Privacy
Policy.

1. Who we are

Exponencial Management & Technology, located at SCRN 712/13 block B store 28, Asa Norte, Brasília — DF, Brazil, is the controller of the personal data collected on this site.

2. Data collected

• Contact form: first name, last name, email, phone, company, role, subject and message.
• Product/category interest: name, email, phone, company, category/product of interest and message.
• Booking: name, email, phone, company, meeting reason, selected professional, date and time.
• Technical data: IP address, browser type and navigation, for security and analytics.

3. Purpose

Data is used to respond to your contact, share information about our services, meet legal obligations and prevent fraud. We do not sell your data.

4. Sharing

We share data only with infrastructure providers (Cloudflare, Amazon Web Services, Google) that process data on our behalf, under contractual confidentiality and security obligations. Bookings may be replicated into the selected professional's Google Calendar and include a Google Meet link.

5. Use of Google data

In the administrative area, authorized accounts may use Google login. In that case, we may process the account name, email and identifier for authentication and access control. When calendar authorization is granted, we use Google Calendar permissions only to check availability and create, update or cancel events related to Exponencial appointments. We do not sell Google data, do not use it for advertising and do not grant access to third parties outside the operational purpose described in this policy.

6. Retention

Contact messages are stored for up to 180 days. Leads and interest records may be retained for up to 730 days. Bookings are retained for up to 365 days. These periods may be adjusted when there is a legal obligation or an active relationship.

7. Your rights

You may request access, correction, anonymization, portability or deletion of your data, and revoke consent, by writing to fale-conosco@exponencialadm.net.

8. Security

We apply reasonable technical and organizational practices to protect your data, including TLS in transit and role-based internal access control.

9. Updates

This policy may be updated. The version in force is always the one published on this page, with the revision date visible below.

Last revision: 2026-05-20.