Privacy Policy

This policy describes how Kyrodata collects, uses and protects your personal data, in compliance with Brazil's General Data Protection Law (LGPD — Law 13.709/2018).

• Account data: email, preferred language, password (stored as a hash).
• Usage data: pages visited, filters applied, saved presets, exports performed.
• Support data: the messages you send to the support assistant and to tickets you open, together with the conversation history.
• Payment data: processed by our payment provider; we store only reference IDs (we never see your card number).
• Technical data: IP address and user-agent, for security and fraud prevention.

We process your data based on: (i) contract execution, to deliver the service; (ii) compliance with legal obligations, for tax retention; (iii) legitimate interest, for security and service improvement; (iv) consent, for analytics and advertising cookies — revocable at any time in the Cookies section below.

We share data only with service providers required for operation, in the following categories: hosting, payment processing, product analytics, error monitoring, email delivery, and natural-language processing for the analyst and support assistants. To the assistant's provider we send only the text of your question (plus the previous turn of the conversation, for context), never your account data. These providers handle data under contract and are subject to confidentiality and security obligations equivalent to ours.

The analyst assistant and the support assistant produce their answers with an artificial-intelligence model provider, and that processing happens outside Brazil, in the United States. We send the provider only the text of your question and the context of the screen you asked it from — your name, email, company and the rest of your account data are not sent, because the question is about commodities, not about you. The provider does not use this content to train models and keeps abuse records for up to 55 days before deleting them. The legal basis is performance of the contract (LGPD art. 7, V): without this processing, the service you subscribe to does not work. There is a single purpose — producing the answer you asked for. Answers are model-generated and may contain errors; they are informative and do not replace your own analysis.

Your data is encrypted in transit (HTTPS/TLS) and at rest. Passwords are stored as hashes; card data never touches our servers — it is processed directly by our PCI-DSS-certified payment provider.

Account data is kept while the account is active. Analyst conversations stay on the platform for 90 days and are then deleted automatically. Conversations with the support assistant and the tickets you open are tied to the account and deleted along with it. After deletion, personal data is erased; tax records are preserved for 5 years per Brazilian law.

You may exercise the following rights at any time:

• Download a copy of all your data in your account settings.
• Delete your account in your account settings — immediate anonymization, except mandatory tax records.
• For corrections or other requests, contact [email protected].

We use three cookie categories. Essential (session, locale, theme, consent preference) always load — the site doesn't work without them. Analytics measure aggregate usage to improve the product. Advertising sustains free content when active on news pages. The latter two only load when you accept the cookie banner. To revoke or change your choice, use the button below (also available in your account settings): it clears only the consent preference, turns measurement off and reopens the banner — your session, language and theme stay as they are.

On news pages we display ads served by partner advertising networks. These networks may use their own cookies and anonymous identifiers to: (i) measure impressions and clicks; (ii) personalize ads based on interests inferred from your browsing history across our site and others. Personalization is only enabled when you accept the "advertising" category in the cookie banner — when declined, ads still appear but are generic (no behavioral profile). For additional opt-out, check your browser's privacy settings or the ad preferences of your accounts on the networks you use.

Privacy questions or to exercise your rights: [email protected]. You may also contact the Brazilian Data Protection Authority (ANPD) at gov.br/anpd.