Privacy Policy

The controller of the personal data described in this Policy is Orion Research Ltda, CNPJ 68.251.708/0001-59, owner of the ProIntelAI brand ("Orion", "we").

Our Data Protection Officer (Encarregado, art. 41 of the LGPD) is Felipe Gordiano, founding partner of Orion Research Ltda, who can be reached at [email protected]. That is the channel to exercise your rights, ask about this Policy or report any suspected incident.

On the website (prointelai.com). The website uses no cookies, no audience analytics and loads no third-party scripts. Like any web server, ours receives the IP address, date and time and browser of each visitor, which may appear in technical access logs.

When you request a demo. The "Request a demo" button opens a form. The name, company, role, email and (optional) message you enter reach us by email, in a ProIntelAI team mailbox on Orion’s own email server. The sender’s IP address is used only to limit the number of submissions and is not kept with the request.

When you contact us on WhatsApp. If you prefer, the same form and the "Book a diagnostic" button open a WhatsApp chat with our sales number, with a suggested message. What you write there (for example, name, company and role) and your phone number reach us through the chat. WhatsApp is a Meta service, which processes that data under its own policy.

In the demo (app.prointelai.com). Access is personal and by invitation. We process:

• account data: name, email, company and an internal note about the invitation, entered by whoever created it at your request. The activation link is sent to that email address;
• credentials: the password you create, stored only as a cryptographic digest (argon2 hash), never in readable form;
• usage and security data: the pages you open in the demo, sign-in and activity records (audit trail), IP address, browser (user agent), date and time;
• the record of your acceptance of these documents: version, date and time, IP address and browser at the moment you ticked the acceptance box;
• your conversations with the AI assistant: the questions you write and the answers, stored in your account;
• external AI connections, if your account has this feature enabled: the name of the connected application (for example, Claude or ChatGPT), the date, the browser and the technical credentials of the connection.

Fictitious data. The companies, figures, people and brands shown in the demo ("Grupo Vértice") are made up and refer to no one. They are not personal data.

What we do not ask for. We do not ask for national ID numbers, documents, bank details or sensitive personal data (art. 5, II, of the LGPD). Please do not enter them in the demo or in the assistant either.

Each processing activity has a defined purpose and a legal basis under art. 7 of the LGPD:

• Purpose

  Answer your demo request and email you the access link

  Data

  Name, company, role, email and message

  Legal basis

  Pre-contractual steps at your request (art. 7, V)

• Purpose

  Create, grant and control your personal access to the demo (invitation, password, validity, session)

  Data

  Account data and credentials

  Legal basis

  Pre-contractual steps at your request (art. 7, V)

• Purpose

  Run the AI assistant you use in the demo

  Data

  Name and conversations

  Legal basis

  Pre-contractual steps at your request (art. 7, V)

• Purpose

  Protect the service and our trade secrets: single session, watermark with name, company and email, record of pages opened, audit trail, fraud and copying prevention

  Data

  Account, usage and security data

  Legal basis

  Legitimate interest (art. 7, IX)

• Purpose

  Understand your interest and talk to you about a subscription (including based on what you opened in the demo)

  Data

  Account and usage data, demo request, WhatsApp chat

  Legal basis

  Legitimate interest (art. 7, IX), with the right to object at any time

• Purpose

  Keep application access logs for the period required by law

  Data

  IP address, date and time

  Legal basis

  Legal obligation (art. 7, II; Brazilian Internet Civil Framework, art. 15)

• Purpose

  Prove your acceptance and defend rights in judicial, administrative or arbitration proceedings

  Data

  Acceptance record and audit trail

  Legal basis

  Regular exercise of rights (art. 7, VI)

• Purpose

  Comply with requests from authorities and legal and regulatory obligations

  Data

  As required in each case

  Legal basis

  Legal obligation (art. 7, II)

About legitimate interest. We rely on this basis only for what you can reasonably expect from an invitation-only demo of business software: protecting access and intellectual property and following up commercially. We process the minimum necessary, we say so here and on screen (the watermark is visible), and you may object at any time through the DPO channel. Objections to sales contact are always honoured; objecting to the security measures may mean ending your access, because we do not grant the demo without them.

No automated decisions. We do not make decisions about you based solely on automated processing. The AI assistant answers questions about the demo’s fictitious data; it does not assess you.

