i9pro.ai
Privacy Policy
last updated: 14/07/2026 · in accordance with the LGPD (Law No. 13,709/2018)
This translation is provided for convenience; in case of any discrepancy, the Portuguese version prevails.
This Policy describes how i9pro.ai ("we"), acting as controller of personal data, collects, uses, stores, shares, and protects your information, in compliance with the Brazilian General Personal Data Protection Law — LGPD (Law No. 13,709/2018), the Brazilian Internet Civil Framework (Law No. 12,965/2014), and other applicable regulations.
1. What data we collect
a) Data you provide to us
- Registration: name, email, password (stored with irreversible encryption), education, gender, date of birth, state, city, phone number, level of AI knowledge, interests and, optionally, Instagram, LinkedIn, and profile photo.
- Participation: questions, answers, suggestions, reports, and images you submit.
- Payment: billing is processed by the partner platform (Cakto); we receive the transaction confirmation (email, status, and amount) — never your full card details.
b) Data collected automatically
- Platform usage: lesson progress, practice exam results, points and achievements, access dates (for security and service improvement).
- Marketing origin: UTM parameters and the landing page of your first visit (stored in your browser and linked to your registration), so we know which channel brought you here. Visitor counting is aggregated and anonymous — no tracking cookies, no IP.
2. What we use it for and on what legal basis
| purpose | legal basis (art. 7, LGPD) |
|---|---|
| Creating and maintaining your account; delivering courses, certifications, and other features | Performance of a contract (item V) |
| Processing the subscription, issuing charges, and fulfilling tax obligations | Performance of a contract (V) and legal obligation (II) |
| Sending transactional emails (account confirmation, password reset, moderation notices) | Performance of a contract (V) |
| Security: fraud prevention, video watermarking, moderation, and audit trails | Legitimate interest (IX) and compliance with a legal obligation (II) |
| Community and marketing metrics (aggregated), product improvement | Legitimate interest (IX) |
| News and offer communications | Consent (I) — revocable at any time |
3. Who we share it with
We do not sell your data. We share it only with processors necessary for the operation of the service, under contract and our instructions:
- Supabase — database and authentication;
- Cloudflare R2 — file storage (materials, images, avatars), with temporary, signed access links;
- Resend — transactional email delivery;
- Cakto — payment processing;
- YouTube (Google) — lesson player in enhanced privacy mode (youtube-nocookie);
- Vercel — application hosting.
Some of these providers operate servers outside Brazil; in such cases, the international transfer follows art. 33 of the LGPD, with adequate contractual safeguards. We may also share data pursuant to a court order or a request from a competent authority.
4. Cookies and local storage
On your first visit, a banner lets you choose which categories you authorize. Your choice can be revisited at any time by clearing the site data in your browser.
- Essential (always active) — session cookies that keep you securely signed in, and localStorage for local preferences (e.g., where you left off in a lesson) and the origin of your first visit (UTM). Without them, the member area does not work.
- Analytics (optional, subject to consent) — usage measurement and heatmap tools (e.g., Microsoft Clarity, Google Analytics) so we can understand how the site is used and improve it.
- Marketing (optional, subject to consent) — campaign measurement and ad personalization pixels (e.g., Meta/Facebook Pixel, Google Ads), including cookies such as _fbp and _gcl_au. We may also send conversion events from our server (with irreversibly hashed email) to measure campaigns accurately.
Without your consent, the optional categories are not loaded.
5. How long we keep it
- Account data: for as long as the account exists;
- Transaction records: for the applicable tax and legal retention periods;
- Application access logs: minimum of 6 months (art. 15, Brazilian Internet Civil Framework);
- After account deletion, data is erased or anonymized, except where retention is required by law (art. 16, LGPD).
6. Your rights (art. 18, LGPD)
You may, at any time and free of charge, request:
- confirmation of the existence of processing and access to your data;
- correction of incomplete, inaccurate, or outdated data (much of it is editable in Settings);
- anonymization, blocking, or deletion of unnecessary data or data processed in non-compliance;
- portability, under the terms of the ANPD's regulations;
- deletion of data processed on the basis of consent;
- information about data sharing and about the possibility of not consenting;
- revocation of consent and review of automated decisions.
To exercise any right, write to contato@i9pro.ai — we will respond within the timeframes set by the LGPD. If you deem it necessary, you may also file a petition with the Brazilian National Data Protection Authority (ANPD).
7. Security
We adopt technical and administrative measures proportional to the risk: encryption in transit (HTTPS) and at rest, irreversibly hashed passwords, role-based access control, temporary signed file links, a content security policy (CSP), and session revocation. No system is infallible; in the event of a relevant security incident, we will notify you and the ANPD in accordance with art. 48 of the LGPD.
8. Children and adolescents
The Platform is not intended for people under 18 without the assistance of their guardians. We do not knowingly collect data from children.
9. Changes to this Policy
This Policy may be updated. Material changes will be communicated on your next access, with a request for renewed acceptance. The current version will always be on this page.
10. Data protection officer and contact
The channel for the personal data protection officer (DPO) is contato@i9pro.ai.