Privacy Policy
Last updated: November 3, 2026
This policy explains how Nuplia collects, uses, shares and protects personal data when you visit nuplia.com.br or contact us through it, in line with Brazil's General Data Protection Law (Law No. 13,709/2018, "LGPD").
It covers this website and our sales contacts only. Data that customers process on Nuplia's GPU infrastructure is governed by the service agreement signed with each customer, in which Nuplia acts as a processor (operador) on the customer's behalf.
1. Who we are
The controller of the personal data described here is Nuplia Suporte e Desenvolvimento Ltda., CNPJ 65.781.099/0001-51, based in São Paulo – SP, Brazil ("Nuplia", "we").
2. Data we collect
Data you give us
- Contact form: name, work email, phone (optional, unless you choose to be contacted by phone), stage of your AI workload, estimated monthly budget, preferred contact method and, if you tick the optional box, your choice to receive news from Nuplia.
- Email and calls: whatever you choose to share when you write to sales@nuplia.com or vendas@nuplia.com, or talk to our team.
Please don't send sensitive personal data (as defined in Art. 5, II of the LGPD) through the form or by email. We don't need it to respond to you.
Data collected automatically
- Browsing data: pages visited, how you arrived (e.g. search, ad or link), approximate location derived from your IP address, device, browser and operating system, collected by Google Analytics and, when our campaigns are running, Google Ads tags.
- Technical logs: IP address, date and time, and request details, recorded by our hosting provider (Cloudflare) to deliver the site and protect it against abuse.
- Form context: with each form submission we also record the page address it was sent from.
3. Why we use it and legal bases
| Purpose | Data | Legal basis (LGPD) |
|---|---|---|
| Reply to your request, understand your needs and prepare a proposal | Contact form, email and call data | Steps prior to a contract, at your request (Art. 7, V) |
| Follow up on the conversation and keep our sales records (CRM) | Contact form, email and call data | Legitimate interest (Art. 7, IX) |
| Send news about Nuplia (newsletter and waitlist openings), only if you ticked the box in the contact form | Name and email | Consent, given in the contact form (Art. 7, I) |
| Measure site traffic and improve content | Browsing data | Consent, given in the cookie banner (Art. 7, I) |
| Measure the results of our ads (conversions) | Browsing data, ad identifiers | Consent, given in the cookie banner (Art. 7, I) |
| Operate the site securely and prevent fraud and abuse | Technical logs | Legitimate interest (Art. 7, IX) |
| Comply with legal obligations and defend our rights | Any of the above, as needed | Legal obligation (Art. 7, II) and exercise of rights (Art. 7, VI) |
We don't sell personal data, and we don't make decisions about you based solely on automated processing.
4. Cookies and similar technologies
Cookies are small files stored by your browser. Necessary items are always on. Analytics and advertising cookies are optional: they stay off until you accept them in the cookie banner, and you can change your choice at any time through the Cookie settings link at the bottom of every page.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
nuplia.lang (local storage) | Nuplia | Remembers your language choice | Until cleared |
nuplia.contactPref (session storage) | Nuplia | Tailors the confirmation page to the contact method you picked | Until the tab is closed |
nuplia.consent (local storage) | Nuplia | Remembers your cookie choices | Until cleared |
_ga, _ga_* | Google Analytics | Optional (analytics). Distinguish visitors and sessions to produce aggregate statistics | Up to 2 years |
_gcl_* and other Google Ads cookies | Google Ads | Optional (advertising). Attribute form submissions to the ad that brought you here | Up to 90 days |
While optional cookies are off, Google tags don't store cookies on your device, but may send Google basic signals without identifiers (such as a page view or a conversion) that Google uses to produce aggregate, modelled statistics. You can also block or delete cookies in your browser settings, and opt out of Google Analytics with the Google Analytics opt-out add-on. Ad personalization can be managed at My Ad Center. Blocking cookies doesn't stop the site from working.
5. Who we share it with
We share personal data only with service providers that process it on our behalf and under our instructions:
- HubSpot, Inc.: CRM that receives contact form submissions and stores our sales conversations.
- Google LLC: Google Analytics (site metrics), Google Ads (ad measurement) and Google Fonts (typefaces, which receive your IP address when the page loads).
- Cloudflare, Inc.: hosting, content delivery and site security.
- Email and productivity providers we use to correspond with you.
We may also disclose data to public authorities when required by law or court order.
6. International transfers
Although Nuplia's GPU infrastructure runs in Brazil, some of the providers above store website and contact data outside the country, mainly in the United States. These transfers rely on the safeguards in Art. 33 of the LGPD, such as standard contractual clauses, and on the providers' own data protection commitments.
7. How long we keep it
- Contact and sales data: while the conversation or commercial relationship is ongoing, and for up to 24 months after our last interaction if no contract is signed. After that we delete or anonymize it.
- News and newsletter: until you unsubscribe (every email has a link for that) or ask us to stop.
- Google Analytics data: up to 14 months, then deleted automatically.
- Technical logs: for the period set by our hosting provider, or longer when required by law (for example, the 6 months set by Art. 15 of Brazil's Internet Bill of Rights, Law No. 12,965/2014).
We may keep data longer when needed to meet a legal obligation or to exercise rights in legal proceedings.
8. Your rights
Under Art. 18 of the LGPD, you can ask us to:
- confirm whether we process your data, and give you access to it;
- correct incomplete, inaccurate or outdated data;
- anonymize, block or delete unnecessary or excessive data, or data processed in breach of the LGPD;
- port your data to another provider;
- tell you which entities we have shared your data with;
- delete data processed based on consent, and revoke that consent;
- stop processing based on legitimate interest, if you object to it.
To exercise any of these rights, email privacy@nuplia.com. We may ask you to confirm your identity, and we'll reply within the deadlines set by the LGPD. You can also file a complaint with Brazil's National Data Protection Authority (ANPD).
9. Security
We use technical and organizational measures to protect personal data, including encrypted connections (HTTPS), access restricted to the people who need it, and providers with recognized security practices. No system is completely secure, but if an incident creates a relevant risk to you, we'll notify you and the ANPD as the LGPD requires.
10. Children
This site is aimed at companies and professionals. We don't knowingly collect data from children or teenagers.
11. Changes to this policy
We may update this policy to reflect changes to the site, our providers or the law. The date at the top shows the latest version. If we make significant changes, we'll highlight them on this page.
12. Contact and Data Protection Officer
For questions about this policy or about your data, contact our Data Protection Officer (encarregado) at privacy@nuplia.com.