What we keep, for how long, and why.

The controller of the data processed by this site is GENAIBR LTDA (trading as GenAI BR), Brazilian company registry no. (CNPJ) 57.843.277/0001-01, headquartered at Av. Paulista, 1106, suite 01, 16th floor, Bela Vista, São Paulo, SP, 01310-914, Brazil, represented by João Campista, who also serves as data protection officer (DPO) under article 41 of the LGPD, Brazil's data protection law.

Channel for any privacy matter: ola@genaibr.ai. We reply within fifteen days, as the law requires — in practice, within about two working days.

Reading genaibr.ai requires no account, login or cookie consent. We use no Google Analytics, social pixels, heatmaps, session recording or any third-party script. Typefaces are served from our own domain, not from Google's servers.

What happens, technically: the site is hosted on Vercel (United States). Like every web server, Vercel briefly logs the IP address, date and time, page requested and browser type of each access, for security and to serve the site. We have no visitor dashboard and do not cross those logs with any other information.

The site stores two things in your browser, neither identifying you: a cookie called 'locale', created only if you switch language, to remember your choice (lasts one year; delete it whenever you want); and a session mark ('genai:seen') that avoids showing the animated opening twice in the same visit. Neither leaves your device.

The 'Get Cinco' form asks for a single piece of data: your e-mail. Alongside it we record the origin of the sign-up (for example 'home' or 'about'), to know which page convinces more readers. Nothing else.

Legal basis: your consent (LGPD art. 7, I), given by submitting the form and confirmed through the double opt-in e-mail — nobody joins the list without clicking the link they receive.

What we use it for: sending the weekly Cinco edition, notices about relevant corrections and, at most, one notice per half-year about a new artifact of the house (Radar, State of AI Brasil). We send no third-party promotions. We never use the list for any other purpose.

Who processes it: beehiiv (beehiiv Inc., United States), the platform that sends the e-mails. The e-mail is transmitted from our server to beehiiv over an encrypted connection. This is an international data transfer, made under the provider's contractual clauses (LGPD art. 33, IX).

An honest note about the e-mails: like most platforms, beehiiv records by default whether an e-mail was opened and which links were clicked, through an invisible image and redirect links. We use that data only in aggregate (how many opened the edition) and to stop sending to people who never open. If you block images in your mail reader, the open is not recorded and nothing stops working.

For how long: as long as you are on the list. When you click 'unsubscribe' (every e-mail has that link), your address becomes inactive immediately and is deleted from our records within thirty days. If you ask by e-mail, we delete at once.

If you send an e-mail to ola@genaibr.ai — a suggestion, a correction, a briefing request — we keep the conversation for as long as needed to reply and, where there is a commercial relationship, for the period the law requires for tax and contractual documents. Legal basis: performance of a contract or preliminary steps (art. 7, V) and legitimate interest in replying to those who reach out (art. 7, IX).

Item suggestions that become entries are credited only if you ask. By default, we do not name who suggested.

Nobody, beyond the two processors needed for the site to exist: Vercel (hosting) and beehiiv (e-mail delivery). Neither may use the data for its own purposes. We do not sell, rent, trade or hand data to advertisers, partners or data brokers.

Sponsors of the house's artifacts (when they exist) receive aggregate numbers — how many people read — and never a list of e-mails.

We may be required to provide data by court order or a competent authority. If that happens, we notify the affected person, unless legally forbidden.

The LGPD guarantees, and we honor without bureaucracy: confirming whether we process your data; accessing it; correcting what is incomplete or wrong; requesting anonymization, blocking or deletion; requesting portability (we send it in an open format); knowing who we share with; withdrawing consent at any time; and objecting to processing you consider irregular.

To exercise any of them: write to ola@genaibr.ai from the registered e-mail, or with some way of confirming it is you. We reply within fifteen days. If you are not satisfied, you may complain to the National Data Protection Authority (ANPD) at gov.br/anpd.

Unsubscribing requires no e-mail at all: the link is in the footer of every edition and works in one click.

All site traffic is encrypted (HTTPS, with HSTS). The beehiiv access keys live only in the server environment, never in the browser. The site's code is reviewed by a person before each release.

No system is infallible. If there is a security incident involving personal data, we notify those affected and the ANPD within the legal deadlines, and record the event on this page.

Sala — reader profiles, with saved entries, notes and trails — does not exist yet; what exists is a prototype with example data that saves nothing. When it exists, this policy will be updated before launch, and the principles are already decided: sign-in by e-mail link, no password; everything private by default; each item made public one by one; no record of what you opened or how long you read; full export in an open format at any time; and deleting the account deletes everything, immediately.

The site and Cinco are aimed at professionals and do not knowingly collect data from people under 18. If we learn of a sign-up in that condition, we delete it.

This policy carries a version date at the top. Every relevant change — a new processor, a new purpose, a new piece of data — is published here with the date and, when it affects people already on the list, announced in the next Cinco edition. We make no silent changes.