Privacy Policy

1. Who is responsible

FB AI STUDIO LTDA, CNPJ 69.901.447/0001-38, established in Brazil and operating as FB AI Studio, is the controller of personal data processed for the purposes described here. Our contact and privacy-request channel is apps@fbaistudio.com.br.

This notice covers fbaistudio.com.br and correspondence with the studio. Our first apps have not been released. Before a new app collects data, its notice will identify its actual features, data, providers and controls.

This policy follows the Brazilian General Personal Data Protection Law, Law 13,709/2018 (LGPD), and other applicable rules. It explains our practices; it is not a request for blanket consent.

2. Information involved

The current website does not ask for access to your camera, microphone, photos, contacts or precise location. It has no file-upload, payment, account or AI-processing feature. Please do not send sensitive personal data unless it is necessary for a request and you have authority to share it.

• Website requests: infrastructure may process your IP address, requested page, date and time, browser or user-agent information, response status and security events to deliver and protect the website.
• Language: the browser provides preferred language settings. If you manually choose English or Portuguese, the site stores that choice locally under the key fbai-language. We do not maintain a visitor language-profile database.
• Correspondence: when you email us, we receive your email address, any name your email supplies, your message and attachments, plus the information needed to respond.
• Rights and legal requests: we may need limited additional information to confirm identity or authority, locate relevant records and document our response.

3. Purposes and legal bases

We use only information relevant to a specific purpose. Under the LGPD, the applicable basis depends on what is being done:

• Website delivery, basic preferences, abuse prevention and security: legitimate interests, with necessity, proportionality and your rights taken into account (articles 7 IX and 10).
• Responding to a general message: legitimate interests in handling correspondence; steps you request in connection with a potential contract may instead fall under article 7 V.
• Meeting legal obligations and responding to data-rights requests: article 7 II. Establishing or defending rights in proceedings: article 7 VI.
• An optional activity that requires consent: specific, informed consent before it begins, with a way to withdraw it. Merely browsing is not consent to advertising, sensitive-data use or unrelated purposes.

4. Cookies and browser storage

Our website code does not set advertising or analytics cookies and does not include third-party tracking pixels or session recording. The only persistent preference it writes is your manual language selection in localStorage. That preference stays until you change it or clear site data; browser settings may remove it sooner.

You can use your browser settings to clear or block this storage. The site still works: language selection can remain in the page URL, and both language pages are directly accessible. Hosting or security services may separately process technical identifiers or use necessary security cookies when a protection feature is enabled; those are not permission for behavioural advertising.

If we introduce optional tracking or other new uses, we will update this notice and provide the controls and consent required before enabling them.

5. Service providers and disclosures

Cloudflare supports our domain and, where enabled, website delivery and security. Hosting and email infrastructure providers may process the technical data and messages needed for their roles. Only people who need information to operate the site, handle your request or meet an obligation should have access to it.

Information may also be disclosed where necessary to meet a lawful demand, exercise legal rights, investigate abuse or obtain professional advice. Any business transfer involving personal data must respect applicable law and this notice. You can ask us which entities received your data and for what purpose.

We do not sell personal data or disclose it for behavioural advertising. This website does not send your content to AI providers.

6. Processing outside Brazil

Infrastructure or email providers may process information outside Brazil. An international transfer must have both an appropriate processing basis and a transfer mechanism permitted by article 33 of the LGPD and applicable ANPD rules, such as an applicable adequacy decision or approved contractual safeguards.

You can request information about relevant recipients, destinations and safeguards at apps@fbaistudio.com.br. This notice does not itself create consent for an international transfer.

7. Retention and deletion

Browser language preferences remain under your control as explained above. We retain correspondence and rights-request records for the time needed to answer, document the outcome and meet applicable legal or dispute-related obligations. Infrastructure logs are subject to the purpose, provider configuration and any legal retention requirement.

Where article 15 of the Brazilian Internet Civil Rights Framework (Law 12,965/2014) applies, application access records must be retained securely for six months; a lawful preservation requirement may extend that period. This does not authorize indefinite retention of all website information.

Data that is no longer necessary should be deleted or anonymized, except where a lawful retention ground remains. Deletion requests may therefore be subject to legal exceptions, restricted backups or preservation obligations. We will explain an applicable restriction when responding.

8. Security

We take appropriate technical and organizational precautions for the data involved, including limiting access and minimizing information requested. No website, email service or storage system can promise absolute security. Avoid sending passwords, full payment-card details or unnecessary sensitive documents by email.

If a security incident requires notice, we will inform affected people and the ANPD as required by the LGPD and applicable regulations.

9. Your rights under the LGPD

Subject to the applicable conditions and exceptions, you may request:

• Confirmation of processing, access to your data and correction of incomplete, inaccurate or outdated information.
• Anonymization, blocking or deletion of unnecessary, excessive or unlawfully processed data; deletion of consent-based data where no legal retention exception applies.
• Portability under applicable regulation, and information about public or private entities with which data was shared.
• Information about refusing consent and its consequences; withdrawal of consent; and objection to non-consensual processing that fails to comply with the LGPD.
• Review and information about criteria for decisions made solely through automated personal-data processing that affect your interests. This website does not make such decisions.

Send a request to apps@fbaistudio.com.br. There is no fee for exercising LGPD rights. We may verify identity or a representative's authority proportionately. For confirmation and access, article 19 provides for an immediate simplified response or a complete statement within 15 days. Other requests follow the applicable legal rules; if we cannot take a requested step, we will explain why.

You may also petition the ANPD and approach competent consumer-protection bodies or courts. Contacting us does not waive those options or your other mandatory rights.

10. Children and adolescents

This institutional website is not designed as a service for children and does not invite them to create accounts or submit information. If a child or adolescent's data reaches us, its treatment must respect their best interests and the safeguards required by article 14 of the LGPD and other applicable laws, including parental involvement where required.

Please contact apps@fbaistudio.com.br if you believe information about a child was supplied improperly. We will assess the request and take appropriate protective action.

11. Changes and privacy contact

We will update the date on this page when our practices or relevant requirements change, and give additional notice or request consent where required. An update does not retroactively authorize an incompatible new use of your data.

For questions, complaints or data-rights requests, contact FB AI STUDIO LTDA, CNPJ 69.901.447/0001-38, at apps@fbaistudio.com.br. Describe the request and the relevant correspondence without sending unnecessary sensitive information. Our Terms of Use explain the rules for using the website.