Privacy
Privacy policy
No ads, no trackers and no analytics tools. We keep only what the site needs to work and what we need to reply to you, for as short a time as possible.
In short
- We use no advertising or analytics cookies, and we don’t sell data.
- Your conversation with Íris is kept for 30 days and is used to help you.
- Anthropic generates Íris’s replies and doesn’t use the messages to train models without permission.
- You can ask to access, correct or delete your data at any time.
Who looks after your data
The data controller is ALRIX Soluções em Tecnologia LTDA, CNPJ 69.405.931/0001-76, which runs alrix.com.br.
For any privacy matter, write to contato@alrix.com.br. As a micro-enterprise, ALRIX is not required to appoint a data protection officer (Resolution CD/ANPD No. 2, art. 11); this channel receives your requests, questions and complaints.
What we process, why and for how long
Visiting the site
The server logs your IP address, date and time, the page requested, the referring page and your browser, to keep the site secure and to comply with Brazil’s Marco Civil da Internet, which requires these logs to be kept for 6 months (art. 15).
- Legal basis
- Legal obligation (LGPD, art. 7, II)
- Kept for
- 6 months
Language
A cookie remembers the language you chose, to show the site in your language.
- Legal basis
- Legitimate interest (art. 7, IX)
- Kept for
- Until you close the browser
Talking to Íris
Your messages, the replies and the summary Íris prepares for the team: name, company, what needs to change, how things work today, areas of interest, deadlines and constraints. They are used to reply to you and plan the next steps.
- Legal basis
- Steps prior to a contract, at your request (art. 7, V)
- Kept for
- 30 days
Usage limits
To limit each visitor to 3 conversations a day, your IP becomes a code that changes every day; the address itself is not stored.
- Legal basis
- Legitimate interest in preventing abuse and controlling costs (art. 7, IX)
- Kept for
- 30 days
Call-back request
If you ask us to message you on WhatsApp, we keep the number and your consent. On WhatsApp, the conversation with the team lasts as long as we are working with you.
- Legal basis
- Consent (art. 7, I), which you can withdraw at any time
- Kept for
- 30 days on the site
Bot protection
When a conversation starts, Cloudflare Turnstile checks browser signals such as IP and user agent to tell people from bots.
- Legal basis
- Legitimate interest (art. 7, IX)
Security
If someone tries to trick or attack Íris, we log the kind of attempt and the IP, encrypted, and alert the team.
- Legal basis
- Legitimate interest and the regular exercise of rights (art. 7, VI and IX)
- Kept for
- 6 months
Direct contact
What you send by email or WhatsApp is used to reply to you.
- Legal basis
- Steps prior to a contract and performance of a contract (art. 7, V)
- Kept for
- While the conversation lasts; if it becomes a project, for the length of the contract and of our legal obligations
We don’t ask for sensitive data. Don’t send passwords, documents or health data in the conversation.
Data outside Brazil
Anthropic, a US company, processes the messages outside Brazil, and Cloudflare uses servers in many countries. For the conversation with Íris, the transfer is needed to fulfil your request (LGPD, art. 33, IX). Through our channel, you can ask for more details about each provider.
Your rights
Under the LGPD (art. 18), you can ask, at any time and free of charge, for:
- confirmation that we process your data, and access to it;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of data that is unnecessary, excessive or processed unlawfully;
- portability of your data to another provider, under ANPD rules;
- deletion of data processed with your consent;
- information about who we share your data with;
- information about the option not to consent and what happens if you don’t;
- withdrawal of consent.
You can also object to processing done without consent when it breaches the law, ask for a review of decisions made solely by automated means (art. 20) and file a complaint with Brazil’s National Data Protection Authority (ANPD).
To exercise your rights, write to contato@alrix.com.br. We may ask you to confirm your identity before handing over or deleting data. Because we keep little, for a short time, we may no longer have what you are looking for; if so, we will tell you.
Automated decisions
Íris talks with you and organizes a summary; the ALRIX team decides on proposals, prices and timelines. Usage limits and abuse blocking are automatic. If you think you were blocked by mistake, contact us and a person will review it.
Security
We use HTTPS on every page, keep conversations in a restricted-access database on our server, encrypt the IP in incident records and keep service keys out of the code. If an incident may cause relevant risk or harm, we notify the ANPD and the people affected (LGPD, art. 48).
Children and teenagers
The site is made for businesses and professionals. We don’t seek data from children or teenagers; if you know of a case, write to us so we can delete it.
Changes to this policy
When something changes, we update this page and the date at the top.