guiotech

Privacy Policy

Last updated: July 19, 2026

This policy explains how Guiotech handles personal data from site visitors and students of the AI Learn platform, in line with Brazil's data protection law (LGPD) and equivalent principles. We collect the minimum necessary and never sell your data.

1. Who the controller is

Guiotech, the technology brand of João Guioto, is the controller of the data processed on this site and on the courses platform. Privacy contact: contato@guiotech.com.

2. What we collect

  • Data you provide in the contact form: name, email, phone (optional), service of interest and your message.
  • Student account data: email and, if you provide them, display name and preferred language. We use magic-link sign in, so we store no password.
  • Learning data: courses you enrolled in, lesson progress, notes you write, activity answers, score and certificates issued.
  • Payment data: name, email and the transaction identifier. Card numbers never reach our servers: payment is processed by the gateway (Stripe) in its own environment.
  • Usage data: pages visited, affiliate and social link clicks, and material download records including date, IP address and browser.
  • Technical data generated automatically by our hosting providers for security and abuse prevention.

3. Why we process it (legal bases)

  • Contract performance: creating your account, granting course access, tracking progress and issuing certificates.
  • Legal obligation: keeping tax and access records required by law.
  • Legitimate interest: platform security, fraud and download-abuse prevention, and improving content from aggregate metrics.
  • Consent: marketing communications, which you may withdraw at any time.

4. AI tools and your data

The platform offers AI study features such as lesson summaries, questions about the content and revision material. To work, the lesson text and your question are sent to an AI model provider (OpenRouter and the models it brokers).

We do not send your personal notes, your email or your payment data to those providers. We log usage (interaction type, volume and cost) to enforce limits and control cost, not to profile you.

AI answers can be wrong. They support study and do not replace the lesson material or professional advice.

5. Who we share with

We share only what is necessary with processors that run the service, under contract and for a limited purpose:

  • Supabase: database, authentication and file storage.
  • Vercel: hosting and site delivery.
  • Resend: transactional email, such as the magic sign-in link.
  • Stripe: payment processing for paid courses.
  • Bunny.net: lesson video delivery and protection.
  • OpenRouter: brokering the AI models used by the study features.

6. International transfers

Some of these providers process data outside Brazil. Those transfers rely on the legal bases set out in the LGPD and on the contractual safeguards each provider offers.

7. Cookies

We use essential cookies to keep your session, remember your language and your theme. We use no advertising or cross-site tracking cookies. If we adopt audience analytics, it will be a solution without individual identification.

8. How long we keep it

  • Business contact data: up to 2 years after the last contact.
  • Account and learning data: while your account exists. On deletion, we erase or anonymise within 30 days.
  • Purchase tax records: for the period required by law.
  • Access and download logs: up to 6 months, for security.

9. Your rights

You may request confirmation of processing, access, correction, anonymisation or deletion, portability, information about sharing, and withdrawal of consent. Your notes and progress are exportable at any time from the student dashboard.

To exercise any right, write to contato@guiotech.com. We reply within 15 days.

10. Security

We use encrypted connections, passwordless magic-link authentication, per-user data isolation in the database (each student can only reach their own data) and restricted administrative access. No system is infallible: in case of a relevant incident we will notify you and the authority as required by law.

11. Minors

The platform is intended for people aged 18 or over. We do not knowingly collect data from children. If we identify an account created by a minor without guardian authorisation, we will remove it.

12. Changes

We may update this policy. Relevant changes will be announced on the site and, for students, by email. The date at the top indicates the version in force.