Legal

Privacy and Cookie Policy

Last updated: November 19, 2025

Denouncefy Canal de Manifestacao Ltda . (“Denouncefy”) cares about the privacy and protection of the personal data of its users, clients, employees, partners, suppliers and all other personal data subjects, and is committed to ensuring that these rights are respected, in compliance with applicable laws, especially Law No. 13,709/2018 (“Lei Geral de Proteção de Dados Pessoais” – Brazilian General Personal Data Protection Law – or “LGPD”).

The purpose of this Privacy Policy (“Policy”) is to inform users of the Denouncefy website (https://denouncefy.com/), clients, partners, suppliers and other data subjects how their personal data will be processed when they access and use the website, or when they interact with Denouncefy through any other means.

If you have any questions about the content of this Policy, please contact our Data Protection Officer (DPO) directly at the following e-mail address: support@denouncefy.com

1. How do we collect your personal data?

When you access and use our website or when you interact with Denouncefy through other means, we may collect your personal data in different ways, such as those indicated below:

When you provide the information yourself, when you fill in your data to subscribe to our newsletter, to download our free content, to request further information about our services, to take part in recruitment processes, or when you contact us directly through other means or communication channels, such as telephone, text message, e-mail or messages on our social media.
Through the automatic collection of data, such as information about your device type, your device’s unique identifier, browser type and geographic location, by means of your browser’s tools and other technologies, such as geographic location, session recordings and cookies (see section 7 of this Policy).
By receiving your personal data through referrals or from other people who share your data with us to enable your participation in recruitment processes conducted by Denouncefy.
By receiving your personal data from our partners, service providers, suppliers or third parties, such as in cases where we have business relationships with your employer, in which case we may receive your personal data to ensure our communication and to confirm your identity as an employee of that company. We also receive your personal data from our clients, with whom you have a commercial relationship or an employment relationship, in order to provide our certification services.

2. For what reasons do we collect your personal data?

Denouncefy processes your personal data for a number of purposes, according to your relationship with us and the way you interact with Denouncefy. The main purposes for which we collect, process or otherwise handle your personal data include the following:

To promote our activities. We will process your personal data to send you our newsletter and updates about our services, studies, news, articles, videos or any other content or material we produce, in order to promote our activities.
For marketing and for sending information about our products or services. If you already have a commercial relationship with us or have interacted with us before, or if you have signed up to receive Denouncefy updates, to download our materials or to contact us about our services, we may process your personal data for marketing purposes and to send you information about the services provided by Denouncefy.
To contact potential clients, leads and prospects. If you have filled in the forms on our website or contacted us directly to ask questions or request a quote for our services, or to download our content from the website, or if we identify that you or your organization may be interested in our services, we will process your personal data to promote our activities and to contact you and share information about the services made available by Denouncefy.
To improve the quality of advertisements. We will process your personal data to target our marketing campaigns and segment content according to your interests, so that you receive personalized information that may be more appropriate for your profile.
To answer your questions, compliments, complaints and suggestions, and to communicate with you. When you contact us, whether through our website, by telephone, by e-mail or by any other means of communication, we will process your personal data so that we can communicate with you, answering your questions, compliments, complaints or suggestions, as well as any message you have sent us, including about technical problems using our website.
To conduct satisfaction surveys. We may process your personal data to carry out satisfaction surveys, in order to identify whether the services we provide are being performed satisfactorily and with excellence, and what can be changed so that usability and operability keep improving.
To recruit new employees. When you send us your résumé through our website, by e-mail, social media, instant messaging apps, among others, or when we receive your résumé from third parties, or when we have an open recruitment process and are searching for professionals in the market, we will process your personal data for the purpose of recruiting new employees, contacting them and enabling them to take part in all stages of the respective recruitment processes, such as interviews, group dynamics and other activities inherent to the recruitment process, in order to assess the compatibility of your professional profile with the characteristics of the open position.
To provide our services. We will process your personal data when necessary to conduct audits for our clients’ certification process, including by sharing such data with external auditors and the government bodies responsible for issuing the certificates.
To analyze the use of our website. When you access and browse our website, we will process your personal data to understand aspects related to the use of the website, such as the pages visited and the duration of visits, content downloaded from the website, the most used tools, among other aspects related to the use of the website, in order to improve the content provided to visitors, clients and data subjects; we will also process your personal data to identify the engagement rate of the e-mails we send and of interactions with the content we publish, so that we understand which of the materials we produce are best received by our users.
To ensure the security of our website. We will process your personal data to ensure the security of the website, assessing unusual patterns in its use, unexpected high volumes of access requests, attempts to log in with invalid usernames and passwords, among other actions that may indicate a cyberattack or an attack against the confidentiality, integrity or availability of our systems.
To comply with legal or regulatory obligations or court orders. When we need to comply with legal or regulatory obligations or court orders, we will process the personal data necessary for those purposes, including by sharing such data with public bodies and with the Judiciary
To defend ourselves in judicial, administrative or arbitration proceedings. When necessary, we will process your personal data to defend our interests in judicial, administrative or arbitration proceedings brought by you or by third parties against us, or brought by us against you or against third parties.
To ensure the security of our facilities and employees. If you visit our physical facilities, we will process your personal data to ensure the security of our employees and our facilities, including the security of the information we store, whether personal data, trade secrets or other corporate information.
To protect your health and the health of our employees and third parties. If you visit our physical facilities in person, we will process your personal data to ensure that you, our employees or third parties do not show any symptoms of an infectious and contagious disease that could compromise everyone’s health.
To evaluate new acquisitions. We will process your personal data when necessary in the process of evaluating new acquisitions of products, services or equity interests in other organizations, especially during the legal or tax due diligence process, during which we may have access to information about employees of the organizations we are evaluating as business partners or as potential acquisitions of equity interests.
To investigate any reports. When you file or are involved in a report made through our Whistleblower Channel concerning conduct inconsistent with our corporate values or in breach of the legislation in force, we may process your personal data to investigate the reports made and, if you were the whistleblower and choose to disclose your identity, to report to you the outcome of the process relating to the reports, if applicable.
Holding meetings, videoconferences or conference calls. We will process your personal data to hold meetings, videoconferences or conference calls, including, depending on the means used, your image and voice, as well as identification and electronic correspondence data, to send invitations and links to access the meetings.
To carry out internal audits. We will process your personal data when necessary to carry out internal audits of our platforms and systems, including financial, tax and accounting audits, audits of compliance with the laws and regulations to which we are subject, audits for Denouncefy’s accreditation and certification processes, audits of financial and risk controls, audits for the reorganization, sale, assignment or transfer of part or all of our assets, or any other audits that are necessary or relevant for the proper development of our business.
To receive referrals from third parties. We will process your personal data when we receive referrals from third parties about your potential interest, or the potential interest of your organization, in hiring our services, allowing us to subsequently contact you to present our services.

