Privacy Policy
Version 1.0 · Effective November 4, 2026
1. Who we are and who this Policy applies to
Cyberisk Tecnologia, Brazilian company ID (CNPJ) 68.687.633/0001-53 ("Cyberisk", "we"), operates the Cyberisk Core platform and this corporate website (cyberisk.com.br), in compliance with Brazilian Law No. 13,709/2018 (LGPD).
This Policy applies to website visitors and to anyone who sends us a request through the contact form. Data processing inside the Cyberisk Core platform follows the Privacy Policy published on the platform itself.
2. Our role in processing
For data processed through this website, Cyberisk acts as the controller.
3. Data we collect
Data you provide in the contact form: name, work email, company, job title and request subject. If you take the maturity assessment, we also receive your score and answers.
Data collected automatically: the page the request came from, campaign parameters (UTM) when present, and your IP address, used only to limit abusive submissions and for spam verification. Our hosting provider also keeps technical access logs.
We do not collect sensitive personal data through the website.
4. Purposes and legal bases
Answering your request, scheduling demos and preparing proposals: preliminary steps toward a contract at the data subject's request (art. 7, V) and legitimate interest (art. 7, IX).
Website security and prevention of automated or abusive submissions: legitimate interest (art. 7, IX).
Commercial communications related to your request: consent (art. 7, I), which you may withdraw at any time.
Compliance with legal and regulatory obligations: legal obligation (art. 7, II).
5. Sharing and processors
We do not sell, rent or trade personal data. Form requests are delivered by email to our sales team through Resend (email delivery). The website is hosted by Vercel and may use Cloudflare Turnstile to block automated submissions. These processors act under contract and confidentiality obligations.
We may also share data to comply with a legal obligation or an order from a competent authority, with the data subject's consent, or in a possible corporate reorganization, preserving the terms of this Policy.
6. International transfer
Vercel, Resend and Cloudflare may process data outside Brazil. In those cases, we adopt safeguards consistent with arts. 33 to 36 of the LGPD.
7. Cookies and local storage
The website uses no advertising cookies, pixels or third-party trackers. Your theme preference (light or dark) is saved only in your browser's local storage. When Cloudflare Turnstile is active, it may use technical browser data solely to tell people from bots.
8. Information security
We adopt appropriate technical and organizational measures, such as encryption in transit, a strict content security policy, validation and limits on the data received, access control on the mailboxes that receive requests, and a rule never to log personal data from the form.
9. Security incidents
If a security incident may cause relevant risk or harm to data subjects, we will notify the Brazilian Data Protection Authority (ANPD) and the affected data subjects within a reasonable time, as required by the LGPD.
10. Retention
We keep your request data for as long as needed to handle it and to conduct the resulting business relationship, or until you ask for deletion, subject to legal retention requirements. Once the purpose ends, the data is deleted or anonymized.
11. Data subject rights
Under art. 18 of the LGPD, you may request: confirmation that processing exists and access to the data; correction; anonymization, blocking or deletion of unnecessary, excessive or non-compliant data; portability; deletion of data processed based on consent; information about sharing; information about the possibility of not consenting; and withdrawal of consent.
How to exercise them: send your request to legal@cyberisk.com.br. We will respond within the LGPD deadlines.
12. Children and teenagers
The website is intended for business use and is not directed at people under 18. We do not knowingly collect their personal data.
13. Data protection officer (DPO) and ANPD
Data protection officer: Fernando Cesar de Oliveira · dpo@cyberisk.com.br. You may also file a complaint with the Brazilian Data Protection Authority (ANPD).
14. Changes
We may update this Policy. The current version is always the one published on this page, with its version and date.
15. Contact
legal@cyberisk.com.br · Cyberisk Tecnologia, Cyberisk Core platform.