Privacy Policy

L.E.G.U AI is operated by Gabriel Eustaquio Vieira, a sole proprietor established in Brazil, who acts as the controller of the personal data processed on the platform, under the terms of the LGPD (Law 13.709/2018). This means we are the ones who define the purposes and means of the processing described in this Policy.

• Account data: name, email and login provider used.
• Images submitted for analysis and the optional associated question.
• Text result generated by the analysis.
• Credit records: purchases, debits and refunds.
• Minimal technical security data, such as date and time of access.

Data is used to authenticate access, execute the requested analysis, maintain your account history, control credit balance and prevent abuse.

• Account, analyses and credits: performance of the contract entered into with you.
• Security, fraud prevention and service improvement: legitimate interest.
• Tax issuance and billing record keeping: compliance with legal obligation.
• Non-essential cookies and marketing communications: consent, revocable at any time.

We do not sell personal data and do not share images with third parties for advertising purposes.

• Infrastructure operators and providers: hosting, database, authentication and AI provider, engaged to provide the service.
• Paddle.com Market Ltd, our Merchant of Record: processes payments, subscriptions, billing, taxes and refunds for purchases made on the site.
• Professional consultants, such as accounting and legal advisory, when necessary.
• Public authorities, when required by law or court order.

Some of these providers may be located outside Brazil. In such cases, international transfer is carried out with appropriate contractual safeguards.

Image reading is performed by an AI model run through the application's server. The provider access key is kept exclusively on the backend and is never exposed in the browser.

In Settings, you can choose not to keep the image stored along with the analysis — in that case only the result text remains in the history.

Data is kept for as long as the account exists. When you request account deletion in Profile, associated data is removed or anonymized, except for records required for legal or tax obligations, which are kept only for the period required by law.

We adopt appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration or improper disclosure.

• Encryption in transit (HTTPS/TLS) across all communications.
• Access control through authentication and per-user security rules in the database.
• Provider keys and credentials kept exclusively on the server, never in the browser.
• Access logging and monitoring for abuse detection.
• Access restricted to the minimum necessary to operate the service.

Essential cookies maintain the session and preferences. Analytics and marketing cookies are only activated with your consent and can be revoked at any time in Settings.

• Confirm the existence of processing and access your data.
• Correct incomplete or outdated data.
• Request anonymization, blocking or deletion of unnecessary data.
• Request data portability and information about data sharing.
• Object to processing based on legitimate interest.
• Revoke consent for non-essential cookies.
• File a complaint with the ANPD (National Data Protection Authority).

To exercise these rights, contact the platform's support. We respond within the timeframes established by applicable law.