Privacy policy

Who looks after the data

Daniel Bernardes, the author of Repartments, is the data controller under Brazil’s data protection law (LGPD, Law 13,709/2018).

What we keep

From the sign-up: your name, e-mail, phone (if you give it), how you prefer to be contacted, where you heard about Repartments, your field, your company’s details (if you are part of one), what you would like to explain with Repartments and how often, your interest in investing and the answers that go with it, plus the sign-up date and the version of this policy you accepted.

From using the site: only anonymous daily counts (how many visits, how many started and how many sent the form), with no IP, cookie or identifier of any kind.

For security, your IP is used when you send the form to limit attempts and check you are not a robot. It is not kept: only an irreversible code remains, deleted within 1 day.

If you are accepted into the tests: an access key for the app (kept only as an irreversible code), a random code for each computer the app was activated on (up to two; nothing is read from the computer), when the app last checked the key and its version. The app never sends code, files or your GitHub login to the site.

What we use it for

To confirm, through a link sent to your e-mail, that the address is yours, to review your sign-up, to talk to you about the tests through the channel you chose, and to understand, in aggregate numbers, where interested people come from. Nothing is sold or used for advertising.

Legal bases

Consent (LGPD art. 7, I), which you give by ticking the box on the form, to keep your sign-up and contact you about the tests.

Legitimate interest (art. 7, IX) for the form’s security: the limit on sends and the robot check.

Who processes the data

Vercel: hosts the site and runs the functions that receive the sign-up.

Neon: stores the sign-ups in a Postgres database.

Cloudflare: Turnstile checks, without asking you anything, that a person is sending the form.

International transfer

These services may process data outside Brazil, mainly in the United States, under the contractual safeguards of LGPD art. 33.

How long we keep it

Sign-up not confirmed through the e-mail link: deleted automatically within 2 days.

Refused sign-up: deleted automatically 14 days after the decision.

Unanswered sign-up: deleted automatically after 6 months.

Accepted sign-up: kept until the tests end, then deleted, with its app key and computers.

The site’s anonymous counts hold no personal data and are kept.

Your rights

At any time you can confirm whether we hold your data, access it, correct it, ask for it to be deleted and withdraw your consent (LGPD art. 18). Withdrawing consent deletes the sign-up.

You can also complain to Brazil’s data protection authority (ANPD).

Cookies and storage

The site uses no cookies for visitors. Your choice of light or dark theme stays only in your browser (localStorage). The only cookie is the panel session’s, used by the author alone.