PRIVACY AND DATA

EFFECTIVE AUGUST 25, 2026

Privacy Policy

This policy explains how Newagentrail, a product operated by DUDO, processes personal and technical data when you visit the website, create an account, or use our scan, diagnosis, and monitoring services.

1. Data we process

We may process registration and authentication data, such as your name, email, and login provider; technical data, such as IP address, device, browser, logs, and security events; and communications sent to Newagentrail.

To operate the product, we process domains, URLs, and publicly accessible content from analyzed websites, as well as scan, diagnosis, and monitoring results, evidence, settings, and generated files.

When a service is purchased, we process payment status, identifiers, and administrative transaction information. Full card details are processed by Stripe and are not stored by Newagentrail.

2. How we use data

We use data to authenticate users, create and connect scans, perform diagnoses and monitoring, generate deliverables, process purchases, provide support, prevent abuse and fraud, protect the platform, and improve service quality.

Depending on the context, processing may rely on contract performance or pre-contractual steps, compliance with legal obligations, legitimate interests, and consent.

3. AI and automated decisions

AI models may assist with data normalization, evidence analysis, and quality verification. The system is instructed not to invent missing facts and records gaps when information cannot be confirmed.

Scores are Newagentrail estimates. They do not guarantee placement, recommendation, selection, or sales through any AI agent. Where applicable, you may request information and a review of automated decisions that affect your interests.

4. Who we share data with

We may use infrastructure and operating providers, including Vercel for hosting, Supabase for authentication and database services, OpenAI for AI-assisted processing, and Stripe for payments. Each provider processes only the data needed for its function and under its own terms and safeguards.

We may also share data when required by law, to protect rights or safety, or as part of a corporate reorganization. Newagentrail does not sell personal data.

5. International transfers

Some providers may process data outside Brazil. In those cases, we seek to use mechanisms and safeguards consistent with applicable law and regulations issued by Brazil's National Data Protection Authority.

6. Retention and security

We retain data for as long as needed to provide the service, meet obligations, resolve disputes, prevent fraud, and exercise legal rights. Retention periods may vary by data category and contractual relationship.

We use technical and organizational controls appropriate to the risks, including restricted access, authentication, and credential protection. No system, however, can eliminate every security risk.

7. Your rights

Under applicable law, you may request confirmation and access, correction, anonymization, blocking or deletion, portability, information about sharing, objection, withdrawal of consent, and review of automated decisions, where applicable.

We may request additional information to verify your identity before responding. You may also submit a petition to Brazil's National Data Protection Authority.

8. Cookies and local storage

We use cookies and local storage required for authentication, security, pending-scan continuity, and language preferences. The website does not currently use behavioral advertising cookies.

9. Audience, changes, and contact

Newagentrail is a business service and is not directed to children. We may update this policy to reflect changes to the product, providers, or law; the effective date will be updated on this page.

To exercise your rights or ask questions, use the channel shown below.

PRIVACY CHANNEL

While the institutional email is being configured, privacy requests can be submitted through the support channel available in your account.