Privacy Policy

PRIVACY POLICY – EDUGRADUS
This Privacy Policy describes how EduGradus collects, uses, stores, and protects the personal data of users who access and use the digital educational platform.

By using the platform, the user declares that they are aware of and agree with the practices described in this document.

1. DATA CONTROLLER

EduGradus acts as the Personal Data Controller, pursuant to Brazilian Law No. 13,709/2018 (General Data Protection Law – LGPD).

For matters related to privacy and data protection, please contact:

  • Email: isabella@bitbrand.com.br

2. PERSONAL DATA COLLECTED

EduGradus may collect the following personal data:

2.1. Data provided by the user

  • Full name
  • Email address
  • Country of residence
  • Login and authentication data
  • Academic information voluntarily provided

2.2. Payment data

  • Information required to process subscriptions
  • Financial and card data are not stored by EduGradus and are processed directly by secure payment providers 

2.3. Automatically collected data

  • IP address
  • Browser and device type
  • Pages accessed and interactions on the platform
  • Cookies and similar technologies

3. PURPOSES OF DATA PROCESSING

Personal data are processed for the following purposes:

  • Creating and managing user accounts
  • Processing subscriptions and recurring charges
  • Granting access to educational content
  • Issuing certificates for free courses
  • Sending operational communications (confirmations, notices, renewals)
  • Complying with legal and regulatory obligations
  • Improving user experience and platform security

4. LEGAL BASES FOR DATA PROCESSING

Personal data are processed based on the following legal grounds:

  • Performance of a contract or preliminary procedures (Art. 7, V, LGPD)
  • Compliance with legal or regulatory obligations (Art. 7, II)
  • Consent of the data subject, when applicable (Art. 7, I)
  • Legitimate interest of the controller, subject to the rights of the data subject (Art. 7, IX)

5. DATA SHARING

EduGradus may share personal data with:

  • Payment service providers (e.g., Stripe), solely for billing and payment processing
  • Technology and hosting service providers
  • Partner educational institutions, when the user requests an academic credit evaluation
  • Public authorities, when required by law

Data sharing is always carried out in a limited, secure manner and in compliance with this Policy.

6. INTERNATIONAL DATA TRANSFER

Due to the international operation of the platform, personal data may be transferred to and stored on servers located outside Brazil.

In such cases, EduGradus adopts appropriate measures to ensure a level of protection compatible with the LGPD, including contractual clauses and international information security standards.

7. DATA STORAGE AND SECURITY

EduGradus adopts technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or improper disclosure.

Data are stored for the period necessary to fulfill the purposes described in this Policy, in compliance with applicable legal and regulatory retention periods.

8. DATA SUBJECT RIGHTS

Under the LGPD, the user may exercise the following rights:

  • Confirm the existence of data processing
  • Access their personal data
  • Request correction of incomplete or outdated data
  • Request anonymization, blocking, or deletion of data
  • Request data portability
  • Withdraw consent, when applicable
  • Request information about data sharing

Requests may be submitted through the contact channels indicated in this Policy.

9. COOKIES AND SIMILAR TECHNOLOGIES

EduGradus uses cookies to:

  • Ensure proper functioning of the platform
  • Improve user experience
  • Analyze usage and performance metrics

The user may manage or disable cookies through browser settings, acknowledging that this may impact certain platform functionalities.

10. DATA OF MINORS

The platform is not intended for individuals under 18 years of age without authorization from their legal guardians.

If improper processing of minors’ data is identified, EduGradus will take appropriate measures for deletion or regularization.

11. CHANGES TO THIS POLICY

EduGradus may update this Privacy Policy at any time. The current version will always be published on the website.

Continued use of the platform after changes implies acceptance of the new version.

12. GOVERNING LAW AND JURISDICTION

This Policy is governed by the laws of the Federative Republic of Brazil.

The courts of the jurisdiction where EduGradus is headquartered are elected to resolve any disputes, unless otherwise required by law.