Privacy and Cookies Policy

Your privacy is a priority for us. It is the policy of Caramelo AI (https://carameloai.com/) to respect your privacy and ensure transparency in the processing of any information we may collect on our website and in other services we own and operate.

This Policy was created in strict compliance with the Brazilian General Data Protection Law (LGPD - Law No. 13.709/2018), the Brazilian Civil Rights Framework for the Internet (Law No. 12.965/2014), and the Brazilian Consumer Defense Code (Law No. 8.078/1990).

1. Data Controller

For the purposes of applicable data protection legislation, Caramelo AI is the “Controller” of your personal data. This means we are responsible for deciding how and why your personal data is processed.

2. What data do we collect?

We collect personal information only when it is strictly necessary to provide our services or improve your experience. The collected data is divided into:

  • Data provided directly by you: Name, email, and other information voluntarily entered when filling out contact forms, subscribing to our newsletter, or creating an account.
  • Automatically collected data (Browsing): IP address, access date and time, browser type, pages visited, and time spent on the site. (The collection of IP addresses and access logs is a requirement of the Brazilian Civil Rights Framework for the Internet).

LGPD requires that all data processing have a legal justification (Legal Basis). We use your data to:

  • Provide our services and support: Respond to contacts and questions (Legal basis: Execution of a Contract or Pre-contractual Diligence).
  • Send communications (Newsletter/Marketing): Send news and offers (Legal basis: Consent, which can be revoked at any time).
  • Site improvement and analytics: Understand how users interact with the site to optimize our platform (Legal basis: Legitimate Interest of the Controller).
  • Comply with legal obligations: Keep access logs (IP, date, and time) for a period of 6 months (Legal basis: Compliance with a Legal Obligation - Art. 15 of the Brazilian Civil Rights Framework for the Internet).

4. Sharing and International Transfer of Data

We do not sell, rent, or share your personally identifiable information publicly or with third parties for their commercial purposes.

Sharing only occurs with essential service providers for the operation of the site (such as server hosting providers and analytics tools, like Google Analytics). As some of these partners may have servers outside Brazil (e.g., United States), there may be an International Transfer of Data, which is carried out with guarantees of compliance with LGPD by these providers.

We may also share data if required by court order or competent authorities.

5. Data Storage and Security

We only retain collected information for as long as necessary to provide the requested service or to comply with legal obligations. When we store data, we protect it within commercially acceptable technical and organizational measures to prevent loss, theft, unauthorized access, disclosure, or modification.

We remind you that, unfortunately, no data transmission over the internet is 100% secure. Caramelo AI disclaims liability for the exclusive fault of third parties (such as hacker attacks) or the exclusive fault of the user (such as improper sharing of their passwords).

6. Cookies Policy

What are cookies?

As is common practice with almost all professional websites, this site uses cookies, which are small files downloaded to your device (computer or smartphone) to improve your experience, understand your browsing behavior, and save preferences.

What cookies do we use?

  • Essential/Form Cookies: Necessary for the basic functioning of the site and to remember your details when submitting a form.
  • Preference Cookies: Allow remembering information that changes the way the site behaves or looks (e.g., language or region).
  • Third-Party Cookies (Google Analytics): We use Google Analytics to help us understand how you use the site. These cookies track things like how long you spend on the site and the pages you visit, in an anonymized way. For more information, see the official Google privacy page.

How to disable cookies?

You can prevent the setting of cookies by adjusting your browser settings (see your browser “Help” for how to do this). Be aware that disabling cookies will affect the functionality of this and many other websites you visit. If desired, we recommend keeping cookies enabled for a complete experience.

7. User Commitment

The user commits to making proper use of the contents and information that Caramelo AI offers on the site, including but not limited to:

  • A) Not engaging in activities that are illegal or contrary to good faith and public order;
  • B) Not spreading propaganda or content of a racist, xenophobic nature, gambling, illegal pornography, terrorism apology, or against human rights;
  • C) Not causing damage to the physical and logical systems of Caramelo AI, its suppliers, or third parties, to introduce or spread computer viruses or malicious software;
  • D) Respecting Copyrights and Intellectual Property (Law No. 9.610/98) on the content published on the site. Any infringement will be reported to the authorities.

8. Your Rights as a Data Subject

According to Article 18 of the LGPD, you have the right, at any time and upon request, to:

  1. Confirmation and Access: Know if we process your data and request a copy of it.
  2. Correction: Request the correction of incomplete, inaccurate, or outdated data.
  3. Anonymization, blocking, or deletion: For unnecessary, excessive data, or data processed in non-compliance with the law.
  4. Portability: Request the transfer of your data to another service provider.
  5. Deletion: Request the deletion of data processed with your consent.
  6. Information on sharing: Know with which public and private entities your data was shared.
  7. Revocation of consent: Withdraw the permission you previously gave us (such as unsubscribing from marketing emails by clicking the link at the bottom of the email).

How to exercise your rights?

To exercise any of your rights, or if you have questions about how we handle your data, please contact our Data Protection Officer (DPO) at: contato@carameloai.com.

Requests will be analyzed and answered within the legal period of up to 15 (fifteen) days, as regulated by the National Data Protection Authority (ANPD).

9. Updates to this Policy

Our policy is reviewed periodically. The content of this Privacy Policy may be changed at the discretion of Caramelo AI to reflect improvements in our processes or changes in legislation.

If there are significant changes that impact previously provided consent or the way we use your data, we will inform users through a prominent notice on our website or via email. Continued use of the site after changes constitutes your agreement to the new policy.

Last updated: May 2026.