
- Cloudflare — website hosting and email forwarding.
- Render — subscriber-area server.
- Brevo — account-confirmation and password emails.
- Plausible — aggregate visit statistics, no personal data.
We may also share data when required by law or by order of a competent authority.
International transfers
Some of these providers keep servers outside Brazil (for example, in the United States and the European Union). Transfers are made to perform the contract with you and to providers that adopt security safeguards compatible with the LGPD (art. 33).
How long we keep data
- Email list: until you unsubscribe (every message has an unsubscribe link).
- Account: while it exists; after closure, data is deleted within 90 days, except what the law requires us to keep.
- Billing data: for the period required by tax and civil law (generally 5 years).
- Access logs: 6 months, as required by the Brazilian Internet Act.
Your rights
At any time and free of charge you may request: confirmation that we process your data; access; correction; anonymization, blocking or deletion of unnecessary data; portability; information on who we share it with; and withdrawal of consent (LGPD art. 18). Write to [email protected]; we reply within 15 days. If you are not satisfied, you may file a complaint with Brazil's National Data Protection Authority (ANPD).
Security and incidents
We use encrypted connections (HTTPS) on every page, passwords hashed by the login provider, database access rules that prevent third parties from reading the email list, and service keys kept out of public code. If an incident may pose relevant risk, we will notify affected data subjects and the ANPD, as the law requires.
Changes
This policy may be updated; material changes are announced by email and the current version is always on this page. This English version is provided for convenience; in case of any discrepancy, the Portuguese version prevails.