Privacy policy

1. Introduction

This Privacy Policy describes how Academia Enlevo collects, uses and shares information about its users through the platforms AcademiaEnlevo.com.br, Psicanalise.digital, CineEnlevo.com.br and any other website or digital service operated by us (“Sites” or “Platform”).

This policy complies with the following legislation:

• Lei Geral de Proteção de Dados (Brazilian General Data Protection Law) (LGPD – Lei nº 13.709/2018) (Brazil);
• General Data Protection Regulation (GDPR – EU 2016/679) (European Union);
• California Consumer Privacy Act (CCPA – USA);
• Children’s Online Privacy Protection Act (COPPA – USA).

If you have any questions about this policy, please contact us by e-mail: privacidade@academiaenlevo.com.br.

2. Types of Information Collected

We collect three types of information:

2.1. Personal Information

We may collect information that identifies the user, such as:

• Full name;
• E-mail address;
• Telephone number;
• Payment data for financial transactions (stored by third-party processors, such as Stripe and PayPal);
• History of courses taken and certificates obtained;
• Contact preferences and newsletter subscriptions;
• Documents submitted for identity verification (where applicable);
• Records of interactions with student support and service.

2.2. Non-Personal Information

This includes anonymized or aggregated data, such as:

• IP address and approximate location;
• Information about the browser and device used to access our websites;
• Browsing behavior and interaction with the platform;
• Cookies and similar technologies for analyzing website usage.

2.3. Sensitive Data

We may collect sensitive data only when strictly necessary and with express consent, such as:

• Information about academic and learning preferences;
• Information about accessibility and necessary educational accommodations;
• Biometric data for identity verification (where applicable).

If you do not wish your data to be collected, you can manage your cookie settings in your browser.

3. Purpose of Data Processing

We use your information to:

• Provide and manage the courses and services purchased;
• Personalize the user experience on our platform;
• Send communications about courses, events and promotional offers (subject to consent);
• Carry out billing and process financial transactions;
• Improve the security of our services and prevent fraud;
• Comply with legal and regulatory obligations;
• Carry out statistical analyses and academic research to enhance the educational experience.

Data processing is carried out on the basis of user consent, legal obligation, performance of a contract or the legitimate interest of Academia Enlevo.

4. Data Sharing

We do not sell, rent or share our users' personal information, except in the following situations:

• With outsourced service providers (e.g., payment processors, data hosting and technical support);
• With legal authorities, upon court order or in compliance with applicable laws;
• With partner institutions for educational purposes and course certification, where applicable;
• In the event of a merger or acquisition of the company, the data may be transferred to the new controller;
• With integrated learning platforms, if the user authorizes the sharing of academic performance data.

All third parties with whom we share data must comply with security and privacy requirements in accordance with the LGPD, GDPR and CCPA.

4.1. Who we share your data with (sub-processors)

To operate the platform, we rely on service providers (processors) that process personal data on our behalf, always limited to the contracted purpose. Below are the categories of third parties and what each one is used for:

• Payments — Asaas and Pagar.me (Brazil), PayPal and Stripe (abroad): payment processing and fraud prevention.
• Hosting and infrastructure — Hostinger (application), Neon (database) and Cloudflare (CDN, security, and file and backup storage).
• Communication — Resend (e-mail delivery) and Z-API / WhatsApp (Meta) for customer service via WhatsApp.
• Analytics and marketing (only with your consent) — Google (Analytics and Ads), Meta, TikTok, Pinterest, Snapchat, PostHog and Mixpanel: audience measurement and advertising.
• Artificial intelligence — Anthropic and OpenAI: internal assistants and analyses, with minimization of the data sent.

Some of these processors are located abroad. In such cases, the international transfer is supported by contractual protection clauses compatible with the LGPD. You may withdraw your consent to analytics and marketing at any time in your browser's cookie settings.

5. Data Security

We adopt security measures to protect personal information against unauthorized access, including:

• Encryption of sensitive data;
• Restricted access control to confidential information;
• Monitoring of cyber threats;
• Secure storage on protected servers;
• Two-factor authentication (2FA) for administrative accounts.

Despite our efforts, no system is 100% secure. In the event of a data breach that compromises your information, we will notify the affected users and the competent authorities.

6. User Rights

In accordance with the LGPD, GDPR and CCPA, users have the following rights:

• To access their personal data and obtain information about the processing carried out;
• To correct incomplete, inaccurate or outdated data;
• To request the deletion of their data, subject to legal exceptions;
• To withdraw consent to the use of data, where applicable;
• To request the portability of the data to another service provider;
• To object to the processing of their data in cases of legitimate interest.

To exercise these rights, please contact us by e-mail: privacidade@academiaenlevo.com.br. You may also contact our Data Protection Officer (Encarregado pelo Tratamento de Dados Pessoais), Ulisses Alexandre Jadanhi, directly by e-mail at ulisses@academiaenlevo.com.br.

7. Data Retention Period

Data will be stored for the period necessary to fulfill the purposes described in this policy or as required by law. Payment data may be retained for a minimum period of 5 years for tax and accounting purposes.

Academic records may be retained indefinitely for purposes of certification and issuance of educational documents.

8. Changes to this Policy

This Privacy Policy may be updated periodically. Any material change will be notified to users through the website or by e-mail.

Last updated: August 2026.

9. Policy on Minors

We do not knowingly collect data from children under 13 years of age without explicit parental consent, as required by COPPA. If we become aware that we have collected data from a child without such consent, we will remove the information immediately.

For minors under 18 years of age, registration and participation in our courses require the express consent of a legal guardian.

10. Data Protection Officer and Contact

If you have any questions about this Privacy Policy or about how your data is processed, please contact us by e-mail at privacidade@academiaenlevo.com.br.

Pursuant to art. 41 of Lei nº 13.709/2018 (LGPD), the Data Protection Officer (Encarregado pelo Tratamento de Dados Pessoais) of Academia Enlevo is Ulisses Alexandre Jadanhi, who may be contacted by e-mail at ulisses@academiaenlevo.com.br.

The Data Protection Officer is the communication channel between you, as the data subject, Academia Enlevo and the Autoridade Nacional de Proteção de Dados (Brazilian National Data Protection Authority) (ANPD). The Officer is responsible for receiving complaints and communications, providing clarifications and taking the appropriate measures.

Contact

To exercise your rights as a data subject or to ask questions about privacy, please contact us by e-mail at privacidade@academiaenlevo.com.br or via WhatsApp at (61) 99522-8847. The Data Protection Officer (LGPD, art. 41) is Ulisses Alexandre Jadanhi — ulisses@academiaenlevo.com.br.