Privacy Policy

1. Data collected

Full name, email, phone, time zone, password protected by hash, appointments, payments, and communications.

When you enter the mentoring room and authorize it, the session audio is recorded, transcribed, and summarized for the mentor's internal use.

Card data does not pass through the Stiff server. Payment is processed directly by Stripe.

2. Purpose

The data is used to create and authenticate the account, confirm payment, send the session link, issue receipts, provide support, and comply with legal obligations.

The audio and transcript are used to generate a session summary, available only in the mentor's administrative panel, for continuity of follow-up.

Email is the primary channel for confirmation and password recovery. The phone, when available, may be used for operational contact.

3. Sharing

We share only what is necessary with Stripe (payment) and with the email provider used to send confirmations and links.

The transcript is sent to the AI provider OpenRouter exclusively to generate the session summary. The audio is not sold or used for advertising.

We do not sell personal data.

4. Security and retention

Passwords are stored with scrypt and salt. Sessions use opaque tokens with a hash in the database. Administrative access is restricted.

Data is retained for the time necessary to provide the service and comply with legal obligations.

The recording and summary may be deleted at the data subject's request, except where there is a legal retention obligation.

5. Data subject rights

You may request access, correction, portability, or deletion of your data, in accordance with the LGPD, by emailing comercial@brenerstiff.com.

Some information may be retained due to legal obligation or for the defense of rights.