Privacy Policy

CORUZEN develops, operates, and maintains an ecosystem of proprietary corporate systems: PALETIN (inventory count), CORUZEN SECURITY (security scanning), FRIAXIS (device management), and CORUZEN TICKETS (ticket sales), along with new products in development.

This Policy covers only the coruzen.com institutional website — the presentation portal for CORUZEN and its ecosystem. Each system listed above has its own privacy policy, published on its respective domain, governing data processing within that platform.

We only collect data when you fill out the site's contact form, including:

• Full name;
• Email;
• WhatsApp number;
• Company, industry, and employee count;
• Request type and message content.

We also process, temporarily and only in server memory, the IP address of whoever submits the form, solely to limit abusive attempts (rate limiting) and detect automated submissions. This IP address is never saved to a database.

The site also sets a technical language cookie (NEXT_LOCALE), described in Clause 6.

We process the data submitted through the form under more than one legal basis, depending on context:

• Consent: by filling out and submitting the form, you consent to the use of your data for the purpose of contact;
• Preliminary steps related to a contract: when your message involves commercial interest in an ecosystem system;
• Legitimate interest: preventing abuse, spam, and automated submissions through rate limiting and automation-detection safeguards.

Data submitted through the form is used exclusively to respond to your request, understand your company's context, and send an automatic email confirmation of receipt. We do not use this data to send marketing, newsletters, or any promotional communication without your explicit, purpose-specific consent.

We do not sell, rent, or share your data with third parties for commercial or advertising purposes. Form data only travels as far as the email (SMTP) provider CORUZEN uses to deliver the message to our team and send you a confirmation — this provider acts as our processor.

If you choose to reach us via WhatsApp or Instagram through the site's links, that conversation happens directly on those third-party platforms, subject to Meta's privacy policies, and never passes through our servers.

CORUZEN's institutional website uses only one cookie, strictly necessary for the site to function: NEXT_LOCALE, which remembers your chosen language (Portuguese, English, or Spanish) between visits. This cookie does not personally identify you, is not used for tracking, and does not require prior consent, as it falls under the strictly-necessary exception.

We do not use tracking, advertising, social media, or third-party analytics cookies on this institutional site. Ecosystem systems (PALETIN, CORUZEN SECURITY, FRIAXIS, CORUZEN TICKETS) may use their own session, authentication, and, where applicable, analytics cookies — always described in their respective privacy policies.

Messages sent through the form are not stored in a database: they are delivered by email to our team and retained according to our internal service routine, for as long as needed to respond to your contact and for commercial record purposes, unless you request deletion.

The IP address used to limit submission attempts exists only in temporary server memory during execution of the send function, is automatically discarded, and is never persisted to disk or a database.

We adopt technical measures to protect data processed on this site, including:

• Transmission exclusively over HTTPS, with modern encryption and secure transport practices;
• HTTP security headers that reinforce protection against common attacks;
• Form validation, submission rate limiting, and safeguards against automated submissions;
• Infrastructure hosted with providers that follow recognized security and availability practices.

No system is completely immune to failures or security incidents. Should an incident with relevant risk to your data occur, we will notify affected data subjects and Brazil's National Data Protection Authority (ANPD) within the timeframes and manner required by applicable law.

Our hosting infrastructure (Vercel) operates on a global server network, which may involve processing or technical caching of data outside Brazil. In such cases, we require our vendors to provide safeguards consistent with articles 33 et seq. of the LGPD.

Under the LGPD (art. 18) and, where applicable, the GDPR, you may request at any time:

• Confirmation that processing exists and access to your data;
• Correction of incomplete, inaccurate, or outdated data;
• Anonymization, blocking, or deletion of unnecessary data or data processed unlawfully;
• Portability of your data to another service provider;
• Information about who we share your data with;
• Withdrawal of consent and objection to processing based on legitimate interest.

To exercise any of these rights, write to contato@coruzen.com. You also have the right to file a complaint directly with Brazil's National Data Protection Authority (ANPD).

This site is not directed at anyone under 18 and we do not knowingly collect data from children or teenagers. If we become aware of a minor's data collected without an adequate legal basis, that data will be deleted.

As a small business, CORUZEN falls under the simplified regime set out in ANPD Resolution CD/ANPD No. 2/2022, which waives the formal appointment of a data protection officer (DPO) as long as an effective communication channel with data subjects exists. That channel is contato@coruzen.com, answered directly by our team.

This Privacy Policy may be updated periodically to reflect changes to the site, the CORUZEN ecosystem, or applicable law. The current version is always published on this page, with the update date shown at the top.

Questions, requests, or petitions related to this Privacy Policy can be sent to contato@coruzen.com.