Privacy Policy
Last updated: 30/10/2026 · Version 2.5
This is a translation provided for convenience. In case of any discrepancy, the Portuguese version prevails.
Entre Bits respects your privacy. This policy clearly explains how we process personal data on entrebits.com.br and its services, in accordance with Brazil's General Data Protection Law (LGPD – Law No. 13,709/2018) and, for visitors from the European Economic Area, the United Kingdom and Switzerland, the General Data Protection Regulation (GDPR – EU Regulation 2016/679).
1. Who we are
Controller: Entre Bits, based in Belo Horizonte, MG, Brazil.
Data Protection Officer (DPO): privacidade@entrebits.com.br.
2. Data we process and why
| Situation | Data | Purpose | Legal basis (LGPD / GDPR) |
|---|---|---|---|
| Contact form | Name, email, phone (optional), subject, message, date and IP hash | Reply to your request and prevent spam | Pre-contractual steps and legitimate interest (art. 7, V and IX / art. 6(1)(b) and (f)) |
| Account registration | Name, email, password (stored only as an Argon2id hash), acceptance and access dates | Allow login and management of your links | Performance of a contract (art. 7, V / art. 6(1)(b)) |
| Account notifications | Notices shown in the bell (new articles, use of your links, announcements) and which ones you have read; preferred language | Keep you informed about your use of the site and Entre Bits news | Performance of a contract and legitimate interest (art. 7, V and IX / art. 6(1)(b) and (f)) |
| Account personalization | Profile photo (optional, cropped and stripped of metadata), favorite tools and assessments, preferred language and theme | Personalize your area on the site | Performance of a contract (art. 7, V / art. 6(1)(b)) |
| My history | Which tool or assessment was used, when, and a summary of the result (e.g. score, ROI) — never the text, SQL or file processed | Let you pick up where you left off | Performance of a contract (art. 7, V / art. 6(1)(b)) |
| Report by email | Assessment summary generated in your browser (for the SoD analysis, only totals and rules, no user names), sent to your account email | Send the report you requested | Performance of a contract (art. 7, V / art. 6(1)(b)) |
| Code/link login and password recovery | Email, hash of the 6-digit code and of the access link, usage dates and attempts | Allow passwordless access and secure password reset | Performance of a contract (art. 7, V / art. 6(1)(b)) |
| Newsletter | Email, date and source of consent, confirmation date, IP hash | Send new Entre Bits articles and publications | Consent (art. 7, I / art. 6(1)(a)) |
| Likes and reads on Radar | Irreversible identifier derived from IP and browser (hash), aggregated count | Show the most read and liked news and prevent duplicate votes | Legitimate interest (art. 7, IX / art. 6(1)(f)) |
| Shared links | Encrypted content, optional label, deadlines and view count | Provide the secure sharing service | Performance of a contract (art. 7, V / art. 6(1)(b)) |
| Browsing | IP address hash, technical browser data, session cookie | Security, abuse prevention (rate limiting) and site operation | Legitimate interest (art. 7, IX / art. 6(1)(f)) |
| Advertising and measurement | Google cookies and identifiers, IP, ad interactions | Show ads that keep the site free; measure performance | Consent (art. 7, I / art. 6(1)(a)) |
We do not sell personal data. We do not intentionally process sensitive data — please do not send it through the form or to Bit.
3. Tools and secure sharing
The Password Generator, the SQL, JSON and XML formatters and the other tools run entirely in your browser: what you type is neither sent to nor stored by Entre Bits. The password generator history exists only in the memory of the open tab.
In Secure Sharing, the text is encrypted in your browser (AES-256-GCM) before being sent. The key exists only in the link (after the “#” symbol), which browsers do not transmit to servers. Therefore, we have no access to the content and cannot recover it. Encrypted content is deleted as soon as it reaches the view limit, expires, is revoked or after 5 wrong password attempts.
4. Bit assistant
Bit is an artificial-intelligence assistant. Your messages and the latest messages in the conversation are sent to Anthropic, PBC (USA), which operates the AI model, solely to generate the answer. Entre Bits does not store conversation content; the history stays only in your browser session and is erased when you close the tab. We only count the number of requests (with an IP hash) to prevent abuse. Answers may contain inaccuracies and do not replace professional advice. Do not share passwords or personal data with Bit.
4.1 Newsletter
Your subscription is only activated after you confirm it through the link sent to your email (double opt-in). We only send new Entre Bits articles and publications. Every email includes an unsubscribe link; you may also request deletion at any time. Unconfirmed subscriptions are deleted after 7 days and cancelled ones after 30 days.
