Privacy Policy

1. Who we are

This Privacy Policy describes how LEGALL SERVIÇOS ONLINE LTDA, registered under CNPJ nº 26.124.835/0001-47, operating under the trade name "Legalbot", processes personal data through its technology platform and digital channels, in compliance with Law nº 13.709/2018 (General Data Protection Law — LGPD).

Legalbot is a technology company specialising in the monitoring, organisation, research, structuring, and provision of regulatory, legal, normative, and legislative information from public, official, or authorised sources.

2. Scope and who it applies to

This Policy applies to the following categories of data subjects:

• representatives, administrators, and authorised users of corporate clients;
• prospective clients and visitors to our digital channels;
• candidates in recruitment processes.

The platform is intended exclusively for the corporate environment (B2B) and is not directed at children or adolescents.

3. Roles in data processing

Legalbot acts as Controller for data related to:

• client and user registration;
• commercial relationships;
• technical support;
• institutional communications;
• platform usage.

With respect to data entered or made available by clients in specific areas of the platform, Legalbot acts as Processor, with the client in the role of Controller, in accordance with the LGPD.

Regulatory, normative, legislative, and other public information made available through the platform are not considered the client's personal data and are processed in dedicated environments for the provision of contracted services.

4. Data processed and purposes

Legalbot may process, as required:

• identification and contact data, for registration, authentication, support, and contract management;
• usage and navigation data, for operations, security, audit, continuous improvement, and fraud prevention;
• communication data, for customer service, interaction records, and support;
• technical records necessary for platform stability, traceability, and security.

Processing shall observe the principles of necessity, adequacy, and minimisation set out in the LGPD.

5. Legal bases

Processing carried out by Legalbot is grounded in the applicable legal bases provided under the LGPD, including:

• performance of a contract;
• compliance with a legal or regulatory obligation;
• exercise of legal rights;
• legitimate interests;
• consent, where applicable.

6. Provision of regulatory content

Legalbot makes available regulatory, legal, normative, and legislative information obtained from public, official, or authorised sources.

The platform acts exclusively as a technology tool for the organisation, indexing, monitoring, research, classification, and structured provision of such information.

Legalbot does not create, alter, modify, replace, validate, certify, or publish official normative acts.

Wherever technically possible, the platform will provide a reference to the origin or official source of the information presented, enabling validation by the user.

7. Data sharing

Legalbot does not sell or trade personal data.

Data may be shared exclusively with:

• suppliers and service providers necessary for platform operations;
• technology infrastructure providers;
• contractually bound partners;
• public authorities when required by law or legal order.

All sharing arrangements observe adequate security, confidentiality, and data protection measures.

Any international transfers shall comply with the scenarios and safeguards set out in the LGPD.

8. Information security

Legalbot adopts technical and organisational measures consistent with market best practices for the protection of personal data and processed information.

Controls are implemented to prevent unauthorised access, loss, destruction, improper modification, or any form of inadequate processing.

Although no technology environment is absolutely secure, Legalbot continuously works to reduce risks and improve its protection mechanisms.

9. Retention and deletion

Personal data will be retained for the period necessary for:

• fulfilment of the stated purposes;
• compliance with legal and regulatory obligations;
• exercise of legal rights;
• fulfilment of contractual requirements.

Once the applicable periods have expired, data will be securely deleted or anonymised.

10. Data subject rights

Under the LGPD, data subjects may request:

• confirmation of the existence of processing;
• access to data;
• correction of incomplete or outdated data;
• anonymisation, blocking, or deletion;
• portability;
• information about sharing arrangements;
• withdrawal of consent, where applicable.

Requests will be handled within the legal timeframes. Data subjects may also contact Brazil's National Data Protection Authority (ANPD).

11. Technical operational resources

The platform and digital channels may use cookies and technical resources to enable functionality, authentication, security, session maintenance, and service performance and, where applicable, for analytics and experience improvement purposes.

These resources are intended to enable service delivery, protect information, and ensure correct use of the systems. Legalbot does not sell personal data.

Where applicable, users may manage their preferences through browser settings or resources made available by the platform.

12. Automation and artificial intelligence

Legalbot uses automation and artificial intelligence resources to support research, classification, organisation, monitoring, structuring, summarisation, and information retrieval processes.

These resources are exclusively assistive and informational in nature. The results generated do not constitute:

• legal opinion;
• legal consulting;
• official regulatory interpretation;
• binding professional guidance;
• administrative decision;
• automated decision with legal effects on data subjects.

Classifications, summaries, thematic groupings, relevance indicators, suggestions, automated analyses, and other resources generated by the platform are for exclusively operational and informational purposes.

Use of the platform does not replace the technical, legal, regulatory, compliance, or business analysis carried out by the responsible professionals within each client organisation.

13. Limitation of liability for external sources

Legalbot uses reasonable efforts to maintain the integrity, traceability, and currency of the information made available. However, Legalbot is not liable for:

• errors, omissions, or inconsistencies in original sources;
• changes made subsequently by the issuing bodies;
• publication delays by third parties;
• temporary unavailability of external sources;
• interpretations made by users based on the content provided.

Responsibility for final analysis, practical application, and decision-making remains entirely with the user and their organisation.

14. Security incidents

In the event of a security incident that may cause relevant risk or harm to data subjects, Legalbot will take appropriate containment and mitigation measures and carry out the legally required notifications to the ANPD and affected data subjects.

15. Changes to this Policy

This Policy may be updated periodically to reflect legal, regulatory, operational, or technological changes. The current version will remain available on Legalbot's official channels.

16. Contact

Requests related to privacy, data protection, and the exercise of rights may be directed to the Data Protection Officer (DPO) via email at financeiro@legalbot.com.br.