Privacy Policy

This Policy applies to personal data handled when you browse this website, send Lupit a message, or otherwise interact with a website feature that links to this Policy. Lupit acts as controller for this handling when it decides why and how the data is used. A separate notice or agreement may apply when Lupit handles data for a client or through another product or service.

Depending on how you use the website, we may handle:

• contact details and message content you choose to provide, such as your name, email address, optional telephone number, company or project context, and message;
• communications and follow-up records created when we respond;
• technical and security data ordinarily generated when a website is accessed, such as IP address, device or browser information, timestamps, requested pages, and diagnostic or security logs; and
• cookie or similar-technology data only where those technologies are active, as described in section 7.

Please do not send sensitive personal data or confidential third-party information unless it is necessary and you are authorized to do so.

We may handle personal data to:

• receive, assess, and respond to your message or request;
• take steps you request before a possible contract or administer an existing relationship;
• operate, maintain, troubleshoot, and secure the website;
• prevent misuse and protect Lupit, visitors, and third parties;
• comply with applicable legal or regulatory duties and establish, exercise, or defend rights; and
• improve the website using appropriately limited information where that activity is active and lawful.

Under Brazil’s General Data Protection Law (LGPD), the applicable legal basis depends on the context and may include steps before or performance of a contract, compliance with a legal or regulatory obligation, the regular exercise of rights, Lupit’s or a third party’s legitimate interests balanced against your rights, or consent when consent is legally required. We do not rely on consent where another legal basis properly applies.

We may disclose only the data reasonably necessary to:

• service providers that support website hosting, communications, security, maintenance, or other operations on Lupit’s behalf;
• professional advisers or public authorities when disclosure is necessary to comply with law or protect or exercise rights; and
• a party involved in a corporate transaction, subject to appropriate confidentiality and legal safeguards.

We do not sell personal data. This Policy does not name a provider unless its role has been confirmed for publication. Providers acting for Lupit must handle data under applicable instructions and safeguards.

A provider’s infrastructure or support may involve handling data outside Brazil. When an international transfer occurs, Lupit will use a mechanism and safeguards required by applicable law and consider the nature of the data and destination. This statement does not represent that every website interaction involves an international transfer.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including responding to a request, maintaining security and operational records, complying with legal duties, and establishing, exercising, or defending rights. The period varies with the data and context. We then delete, anonymize, or securely retain data where continued storage is required or permitted by law. Lupit does not state a fixed period that has not been operationally approved.

The website may use technologies that are necessary to deliver, protect, or remember features. Optional measurement or other non-essential technologies, if introduced, must be described and managed as required by applicable law before activation. Browser controls may allow you to block or remove cookies, although doing so can affect features. This Policy does not claim that a particular analytics, advertising, or consent platform is active.

Subject to the LGPD and the circumstances of the request, you may ask Lupit to:

• confirm whether your personal data is handled and provide access;
• correct incomplete, inaccurate, or outdated data;
• anonymize, block, or delete data that is unnecessary, excessive, or handled contrary to law;
• provide portability where regulated and applicable;
• explain public and private entities with which data was shared;
• provide information about consent and the consequences of refusing it;
• withdraw consent or request deletion of data handled on consent, subject to lawful retention;
• object to handling performed in violation of law; or
• request review of a decision made solely through automated handling where applicable.

Email legal@lupit.io to make a request. We may need to verify your identity and clarify the request. You may also contact Brazil’s National Data Protection Authority (ANPD) where applicable.

Lupit uses reasonable technical and organizational measures appropriate to the nature and context of the data. No internet transmission or storage system can be guaranteed completely secure. Please contact legal@lupit.io if you believe your interaction with the website has created a data-security concern.

This corporate website is not directed to children. If handling children’s or adolescents’ data becomes necessary, Lupit will apply the best-interest standard and other protections required by Brazilian law. A parent or legal representative may contact us if they believe a child provided data through the website.

The website may link to third-party destinations. Their privacy practices are governed by their own notices, not this Policy. A link does not mean Lupit controls or endorses those practices.

We may update this Policy to reflect legal, operational, or website changes. The current version and effective date will appear on this page. Material changes will receive notice when required by law.

Questions and privacy requests: legal@lupit.io. General contact: Contact Lupit. Related document: Terms of Use.