US Privacy Policy

Effective August 6, 2026

1. Who controls the data

EstudoGenial is operated by Mauricio Carvalho, an individual located in Brazil, who determines how the service processes personal data. The operator is not a corporation or other legal entity and has no company, headquarters, or office in the United States. Privacy requests and questions may be sent to estudogenial.ai@gmail.com.

2. Scope and age

This Policy applies to the US EstudoGenial website and service. The commercial service is only for United States residents age 18 or older and is not directed to children or teenagers. We collect date of birth to enforce eligibility. If we learn that an account belongs to someone under 18, we may suspend it and delete or restrict associated information, subject to fraud, security, billing, and legal retention needs.

3. Data we collect and its source

4. Why we use data

We use data to create and secure accounts; enforce adult and residency eligibility; provide questions, scoring, progress reports, personalized recommendations, and requested writing feedback; apply usage limits; process subscriptions, refunds, invoices, cancellation, and payment recovery; send transactional messages; respond to support and privacy requests; prevent fraud and abuse; diagnose failures; maintain records of consent and contractual terms; comply with law; and establish or defend legal claims.

Marketing communications and optional product analytics are controlled separately and may be declined or withdrawn. Security, billing, requested educational processing, legal records, and essential service messages are not optional analytics.

5. AI processing, errors, and provider data use

Questions, explanations, recommendations, and writing feedback may be generated with Google Gemini or another disclosed AI provider. AI output may contain factual errors, fabricated statements, omissions, inconsistency, or social and data-derived bias. Do not include information in a writing submission that is not necessary for feedback, and independently verify important results.

If EstudoGenial uses a Gemini service associated with active Cloud Billing, Google's published terms state that prompts and responses are not used to improve Google's products, although limited logging and processing may occur for safety, abuse prevention, operation, and legal requirements. Unpaid Gemini services have materially different data-use terms and may use submitted content and generated responses to improve products and may involve human review. EstudoGenial therefore blocks transmission of user writing unless the deployment has explicitly confirmed a provider configuration approved for personal-content processing. Provider terms and configurations may change; we will update this disclosure and request renewed acknowledgement when a material change affects submitted writing.

6. Service providers and disclosures

We disclose only data reasonably necessary for the service:

7. International processing

The operator works from Brazil. Data may be stored or processed in Brazil, the United States, and any other country where Stripe, Google, hosting, email, infrastructure, support, or security providers and their subprocessors maintain facilities. Privacy laws and government-access rules can differ by location. We use provider agreements, access controls, minimization, and other appropriate contractual and technical safeguards where applicable, but we do not represent that data remains exclusively in one country.

8. No sale or targeted advertising

We do not sell personal data or share it for cross-context behavioral or targeted advertising. The US product does not load Meta Pixel, Google Analytics/Ads, TikTok Pixel, Hotjar, session-replay tools, data-broker SDKs, or behavioral advertising networks. If that practice changes, we will update this Policy and provide legally required notice and choices before enabling it.

9. First-party analytics and communications

Optional first-party analytics uses a limited event and property allowlist. It does not accept free-form answers, essays, email, card data, CPF, or telephone number. In the US service, an anonymous acquisition identifier is not connected to the authenticated user profile. You may change optional analytics and marketing choices in the Privacy Center. We may still send account verification, security, billing, legal, privacy-request, and service messages necessary for your account.

10. Retention

We retain personal data only for as long as reasonably necessary for the purposes described, including service delivery, security, disputes, accounting, tax, fraud prevention, and legal compliance. Current operational periods include:

Account information is retained while the account is active and for a reasonable period needed to complete deletion, prevent abuse, or meet legal duties. Billing, invoice, refund, chargeback, tax, legal-acceptance, fraud, security, backup, support, and provider records may follow different legally or operationally necessary periods. Deletion from active systems may not immediately remove data from encrypted backups or independent provider systems. Stripe, Google, email, and infrastructure providers apply their own documented retention duties. We will not claim that every record is deleted immediately.

11. Your privacy rights

We offer all US users, subject to identity verification and lawful exceptions, the ability to:

Submit requests through the authenticated Privacy Center or email estudogenial.ai@gmail.com. We may verify control of the account by a code sent to the verified email and may request proportionate information to verify an authorized agent. We aim to respond within 45 days. Where permitted and reasonably necessary, we may extend the period and will explain the extension. We may deny or limit requests that cannot be verified, conflict with another person's rights, are manifestly unfounded or excessive, threaten security, or must be limited for fraud, billing, legal retention, or other lawful reasons. Appeal by replying to the decision or emailing the privacy address with the request number; the appeal will be reviewed by a person not responsible for the initial decision where practicable.

12. Account deletion and billing records

Canceling a subscription does not delete an account. Account deletion is a separate verified request. A paid subscription must first be canceled and paid access allowed to expire, unless an eligible refund ends access immediately. When deletion is completed, sessions are revoked, educational content is removed, optional-consent records are removed or de-identified, and local identity is anonymized. Limited billing, refund, fraud, security, legal-acceptance, tax, or dispute records may be retained where required or reasonably necessary.

13. Security and incidents

We use reasonable technical and organizational safeguards appropriate to the service, including access controls, hashed passwords and refresh tokens, restricted public files, database controls, transport security in production, provider authentication, logging minimization, and operational monitoring. No system is completely secure. We investigate suspected incidents and will notify affected users and competent authorities when required by applicable law. Report a suspected security or privacy issue to estudogenial.ai@gmail.com.

14. Changes and contact

We may update this Policy as the service, providers, or law changes. Material changes will be communicated through the service or email and may require renewed acceptance. The effective date identifies the current version.

Privacy, security, support, and appeals: estudogenial.ai@gmail.com.