Privacy · LGPD
Last updated: 25 August 2026 · Notice version 2026-08-25
Clear choices before personal data enters the system.
This notice explains the data practices of the Synap institutional website. Portuguese is the controlling version; this translation is provided for accessibility and transparency.
The essentials
- Optional analytics is blocked by default and can be refused with the same ease as it can be accepted.
- The automated attendant can be used without server-side conversation logging.
- Contact data is only submitted after an affirmative action and a specific privacy acknowledgement.
- The application does not install advertising cookies or use device fingerprinting.
Controller and scope
For the processing described here, the controller is Synap Inteligência Artificial, based in Juiz de Fora, Minas Gerais, Brazil. The privacy contact channel is corporativo@synap.ia.br. This notice covers the institutional website, contact forms, newsletter request and the website attendant; product environments may require their own notices.
Data, purpose, legal basis and retention
| Activity | Data | Purpose and basis | Retention |
|---|---|---|---|
| Essential navigation | Language route and a local privacy preference | Deliver the requested interface and remember your privacy choice | Until you clear browser data or the notice version changes |
| Optional measurement | Page and interaction events without form content | Improve the website, only after consent | Not sent unless measurement is configured and consent is active |
| Attendant without logging | Conversation held in the active browser tab | Answer questions locally | Not stored by the application server |
| Attendant with logging | Pseudonymous session, time, page, redacted question, answer identifier and feedback | Improve coverage, based on specific consent | Up to the configured limit, currently 90 days |
| Contact request | Name, business email, company, size, area of interest, context, preferred time, contact preference, plus optional phone and notes | Respond to the contact you requested and take pre-contractual steps requested by you | Up to 180 days without a later relationship; legal duties may require different periods |
| Newsletter request | Email address and consent record | Send the requested editorial communication | Until unsubscribe or withdrawal, subject to legal records |
| Security | Transient technical request data, which may include IP and headers at the hosting layer | Prevent abuse and protect the service | According to the minimum period required by the configured provider |
Cookies, local storage and your choices
The site does not load advertising trackers. Necessary local storage is limited to remembering the privacy choice and the attendant mode; the session identifier exists only in the current tab.
Optional measurement remains off until an affirmative choice. Rejecting it does not limit access. You can reopen preferences and withdraw consent at any time.
Processors, sharing and international infrastructure
Data is shared only with providers needed to host the website, store consented events, deliver requested messages or send operational reports. The exact providers depend on the production configuration and can be requested through the privacy channel.
Some infrastructure providers may process data outside Brazil. Synap must assess the applicable LGPD transfer mechanism and contractual safeguards before enabling each production integration.
Safeguards implemented in this website
- Data minimization and strict server-side schemas
- Same-origin checks, request size limits, throttling and no-store responses on personal-data APIs
- Redaction of common direct identifiers before logged questions are stored
- AES-256-GCM encryption for contact details stored by the attendant
- Retention limits and a self-service deletion path for the current attendant session
- Restrictive security headers and no third-party advertising scripts
Your rights
- Confirmation and access
- Correction
- Anonymisation, blocking or deletion where applicable
- Information about sharing
- Withdrawal of consent
- Opposition where legally applicable
- Review of solely automated decisions that affect your interests
- Complaint to the ANPD or consumer authorities
Send your request to corporativo@synap.ia.br with the subject “Privacy request”. We may request only the information needed to verify identity and prevent disclosure to the wrong person. Requests are handled free of charge within the deadlines and limits of applicable law.
Children and sensitive data
This is a business-oriented website and is not directed to children. Do not submit passwords, health information, case files, tax documents or other sensitive or confidential data through public forms or the attendant.
Changes and incidents
Material changes will update the notice version and may require a new choice. Security incidents presenting relevant risk or harm will be assessed and communicated as required by the LGPD and ANPD regulations.
This notice describes the website implementation and does not replace a legal assessment of all Synap processing operations.
