Privacy

Your privacy. Handled with clarity.

This policy describes how Forja Digital collects, uses, shares and protects your personal data. Aligned with the LGPD (Brazilian Federal Law No. 13,709/2018).

Updated on 04/30/2026/Version 1.0

Summary

Data Protection Officer

Data collected

What we collect.

Identification. Name, email and phone number (optional) provided in contact and sign-up forms.
Communication. Messages sent via form, email or other official channels.
Browsing. IP address, browser type, operating system, pages visited and referral source.
Cookies. Session and preference identifiers, as described in our cookie policy.

Purpose

What we use it for.

Every piece of data serves a clear purpose. Nothing is collected without a reason.

Name and email

Responding to contact requests, sending requested content and Academy materials.

Phone number

Sales follow-up when requested by the data subject.

Messages

Support, qualification and relationship history.

Browsing data

Measuring audience, improving the site and protecting against abuse.

Legal basis

Processing based on the LGPD.

Consent (Art. 7, I) — forms, newsletter and optional materials.
Contract performance (Art. 7, V) — Axis, Academy and Pocket Lovable clients.
Legitimate interest (Art. 7, IX) — aggregated analytics, security and fraud prevention.
Legal obligation (Art. 7, II) — tax, accounting and regulatory requirements.

Sharing

We don't sell data. We share only what's necessary.

Processors strictly necessary to deliver the service:

Cloudflare — hosting, CDN and edge protection.
Transactional email provider — sending replies and confirmations.
Analytics tools — aggregated audience metrics.

No data is sold, rented or transferred for third-party advertising purposes.

Storage

Where it's stored. For how long.

Data is stored on cloud infrastructure protected at rest and in transit:

Newsletter and forms — Supabase (Amazon AWS). Data may transit through servers outside Brazil; we ensure contractual protection clauses compatible with the LGPD (Art. 33).
Website and edge computing — Cloudflare, with a global CDN.

Sales contacts — up to 24 months after the last contact.
Contractual data — for the applicable legal period (up to 5 years).
Browsing logs — up to 12 months.

Security

Protection at every layer.

HTTPS/TLS across all communication.
Encryption at rest for sensitive data.
Role-based access control and the principle of least privilege.
Strong authentication for administrators.
Continuous monitoring and periodic backups.
Incident response within 72 hours, with notice to data subjects when applicable.

Data subject rights

Your data. Your decisions.

Under Art. 18 of the LGPD, you may request at any time:

Confirmation of the existence of processing.
Access to your data.
Correction of incomplete, inaccurate or outdated data.
Anonymization, blocking or deletion of unnecessary data.
Data portability.
Withdrawal of consent.
Information about sharing with third parties.

Requests are answered within 15 days, through the data protection officer's channel.

Data Protection Officer

Talk about privacy.

◆ Data Controller

Forja Digital

Ricardo Anklan — responsible for personal data processing.

Brazil · Remote operation.

Data Protection Officer (DPO):

◆ DPO

Ricardo Anklan

privacidade@forjadigital.co

◆ This policy may be updated. Material changes will be announced on the site.

Questions about your data?

Talk directly to our Data Protection Officer.

Response within 15 days. No red tape.

Talk to the DPO Back to home