◆ Legal

LGPD (Data Protection)

Last updated: August 2026

1. Definitions

For the purposes of this document: (a) "Sites" means the institutional sites n45.tech and n45.ai; (b) "Platform" means the registration, authentication and product-use environment for N45.AI, available at account.n45.tech and app.n45.tech; (c) "Services" means the Sites and the Platform, together.

2. Purpose of This Document

This document details, in addition to our Privacy Policy, how N45 complies with Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018) in processing personal data collected through the Services.

3. Data Controller

The controller of personal data is Bruno Siqueira Lopes, CNPJ 05.601.834/0001-76, headquartered at Rua Carlos Mesquita, 102, Parque Renato Maia, Guarulhos/SP, Brazil, CEP 07114-200.

4. Data Protection Officer (DPO)

Our Data Protection Officer (DPO) can be reached at dpo@n45.tech for questions, requests and complaints related to personal data processing.

5. Legal Bases Used

We process personal data based on contract performance, legitimate interest, consent and compliance with legal obligations, under Article 7 of the LGPD, depending on the specific purpose of each processing activity described in the Privacy Policy.

6. Retention Period

We retain account and registration data for the duration of the contract and for up to 5 (five) years after termination, for tax and legal purposes; usage logs are anonymized after 90 (ninety) days; data submitted via the contact form is retained for as long as necessary to handle the request; and the chatbot session identifier expires when the browser is closed, under Article 9, II of the LGPD.

7. Data Subject Rights

Under Article 18 of the LGPD, you have the right to confirmation of processing, access to your data, correction of incomplete or outdated data, anonymization, blocking or deletion of unnecessary data, portability, deletion of data processed with consent, information about data sharing, and withdrawal of consent.

8. How to Exercise Your Rights

Requests can be sent to the DPO at dpo@n45.tech, stating the right you wish to exercise and sufficient information for identification. We will respond within a reasonable timeframe, subject to legal limits.

9. Response Timeframe

We aim to acknowledge receipt of a request within 5 (five) business days and complete it within 15 (fifteen) business days, extendable with justification depending on the complexity of the request.

10. Subprocessors and International Transfer

We use the following subprocessors to process data: Cloudflare (hosting, Turnstile and Workers KV), Resend (transactional email), Google Analytics 4, Sentry (error monitoring), the N45.AI API (chatbot) and Stripe (payments). Some of these providers may process data outside Brazil, adopting contractual and technical safeguards compatible with the LGPD.