Privacy Policy

The controller of your personal data is EGCL Tech Ltda., registered under CNPJ no. 64.335.175/0001-32, with its registered office at Avenida Sete de Setembro, 2775, Rebouças, Curitiba/PR, 80230-010, Brazil.

For privacy matters, write to contact@barlav.com.

Registration data: name, email and password. If you sign in with Google, we receive your name, your email and your account identifier at the provider, not your password.

Usage data: the assets you track, the language you chose for your briefings, your preferences and the briefings generated for you.

Billing data: the plan, the currency, the transaction history and the subscription status. Your card details are handled directly by the payment provider and never reach our servers.

Technical data: IP address, user agent (the browser and system you use), session identifier, date and time of access, authentication records and error logs. We use the IP to estimate your region and show prices in a suitable currency.

Briefing interaction: we record when a briefing is opened, in the app or by email. This information is used only to measure engagement and improve the service.

To create and authenticate your account, run the service, assemble and deliver the briefings you asked for, charge for the subscription and support you when you reach out.

We also use data to keep the service secure, prevent fraud and abuse, and comply with legal obligations.

Performance of the contract: to create your account, generate and deliver briefings and charge for the subscription.

Compliance with legal obligations: to keep tax and access records for the periods required by law.

Legitimate interest: to keep the service secure, prevent fraud and understand whether the briefings are useful.

Consent: when we ask for your specific authorisation, you can withdraw it at any time.

We may currently share data with providers of hosting, authentication, email delivery, payment processing, monitoring, error analysis and artificial intelligence, where necessary to run the service.

This means that parts of the content handled by the service, including the assets you track, may be sent to artificial intelligence providers so the briefings can be generated.

These providers receive only what is necessary and cannot use the data for their own purposes.

We also share data with public authorities where there is a legal obligation or a court order. In the event of a corporate reorganisation, data may be transferred to the successor, with the rules of this Policy preserved.

The providers used by Barlav may change over time to improve the service or to meet technical and legal requirements.

We use cookies and similar technologies for different purposes.

Necessary: they keep you signed in. Without them, login does not work.

Preferences: we store some of your choices in your own browser, such as theme and language.

Measurement and improvement: we may use cookies or similar technologies to understand how the service is used and to improve it.

Briefings sent by email contain an image that tells us when the message is opened. If you prefer, block image loading in your email client.

We keep your data for as long as your account exists.

After your account is closed, the data will be deleted or anonymised within a reasonable period, except where there is a legal obligation or a need to retain it for the regular exercise of rights.

Traffic is encrypted, passwords are stored using secure hashing techniques and never in plain text, and internal access to data is restricted to those who need it to run the service.

No system is completely immune. If an incident happens that could pose a relevant risk to you, we will notify you and the Brazilian Data Protection Authority, as the law requires.

The Brazilian General Data Protection Law (Law 13.709/2018) grants you: confirmation that we process your data, access to it, correction of incomplete or outdated data, anonymisation or deletion of unnecessary data, portability, information about who we share it with, and withdrawal of consent.

To exercise any of them, write to contact@barlav.com. We may ask for extra information to confirm your identity before acting.

Some of the providers we use are located outside Brazil. In those cases, the transfer happens under the grounds set out in the Brazilian General Data Protection Law, and we require from them a level of protection compatible with it.

We may update this Policy to reflect changes in the service, in the providers we use or in the law. When a change is significant, we will let you know by email or in the dashboard before it takes effect.

For privacy matters, write to contact@barlav.com.

EGCL Tech Ltda., registered under CNPJ no. 64.335.175/0001-32.

Avenida Sete de Setembro, 2775, Rebouças, Curitiba/PR, 80230-010, Brazil.