Data Collection Policy
Last updated: October 9, 2026
This Data Collection Policy details technically what data Connexa Treinamentos e Soluções em Tecnologia Limitada (CNPJ 67.784.350/0001-67) collects, how it is collected, how it is protected, and how long it is retained.
1. Data Collected via Form
Workshop and Consulting
- Full name
- Phone / WhatsApp
- Company name
- Team size
- Intended number of workshop attendees
- Selected business needs
- Optional additional information
Talk Connexa (Subscription)
- Company legal name
- Responsible person's CPF or company CNPJ (Brazilian tax IDs)
- Responsible person's name
- Corporate email
- Phone
- Postal code and full address (for billing)
- Talk Connexa access password
- Credit card data: collected directly by the gateway via tokenization (financial data does not pass through Connexa's servers)
In the Talk Connexa subscription and free trial form, the CPF or CNPJ, address and password are passed on to the Talk Connexa platform and are not kept in Connexa's database.
2. Sub-processors (Third Parties)
Connexa shares strictly necessary data with the sub-processors listed below. Each has its own privacy policy and processes data according to the indicated legal basis. For tracking cookie usage, see also our Cookies Policy.
| Vendor | Purpose | Data shared | Legal basis | Location |
|---|---|---|---|---|
| Google (GA4) | Site usage analytics | IP (anonymized), page events, device identifiers | Consent (LGPD Art. 7º, I) | USA |
| Google (GTM) | Tracking tag management | Configuration only; GTM itself does not collect personal data | Legitimate interest (LGPD Art. 7º, IX) | USA |
| Meta (Facebook Pixel) | Paid campaign measurement + remarketing | Hashed email/phone (when authorized), page events, click ID | Consent (LGPD Art. 7º, I) | USA / Ireland |
| Supabase | Database and Auth hosting | Leads, blog posts, admin sessions, settings | Contract performance | South America (sa-east-1, Brazil) |
| Vercel | Next.js application hosting | Request IPs, operational logs | Legitimate interest (LGPD Art. 7º, IX) | USA / global edge |
| Uazapi | WhatsApp notifications (admin group) | Internal notification content (excludes visitor data) | Legitimate interest (operational) | Brazil |
| Asaas | Payment processing (Talk Connexa) | Card data (PCI), tax ID, billing | Contract performance | Brazil |
| OpenAI | Blog content generation (no PII) | Prompt topics (no visitor data) | Legitimate interest (operational) | USA |
| Sentry | Error monitoring | Stack traces, IPs (anonymized in production) | Legitimate interest (security) | USA |
3. Data Sharing
Collected data is shared exclusively with the operators listed above, necessary for the provision of the services described in this policy. For information on data processing, see our Privacy Policy.
Connexa does not sell, rent or transfer personal data to third parties for commercial purposes.
4. Data Retention
- Leads (workshop/consulting): for the duration of the commercial relationship + 5 years after its end.
- Checkout/subscription data: 5 years (Brazilian Tax Code Art. 195).
- Anonymized IP: ephemeral (minutes to hours).
After retention periods, data is deleted or irreversibly anonymized.
5. Your Rights
To exercise your rights of access, correction, erasure, portability or withdrawal of consent, send an email to contato@connexatech.com.br. Response time: 15 business days. For complete information on your rights, see our Privacy Policy.
6. Contact
For technical questions about data collection and processing, contact us at contato@connexatech.com.br.