4.2 Bot protection
To prevent spam and automated sign-ups, we use layers of protection: session token (CSRF), hidden field, minimum fill-in time and per-visitor rate limits (with the IP turned into a hash). On the contact, registration and newsletter forms we may also use Cloudflare Turnstile, by Cloudflare, Inc. (USA), which analyses technical browser signals to tell people from bots, without puzzles and without tracking or advertising cookies. Legal basis: legitimate interest in site security (art. 7, IX / art. 6(1)(f)). Learn more in the Turnstile privacy policy.
4.3 Assessments (ROI, maturity and SoD)
The ROI Simulator and the SoD Matrix Analysis run entirely in your browser: figures and access files are not sent to Entre Bits. In the Maturity Assessment, your answers stay in your browser; to show the comparison with other companies, we send only the scores. If you choose to include your result in the comparison base, we store anonymously only the scores, segment, company size and how long the ERP has been in use — no name, email, company or IP. Legal basis: consent (art. 7, I / art. 6(1)(a)); being anonymous, this data cannot identify you.
5. Cookies and ads (Google AdSense)
We use Google AdSense to display ads. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads based on those visits.
- Optional cookies are only activated with your consent, collected by the cookie banner. Without consent, non-personalised ads may be shown, with limited data use under Google's policies.
- For visitors from the EEA, the UK and Switzerland, consent is collected by a Google-certified consent management platform (IAB TCF standard).
- You can change your choice at any time in , opt out of personalised advertising in Google Ads Settings or at aboutads.info.
- Learn how Google uses data: policies.google.com/technologies/partner-sites.
Details of each cookie are in the Cookie Policy.
6. Who we share data with
- Hosting and email providers, as processors, to run the site and deliver notifications.
- Google (ads and measurement), according to your consent.
- Anthropic (Bit assistant), as a processor, only to generate answers.
- Cloudflare (Turnstile), for bot verification on forms.
- Authorities, when required by law or court order.
Links to external sites (such as Radar sources and social networks) follow those third parties' privacy policies.
7. International transfers
Google, Anthropic and Cloudflare may process data outside Brazil, especially in the USA. These transfers rely on contractual clauses and safeguards provided for in art. 33 of the LGPD and, where applicable, on the Standard Contractual Clauses approved by the European Commission.
8. How long we keep data
| Data | Period |
|---|---|
| Contact messages | Up to 24 months, or less if you request deletion |
| User account | While active; accounts without access for 24 months are deleted, with an email notice 30 and 7 days before (just sign in to keep it) |
| Notifications | Up to 90 days |
| My history | Up to 12 months (you can clear it at any time in your account) |
| Profile photo, favorites and preferences | While the account exists; the photo can be removed at any time |
| Encrypted link content | Until the deadline, the view limit or revocation (whichever comes first) |
| Metadata of closed links | 30 days after closing |
| Rate-limit records | Up to 24 hours |
| Access codes/links and password reset | Valid for 15 and 60 minutes; deleted within 1 day after expiring |
| Newsletter | While the subscription is active; unconfirmed: 7 days; cancelled: 30 days |
| Likes on Radar | While the news item is on Radar (up to 60 days) |
| Conversations with Bit | Not stored by Entre Bits |
| Cookie choices | 12 months in your browser |
9. Your rights
At any time you may: confirm whether processing exists; access your data; correct incomplete or outdated data; request anonymisation, blocking or deletion; request portability; obtain information about sharing; withdraw consent; and object to processing based on legitimate interest (LGPD, art. 18; GDPR, arts. 15 to 22).
Registered users can download their data and delete their account directly in My account. For other requests, write to privacidade@entrebits.com.br; we will reply within 15 days. You may also lodge a complaint with Brazil's National Data Protection Authority (ANPD) or with the data protection authority of your country.
10. Security
We use HTTPS across the site, Argon2id password hashing, short-lived single-use access codes and links, end-to-end encryption for secure sharing, CSRF protection, rate limiting, IP storage only as a hash and restricted database access. No system is 100% secure; in the event of a relevant incident, we will notify affected data subjects and the ANPD as required by law.
11. Children and teenagers
The site is intended for professionals and businesses. We do not knowingly collect data from people under 18.
12. Changes and contact
We may update this policy to reflect legal changes or changes to our services. The date at the top shows the current version; relevant changes will be highlighted on the site and, for registered users, communicated by email. Questions: privacidade@entrebits.com.br.