Privacy
Policy.

1. Controller and contact

Exponencial Administração e Tecnologia LTDA, trading as Exponencial Administração & Tecnologia, Brazilian company registration 39.556.809/0001-30, with registered office at Rua Copaíba, Lot 01, Block B, Suite 408, Norte (Águas Claras), Brasília — DF, 71919-540, Brazil, is the controller of personal data processed through Exponencial's institutional channels. The service address shown on this website, SCRN 712/13, Block B, Store 28, Asa Norte, Brasília — DF, Brazil, is an operational location separate from the registered office.

Privacy and data-subject requests may be sent to juridico@exponencialadm.net.

2. Scope and roles

This policy covers the website, forms, bookings and administrative platform accounts. Exponencial is the controller for registration, relationship, security and usage data in these channels. When a client organization submits its own content to an Exponencial product, that organization normally determines the purpose and acts as controller, while Exponencial acts as processor under the contract and documented instructions.

3. Data processed

• Contact form: first name, last name, email, phone, company, role, subject and message.
• Product/category interest: name, email, phone, company, category/product of interest and message.
• Booking: name, email, phone, company, meeting reason, selected professional, date and time.
• Account and access: name, email, Google identifier, organization, role, sessions, invitations and authentication events.
• Product usage: settings, operational metadata, security records, quotas and evidence submitted by the organization.
• Technical data: IP address, browser, device, pages accessed and usage events required for security and analytics.

4. Purposes and legal bases

We process data to respond to requests, prepare proposals, perform contracts, operate accounts and bookings, provide support, protect systems, prevent abuse, comply with legal duties and exercise legal rights. Depending on context, the legal basis may be consent, pre-contractual steps or contract performance, legal obligation, or legitimate interests assessed against the individual's rights. We do not sell personal data.

5. Email communications

We may send contact confirmations, invitations or one-time access links, booking notices, support replies, and operational or security alerts. These are transactional messages arising from a request, account or active relationship. We do not buy mailing lists, send bulk campaigns or subscribe a contact-form recipient to marketing. Any future promotional communication will require an appropriate legal basis and a clear opt-out mechanism. You may ask us to stop non-essential messages through the privacy channel; notices required for security or service delivery may require closing the related account or relationship.

6. Sharing and processors

We share only what is necessary with hosting, security, email, authentication, analytics and calendar providers, including Cloudflare, Amazon Web Services and Google, which process data to provide those services. Bookings may be replicated into the selected professional's Google Calendar and include a Google Meet link. We may also disclose data when required by law, a valid order or the protection of legal rights.

7. Use of Google data

In the administrative area, authorized accounts may use Google login. In that case, we may process the account name, email and identifier for authentication and access control. When calendar authorization is granted, we use Google Calendar permissions only to check availability and create, update or cancel events related to Exponencial appointments. We do not sell Google data, do not use it for advertising and do not grant access to third parties outside the operational purpose described in this policy.

8. International transfers

Some global processors may handle data outside Brazil, including in the United States. We limit transfers to what is necessary and use a valid mechanism under the LGPD and ANPD regulations, together with contractual duties, access controls and safeguards proportionate to risk. Product- or contract-specific notices may supplement this policy.

9. Retention

Contact messages are stored for up to 180 days. Leads and interest records may be retained for up to 730 days. Bookings are retained for up to 365 days. These periods may be adjusted when there is a legal obligation or an active relationship.

10. Your rights

You may request confirmation and access, correction, information about sharing, anonymization, blocking, portability or deletion where applicable, revoke consent and object to unlawful processing. Write to juridico@exponencialadm.net. We may request information to verify your identity. If a request is not resolved, Brazilian data subjects may also petition the ANPD or consumer-protection authorities.

11. Security

We apply reasonable technical and organizational practices to protect your data, including TLS in transit and role-based internal access control.

12. Updates

This policy may be updated. The version in force is always the one published on this page, with the revision date visible below.

Last reviewed: September 22, 2026.