Legal

Privacy Policy

Last updated: October 4, 2026

Red Lotus Tecnologia ("we", "us", or "Red Lotus") handles your personal data as described in this Privacy Policy, which explains what data we collect, why we collect it, and how we protect it, in accordance with Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018).

1. Data Controller

The data controller for the information collected through this website is:

  • RED LOTUS TECNOLOGIA DA INFORMAÇÃO LTDA – EPP
  • CNPJ: 49.623.066/0001-27
  • Trading as: Red Lotus Tecnologia

For any privacy-related request, please contact us through our contact form and indicate the subject as "Privacy" or "LGPD".

2. What Data We Collect

We collect only the data necessary to operate our website and respond to your inquiries:

  • Contact form data: name, email address, optional company name, and the content of the message you send us.
  • Analytics data (with consent): if you accept analytics cookies, we collect anonymized usage data such as pages visited, approximate location (country/region), device type, browser, referring site, and session duration via Google Analytics.
  • Browser storage: we store your cookie consent choice in your browser's local storage. On blog posts, the position of each passage you highlight is stored there too, so your highlights show up again when you come back. This data never leaves your device.
  • Conversion measurement (cookieless): when you submit the contact form, the resulting thank-you page sends an anonymized signal to Google Ads (browser information, approximate location derived from IP) so we can measure the effectiveness of our paid advertising campaigns. No advertising cookies are stored on your device.
  • Advertising measurement (with consent): if you accept analytics cookies, the OpenAI pixel also loads and reports the pages you view on this site to OpenAI, along with technical data such as browser, device, and IP-derived location, so we can measure how the campaigns we run on OpenAI's platforms perform. If you decline, the pixel is never loaded.

3. Legal Basis

We process your data under the following legal bases (LGPD Art. 7):

  • Consent: for analytics cookies and any other non-essential processing.
  • Execution of a contract or pre-contractual procedures: when you contact us about our services.
  • Legitimate interest: for essential website operation, security, and abuse prevention.

4. How We Use Your Data

  • To respond to your inquiries and provide the consulting services you request.
  • To understand how our website is used so we can improve it (only with your consent).
  • To protect our website and visitors from abuse and security threats.

We do not sell your personal data, and we do not build advertising profiles about you. We do measure how our own paid campaigns perform: on Google through cookieless conversion modeling, and on OpenAI through the pixel described in Section 5.

5. Cookies and Similar Technologies

We use three categories of storage:

  • Essential: required for the site to function (your consent choice). These are always active.
  • Analytics: Google Analytics cookies (_ga, _ga_*) that help us understand traffic patterns. These are only loaded if you accept them.
  • Advertising measurement: the OpenAI pixel, which may store an identifier in your browser so a visit can be attributed to one of our ads. It follows the same choice as analytics: accept and it loads, decline and it is never fetched.

We also run paid advertising on Google. The Google Ads tag is loaded on every page and a conversion event fires on the thank-you page after a contact form submission. Advertising consent is denied by default and we do not request it, so no advertising cookies are stored on your device. Google only receives an anonymized signal used for aggregate, modeled conversion measurement, not for personalized advertising.

You can change your analytics choice at any time using the button below.

Manage your cookie preferences for this site.

6. Data Sharing

We share your data only with the service providers strictly necessary to operate the site:

  • Formspree (Formspree Inc., United States): processes contact form submissions and delivers them to us. Formspree Privacy Policy.
  • Google Analytics (Google LLC, United States): only if you have consented to analytics cookies. Google Privacy Policy.
  • Google Ads (Google LLC, United States): receives anonymized conversion signals to measure the effectiveness of our paid advertising campaigns (cookieless mode; no advertising cookies are set on your device). Google Privacy Policy.
  • OpenAI (OpenAI OpCo, LLC, United States): receives the pixel measurement described in Section 5, and only if you accepted analytics cookies. OpenAI Privacy Policy.

International transfers to the United States are carried out under the safeguards required by LGPD Art. 33.

7. Data Retention

Contact form submissions are retained for as long as necessary to respond to your request and for a reasonable period afterwards (up to 24 months), unless we are legally required to keep them longer or you request earlier deletion. Analytics data is retained according to Google Analytics' default settings (currently 14 months). Google Ads conversion measurement data is retained according to Google Ads' default settings, and OpenAI pixel data according to OpenAI's.

8. Your Rights

Under LGPD Art. 18, you have the right to:

  • Confirm whether we process your data and access that data.
  • Correct incomplete, inaccurate, or outdated data.
  • Request anonymization, blocking, or deletion of unnecessary or excessive data.
  • Request data portability to another service provider.
  • Delete personal data processed with your consent.
  • Be informed about which third parties we share your data with.
  • Withdraw your consent at any time.
  • File a complaint with the National Data Protection Authority (ANPD).

To exercise any of these rights, please contact us through our contact form. We will respond within 15 days.

9. Security

We use reasonable technical and organizational measures to protect your data, including HTTPS transport encryption and minimizing the data we collect. No method of transmission over the internet is 100% secure.

10. YouTube API Services

We publish video lessons on our YouTube channel, Red Lotus Tecnologia, and show them in the lessons of Red Lotus Academy (academy.redlotus.com.br). Our internal publishing tool uses the YouTube API Services to upload those videos and manage their titles, descriptions, thumbnails, playlists and visibility.

  • Terms that apply to you: by watching our videos on YouTube or in an embedded player, you agree to be bound by the YouTube Terms of Service, and YouTube's handling of your data is governed by the Google Privacy Policy.
  • What our tool accesses: only our own channel, authorized by its owner. It does not access, collect, store or share any data about other YouTube users or about viewers of our videos.
  • What we store: the ids of the videos and playlists we publish, and the authorization token for our own channel, kept in a restricted key vault. Nothing else is retrieved from YouTube or kept.
  • Embedded player: Red Lotus Academy embeds videos in YouTube's privacy-enhanced mode (youtube-nocookie.com), which sets no YouTube cookies until you press play. Once you play a video, YouTube may collect data under the Google Privacy Policy.
  • Revoking access: anyone who has authorized one of our tools to access their Google account can revoke it at any time on the Google security settings page, and can ask us through our contact form to delete anything we stored.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be reflected in the "Last updated" date at the top of this page, which we recommend checking periodically.

12. Contact

For any question, request, or complaint regarding your personal data, please use our contact form.