Privacy Policy
This page explains, in plain language, how the CS AI Platforms corporate website processes (and, mostly, how it does not process) personal data. We are a Brazilian company and comply with Brazil's General Data Protection Law (LGPD — Law No. 13,709/2018); visitors from other jurisdictions are afforded equivalent rights, consistent with international standards such as the GDPR.
1.Who we are (Controller)
CS Technologies — Brazilian company registration (CNPJ) 05.282.669/0001-37 — is the controller of any personal data processed through this website. CS AI Platforms is the artificial-intelligence product line of CS Technologies.
Privacy contact (including our Data Protection Officer): contato@cstechnologies.com.br.
2.Scope of this policy
This policy applies exclusively to the corporate website available at ai-cs.app.
The products of the line — such as GovData AI, accessed on dedicated subdomains (e.g., govdata.ai-cs.app) — process data under contracts with customer organizations and are governed by product-specific terms provided with each contract. If you use a product as a member of a customer organization, your primary data relationship is with that organization (the controller), with CS Technologies acting as processor under the agreed terms.
3.What this website does NOT collect
This website was deliberately built for minimal data processing:
- No cookies — first- or third-party (which is why you see no consent banner);
- No analytics, tracking pixels or advertising technology;
- No forms — no data is typed into or submitted through the site;
- No third-party resources — fonts are served from our own domain;
- No profiling and no automated decision-making about visitors.
4.Data processed unavoidably
Like any website, basic technical operation involves a minimum of data:
| Data | Purpose | Legal basis |
|---|---|---|
| Access logs (IP address, date/time, user agent) generated by the hosting infrastructure | Security, abuse prevention and compliance with Brazilian law (Internet Civil Framework, art. 15) | Legal obligation and legitimate interest (LGPD art. 7, II and IX; GDPR-equivalent: art. 6(1)(c) and (f)) |
Hosting is provided by Vercel Inc., which may process these technical records on servers outside Brazil (see section 6). We do not access these logs in identified form nor use them for any other purpose.
5.Contacting us by e-mail
The site offers contact via an e-mail (“mailto”) link. When you write to us, you voluntarily share your e-mail address and message content. We process this data solely to respond to your request and for pre-contractual steps you initiate, retaining it only as long as needed for the matter and legal obligations. Your address is never added to marketing lists without your express consent.
6.Sharing and international transfers
We do not sell or share personal data with third parties for commercial purposes. The technical processing in section 4 involves the following processors/providers:
- Vercel Inc. (website hosting) — United States;
- Our corporate e-mail provider, for messages under section 5.
Any resulting international transfers rely on the providers' safeguards and on art. 33 of the LGPD.
7.Your rights
You may request at any time: confirmation of processing; access; rectification; anonymization, blocking or erasure; portability; information about sharing; and review of automated decisions (we make none on this site). These rights follow LGPD art. 18 and correspond to the rights granted under the GDPR (access, rectification, erasure, restriction, portability and objection).
To exercise any right, write to contato@cstechnologies.com.br. We will respond within statutory deadlines. You may also lodge a complaint with the Brazilian National Data Protection Authority (ANPD) or, where applicable, your local supervisory authority.
8.Security
All traffic to this site is encrypted (HTTPS enforced — the .app domain is included in browsers' HSTS preload list). We apply data minimization as a principle: the best protection for data we do not collect is to keep not collecting it.
9.Children
This is a corporate website aimed at organizations and is not directed at individuals under 18. We do not knowingly collect data from children.
10.Changes to this policy
If this site ever starts collecting any additional data (for example, a contact form or audience metrics), this policy will be updated before the change takes effect, with a new version and date shown at the top. The version published on this page is always the one in force. In case of discrepancies between language versions, the Portuguese version prevails.