Privacy Policy

This Privacy Policy describes our practices regarding the collection, use, and disclosure of your information through our DISC behavioral assessment platform.

By using our service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect information to provide and improve our services. This includes:

Information You Provide

When you use our service, you may provide:

• Name and email address
• Phone number (optional)
• CPF/CNPJ for Brazilian users (required for PIX payments and to issue the invoice for the paid report)
• Your answers to the tests you take (DISC and Enneagram)
• Payment information (processed by Stripe/ASAAS)
• Company information for business accounts
• Billing address: postal code, street, number, unit, neighborhood, city and state, requested only from those who buy the paid Enneagram report

Automatically Collected Information

Traffic Source

We may collect information about how you found our service (referral source, marketing campaigns).

Device Information

We automatically collect:

• Browser type and version
• Operating system
• Device type (mobile/desktop)
• IP address
• Language preferences
• Time zone

Usage Data

We collect information about how you interact with our service, including pages visited, time spent, and actions taken.

Cookies

We use essential cookies for service functionality and analytics cookies to understand usage patterns. You can control cookies through your browser settings.

2. How We Use Your Information

We use collected information for the following purposes:

Service Delivery

To provide our core services:

• Generate your DISC behavioral profile
• Process payments and send receipts
• Provide access to your results
• Enable PDF report generation

Personalization

To customize your experience and provide relevant insights based on your profile.

Customer Support

To respond to inquiries and provide assistance with our service.

Communications

To send important updates about your account, results, and service changes.

Analytics

To understand usage patterns and improve our assessment methodology and user experience.

Legal Compliance

To comply with legal obligations and protect our rights.

Marketing

With your consent, to send promotional communications about our services. You can opt out at any time.

3. Legal Basis for Processing (LGPD Art. 7)

We process your personal data based on the following legal grounds under Brazil's LGPD:

• Contract execution (Art. 7, V): To provide the DISC test, generate your behavioral profile, and process payments
• Consent (Art. 7, I): For marketing communications, analytics and marketing cookies
• Legitimate interest (Art. 7, IX): For service improvements, platform security, and fraud prevention
• Legal obligation (Art. 7, II): For tax data retention and compliance with court orders

4. Information Sharing

Service Providers

We share data with trusted third-party providers who help us operate our service, including payment processors (Stripe, ASAAS), hosting providers (Vercel), email services (Mailgun), and database (Microsoft Azure). These providers are bound by confidentiality and data protection agreements.

Advertising Measurement

If you reached us through an ad and made a purchase, we send Google Ads the ad click identifier (gclid) and your email address turned into an irreversible cryptographic code (SHA-256 hash), so we know which ad generated the sale. Your readable email address is never sent, and Google cannot reconstruct it from the code. This processing relies on our legitimate interest in measuring how well our ads perform, and you may object to it at any time through the contact address in this policy.

Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, privacy, safety, or property.

7. Your Rights

Under applicable data protection laws, you have the right to:

• Access: Request access to your personal data
• Correction: Request correction of inaccurate data
• Anonymization or deletion: Request anonymization or deletion of your data
• Portability: Request portability of your data
• Consent revocation: Withdraw consent for data processing
• Information: Receive information about how your data is used

To exercise these rights, contact us at support@disctest.site

8. Age Restrictions

Our service is intended for users 18 years or older. We do not knowingly collect information from children under 18 without parental consent.

12. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes via email or site notice.

6. Data Retention

We retain your data according to these guidelines:

• Assessment results are retained indefinitely for your future access
• We retain your data as long as necessary to provide services
• You may request deletion of your data at any time

5. Data Security

We implement industry-standard security measures including encryption, secure servers, and access controls. However, no method of transmission over the internet is 100% secure.

9. Data Controller

ARTIFICIA TECNOLOGIA LTDA is the data controller responsible for your personal information.

10. Data Protection Officer (DPO)

In compliance with Art. 41 of Brazil's LGPD, we have designated a Data Protection Officer (DPO) responsible for acting as a communication channel between the controller, data subjects, and the National Data Protection Authority (ANPD).

To exercise your data subject rights or clarify questions about the processing of your personal information, contact our DPO:

Julio Sousa
E-mail: dpo@testesuapersonalidade.com.br

11. International Data Transfer

To provide our services, your personal data may be transferred to servers located outside Brazil. Our international providers include:

• Stripe (USA) - Payment processing
• Vercel (USA) - Hosting and infrastructure
• Mailgun (USA) - Transactional email delivery
• Google Analytics/Ads (USA) - On-site traffic analysis (with consent) and ad conversion measurement, including hashed email (legitimate interest)
• Microsoft Azure (Brazil) - Database (server located in São Paulo)

These transfers are carried out in compliance with Art. 33 of the LGPD, based on contractual clauses that ensure an adequate level of data protection.

13. Contact Us

For privacy-related questions or requests, please contact us:

ARTIFICIA TECNOLOGIA LTDA
Tax ID: 28.209.208/0001-34
E-mail: support@disctest.site