Privacy Policy

Last updated: May 29, 2026

The i-Sensi Blog (accessible at blog.i-sensi.app) is maintained and operated by I-Sensi Tecnologia da Informacao Ltda ("I-SENSI", "we", "us"), registered under CNPJ no. 37.089.816/0001-43, with head office at Rua Florida, 1738, Conj 121, Bairro Cidade Monções, São Paulo/SP, CEP 04.565-911, Brazil. This Privacy Policy describes how we collect, use, store, and protect your personal information when using our content portal, in full compliance with the General Data Protection Law (LGPD - Brazil) and the General Data Protection Regulation (GDPR - EU Regulation 2016/679).

1. Information We Collect

We collect personal information that you voluntarily provide to us or that is automatically collected when interacting with the blog:

Registration and Subscription Data (Newsletter): Name, e-mail address, preferred language, and professional segment (e.g., engineer, manager, developer) provided when subscribing to our newsletter or downloading rich materials.
Authentication Data (Comments & Dashboard): When you register to comment or save articles, we collect your name, email, and profile picture integrated securely through the Clerk identity provider.
Browsing Data and Cookies: Traffic information, such as pages viewed, reading time, and device type, processed anonymously by Google Analytics. These cookies are only activated with your prior and explicit consent on our cookie banner.

2. How We Use Your Data

The personal data collected is used exclusively for the following purposes:

Sending the weekly newsletter with technical articles, ebooks, and news (after e-mail confirmation by double opt-in).
Managing the comments section of articles, ensuring community moderation and security.
Personalizing your experience on the user dashboard (saved articles, notification history, and biography).
Analyzing blog audience metrics to optimize the content produced.

3. Your Rights (LGPD & GDPR)

You have full control over your personal information. In accordance with current regulations, you can exercise the following rights at any time:

Right of Access and Rectification: You can view and correct your personal data by accessing the Profile Settings page on your dashboard.
Right to be Forgotten (Permanent deletion): You can request the deletion of all your personal data directly on your profile dashboard. Data deletion is irreversible; your Clerk and Convex data will be deleted, and your public comments will be automatically anonymized to 'Anonymous User'.
Revocation of Consent: You can unsubscribe from the newsletter at any time by clicking the 'Unsubscribe' link in the footer of our emails, or revoke tracking cookies by clearing your browser's cookies.

4. Sharing and Data Subprocessors

We do not sell or rent your personal data to third parties. Your data is processed securely using the following authorized subprocessors that follow international encryption and compliance standards:

Clerk Inc. (Authentication and identity management).
Convex Cloud (Cloud database with encryption at rest and in transit).
Resend Inc. (Transactional emails and newsletter confirmation delivery).
MinIO S3 / Local VPS (Secure storage for files and article cover images).

5. Data Retention

We retain your personal data for the following periods:

Account data (name, email, biography): retained while the account is active. Upon account deletion, data is anonymized immediately and permanently.
Newsletter data: retained until unsubscription. After cancellation, the email is removed from the active list within 48 hours.
Browsing data (Google Analytics): 26 months, as per Google Analytics default policy.

6. International Data Transfers

Some of our processors handle data outside Brazil:

Clerk Inc. and Resend Inc.: based in the United States. For users subject to GDPR, transfers are covered by Standard Contractual Clauses (SCCs) approved by the European Commission (GDPR Art. 46(2)(c)).
Convex Cloud: cloud infrastructure with operations in the US, with end-to-end encryption at rest and in transit.

These transfers are carried out with appropriate safeguards as required by LGPD (Art. 33) and GDPR (Arts. 44–49).

7. Minors

The i-Sensi Blog is intended exclusively for adult professionals. We do not intentionally collect personal data from individuals under 18 years of age. If we identify data from a minor, we will proceed immediately with its permanent deletion in accordance with LGPD Art. 14 and GDPR Art. 8.

8. Changes to This Policy

This Privacy Policy may be updated periodically. Material changes — affecting the purpose or legal basis of data processing — will be communicated to newsletter subscribers by email and displayed as a prominent notice on the site at least 15 days in advance. The ‘Last updated’ date at the top of this page will always reflect the most recent version.

9. Privacy Contact

If you have questions about this Privacy Policy or about the processing of your personal data by the i-Sensi Blog, please contact our Data Protection Officer (DPO), Pedro Henrique Iamondi, at: pedro.iamondi@i-sensi.io, or through our general contact email: contato@i-sensi.io. You may also lodge a complaint with your local data protection supervisory authority.