Privacy policy (GDPR / LGPD)

Controller: [Razão social], CPF/CNPJ [CPF/CNPJ], [Endereço completo]. Data protection contact and channel for data subject requests: support@getlumeiq.com. This policy is written to meet the requirements of Brazil's LGPD and the EU/UK GDPR.

What data we process and why

• Answers, response times and test result. We use them to calculate and display your result (performance of a contract) and, in aggregated and anonymous form, to calibrate the test norms (legitimate interest).
• Name and email, when you provide them. We use them to deliver your report and receipt (performance of a contract). Marketing emails are sent only with your consent, which you can withdraw at any time.
• Payment data. Card details are entered directly with Stripe and never reach our servers. We receive only confirmation of the payment, the amount and the last digits of the card.
• Technical data (IP address and access logs), for security and fraud prevention (legitimate interest).

Cookies and pixels

Without your permission we use only what is essential for the site to work (for example, remembering your language and saving your test progress on your device). Analytics cookies (Google Analytics 4) and any advertising pixels are loaded only if you accept them in the banner, and declining is as easy as accepting. We never send your name, email or answers to these tools.

Sharing and international transfers

We share data only with the processors we need: Stripe (payments), Vercel (hosting) and an email delivery provider. Some of them are located outside your country, including in the United States. Where required, we rely on appropriate safeguards for international transfers, such as standard contractual clauses or an adequacy decision, in line with the GDPR and article 33 of the LGPD. We do not sell your data.

Retention

Answers and results are kept for 12 months or until you ask for deletion. Tax records of purchases are kept for 5 years, as required by law. Access logs are kept for 6 months.

Your rights

You can request access, correction, portability, erasure, restriction of processing and withdrawal of consent, and you can object to processing based on legitimate interest, by writing to support@getlumeiq.com. We reply within 15 days. If you are not satisfied, you may also lodge a complaint with your local data protection authority (or Brazil's ANPD).