We do not sell, rent or give away personal data. It is shared only as far as necessary with:

• infrastructure and network: the system and email run on Orion’s own servers in Brazil; traffic between your browser and our servers goes through Cloudflare, which provides the secure connection (HTTPS) and network protection;
• AI model providers: the questions you ask the assistant, the screen context and your name go through Orion’s AI gateway to the provider of the language model that generates the answer;
• AI applications you connect: if you connect your account to an external AI application (for example, Claude or ChatGPT), that application reads the demo data on your behalf, and what it receives is governed by its provider’s policy. You can end the connection at any time under Account & security, AI connections;
• Meta (WhatsApp): when you choose to talk to us on WhatsApp;
• authorities: when required by law or court order.

Suppliers process the data on our behalf, for the purposes of this Policy, under contractual confidentiality and security obligations.

Some of the suppliers above (the Cloudflare network and AI model providers) may process data outside Brazil. Such transfers take place under the cases set out in art. 33 of the LGPD, with contractual safeguards consistent with Brazilian law and in line with ANPD regulations.

The demo assistant answers based on the fictitious data of Grupo Vértice. To do so, we send the model your question, the conversation history, the screen context and your name (so it can address you). Answers are generated automatically and may contain errors; check them before relying on any conclusion.

Do not enter third parties’ personal data or real, confidential information about your company in the assistant. The demo is not the place for it. You can delete your conversations from the assistant screen.

• account, usage, assistant conversations and connections: while your access is active and for up to 12 months after it ends, to follow up commercially and answer any question about the use; then deleted or anonymised;
• application access logs (IP address, date and time): at least 6 months, as required by art. 15 of the Brazilian Internet Civil Framework, and longer if an authority so requests;
• acceptance record: for as long as it may be needed to prove acceptance or defend rights (art. 16 of the LGPD);
• demo requests and WhatsApp chats: while the negotiation lasts and for up to 12 months after the last contact.

You may request deletion before these periods (see "Your rights"); we keep only what the law requires or allows us to keep.

We apply technical and organisational measures to protect data against unauthorised access, loss and alteration, including: encrypted connection (HTTPS); password stored only as an argon2 hash; personal access with an expiry date and one session per account; role-based access control; audit trail of actions; our own servers, with administrative access restricted to Orion’s team.

No system is unbreakable. That is why we also ask you to keep your password safe, not to share your access and to tell us if you suspect misuse.

Under the LGPD (art. 18), you may, at any time and free of charge:

• confirm whether we process your data and access it;
• correct incomplete, inaccurate or outdated data;
• request anonymisation, blocking or deletion of unnecessary or excessive data, or data processed in breach of the law;
• request portability of your data, under ANPD regulations;
• request deletion of your data, except for what the law requires or allows us to keep (art. 16);
• know who we share your data with;
• object to processing based on legitimate interest, including sales contact;
• where any processing relies on consent, be informed of the option not to consent and withdraw it.

To exercise any of them, write to [email protected] from your account email (or include it in the message). We may ask you to confirm your identity first, to protect your data. We reply immediately in simplified form, or within 15 days with a full statement (art. 19 of the LGPD).

You may also file a petition with Brazil’s National Data Protection Authority (ANPD), at gov.br/anpd.

Website: uses no cookies or tracking technologies.

Demo: uses only the storage strictly necessary for it to work, kept in your browser: the session token and basic data of the signed-in account, and display preferences (language, theme, pinned assistant panel, collapsed menu, filters). There are no advertising or analytics cookies. Clearing this data in your browser ends the session and resets preferences.

If we ever start using an analytics tool with cookies, it will only be switched on with your consent, asked through a dedicated notice, and this Policy will be updated beforehand.

If a security incident occurs that may cause you significant risk or harm, we will notify the ANPD and the affected data subjects, within the time limits and in the manner set by the LGPD (art. 48) and ANPD regulations, explaining what happened, which data was involved and what we are doing about it.

ProIntelAI is business software and is not intended for anyone under 18. We do not knowingly process data of children or adolescents.

This Policy covers the website and the demo. When a company subscribes to ProIntelAI and loads its own data (from its ERP, spreadsheets, payroll or banks, for example), it is the controller of that data and Orion acts as processor, handling it only on its instructions. The rules for that processing are set out in the contract and the data processing agreement (DPA) signed with the customer, which prevail over this Policy for that data.

We may update this Policy when the service or the law changes. The date of the version in force is shown at the top of the page. If the change is significant, we will tell you in the demo or by email before it takes effect and, where appropriate, ask for a new acceptance.

This Policy is available in Portuguese and English. In case of any discrepancy, the Portuguese version prevails.

Data Protection Officer of Orion Research Ltda: Felipe Gordiano, [email protected].