Privacy Policy
Last updated: November 9, 2026
1. Who we are
This policy explains how VEX HOLDING LTDA, doing business as VEX AI-Tech, CNPJ (Brazilian company registration number) 61.251.108/0001-41, headquartered at Rua Jandir Domingos Bazei, 24, Jardim Europa/América, Toledo, Paraná, Brazil, postal code 85907-044, and VEX Holding LLC, headquartered in Sheridan, Wyoming (United States) (together, "VEX" or "we"), handle the personal data of people who visit the vexaitech.com website or contact us through it.
VEX HOLDING LTDA and VEX Holding LLC are joint controllers of the data described here, under Brazil's General Personal Data Protection Law (Law No. 13,709/2018, "LGPD").
Data Protection Officer (DPO): Crystian Kasuga, [email protected].
2. What data we collect
| Situation | Data | Where it comes from |
|---|---|---|
| You request a demo, an assessment or a contact | Name, email, name of your institution or company and the answers you choose to give (for example, the scholarship program or the deadline of the next scholarship call) | You, in the form |
| You book a meeting | Name, email, and the date and time you chose | You, in the Google Calendar embedded in the website |
| You talk to us on WhatsApp | Your number and the content of the conversation | You, on WhatsApp |
| You apply for a job | Name, email, LinkedIn profile (optional) and your resume as a PDF | You, in the application form |
| You browse the website | IP address, device and browser type, pages visited and where the visit came from (for example, a campaign) | Automatic collection. Audience measurement only happens if you accept cookies (see the Cookie Policy) |
| Bot protection | Technical browser signals | Cloudflare Turnstile, when forms are submitted |
On the website, we do not ask for your CPF (Brazilian taxpayer number), personal documents, income data or sensitive data. Please do not send this kind of information in free-text fields.
3. Why we use the data and on what legal basis
| Purpose | Legal basis (LGPD, art. 7) |
|---|---|
| Answer your request, schedule and hold the meeting, prepare a proposal | Preliminary procedures for a contract, at your request (item V) |
| Evaluate your application and run the hiring process | Preliminary procedures for a contract, at your request (item V) |
| Record your contact in our customer relationship software (CRM) and follow up commercially | Legitimate interest (item IX), limited to the subject you brought to us |
| Measure audience and understand how the website is used | Consent (item I), given in the cookie banner |
| Protect the website and forms against fraud and automated use | Legitimate interest (item IX) |
| Comply with legal obligations and defend ourselves in legal proceedings | Compliance with a legal obligation and regular exercise of rights (items II and VI) |
We do not sell your data and do not use it for automated decisions that produce legal effects on you.
4. Who we share it with
We use vendors that process data on our behalf, only for the purposes above:
| Vendor | What for |
|---|---|
| Cloudflare | Website hosting, bot protection (Turnstile) and the database where the contacts we receive are stored |
| Meeting scheduling (Google Calendar) and audience measurement (Google Analytics, via Google Tag Manager), the latter only with your consent | |
| Resend | Sending internal email notifications when a contact or a job application comes in (with the resume attached) |
| Meta (WhatsApp) | Conversations you start on WhatsApp |
We may also share data with authorities when the law requires it.
5. International transfer
Some of these vendors store data outside Brazil, mainly in the United States, where VEX Holding LLC is also based. When this happens, the transfer follows art. 33 of the LGPD, with contractual safeguards.
6. How long we keep it
| Data | Retention period |
|---|---|
| Contacts and meetings | Up to 24 months after the last contact, or while there is a business relationship |
| Job applications and resumes | Up to 12 months after the hiring process ends |
| Audience measurement | 14 months, according to the Google Analytics settings |
| Records kept for legal obligations | For the period required by law |
After these periods, the data is deleted or anonymized.
7. Your rights
Under the LGPD (art. 18), you may request, at any time:
- confirmation that we process your data, and access to it;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary data or data processed in breach of the law;
- portability;
- deletion of data processed on the basis of consent;
- information about who we share it with;
- withdrawal of consent;
- review of decisions made solely on the basis of automated processing.
To exercise these rights, write to [email protected]. Requests are answered within the time limits set by the LGPD. You may also file a complaint with Brazil's National Data Protection Authority (ANPD).
8. Security
We use an encrypted connection (HTTPS), role-based access control to our CRM and a record of who accesses the data. No system is completely immune to incidents. If one occurs and may pose a risk to you, we will notify you and the ANPD, as the law requires.
9. Children and adolescents
The website is intended for institutions, companies and professionals. We do not knowingly collect data from anyone under 18.
10. Changes to this policy
We may update this policy. The date at the top shows the version in effect. Significant changes will be highlighted on the website.
11. Contact
VEX HOLDING LTDA · CNPJ 61.251.108/0001-41 · VEX Holding LLC · [email protected] · DPO: [email protected]