3. What data do we collect?

To achieve the purposes indicated above, we may process one or more of the following personal data, to the extent necessary for the respective purposes:

User registration data. When you are a user of the website, we will process data such as your e-mail address so that you can receive our newsletter and marketing e-mails. So that Denouncefy’s Sales team can contact you about our services and quotes, as well as so that you can download our content from the website, we will process the data filled in on the forms, such as your full name, e-mail address, telephone number, job title and the respective company.
Usage and device data. We will process data related to your use of the website, such as clicks, page scrolling, cursor scrolling and pages visited, duration of visits, geolocation, date and time of access, your device’s IP address, browser used, device type, language preference, features used, registrations made, among others.
Other information. We will process additional data that may be voluntarily entered by users in résumés or in communications sent to Denouncefy through the “Contact” area of the website, by e-mail, mail, telephone or any other means.

4. With whom is your personal data shared?

We may share your personal data with:

Companies of our Economic Group. We may share your personal data with the other companies of our economic group, in order to improve our products or services and to gain efficiency in our business, such as when single or integrated systems are used among companies of the same group.
Our partners, service providers and suppliers. To carry out our business activities, we maintain relationships with and engage a number of partners, service providers and suppliers that are essential to our business. Some of these partners and suppliers may need access to the personal data we collect to perform their functions as providers of cloud data hosting services or of solutions for sending e-mail communications, auditors, banks and affiliated companies, in which cases we will share your personal data with them. We assess all of our partners and suppliers, requiring that personal data be processed in accordance with all applicable laws and ensuring information security, so as to minimize any risks in data sharing.
External Advisors. We may share your personal data with external advisors who provide services to us, including financial, accounting, legal or technical advisors and auditors, who need access to the data to carry out the activities for which they were engaged.
Government Authorities. We may share your personal data with any and all Government Authorities that request it, including bodies that oversee labor activities, in order to comply with our legal or regulatory obligations, as well as with government agencies (autarquias) for the provision of our certification services to clients.
Judiciary. We may share your personal data with bodies of the Judiciary whenever necessary to comply with a court order, with our legal or regulatory obligations, or for the regular exercise of our rights.
Police Authorities. We may share your personal data with police authorities or bodies with police powers, such as the Ministério Público (Brazilian Public Prosecutor’s Office), whenever we understand that there is a suspicion or confirmation of any unlawful and criminal act, when necessary to protect our employees, our rights and our property, even when there is no legal or regulatory obligation requiring such sharing.
With third parties interested in combining with or acquiring our business. We may share your personal data with third parties interested in combining with or acquiring our business, with whom we are negotiating potential merger, acquisition or incorporation transactions involving Denouncefy, its business units or its specific assets, either during the due diligence phase carried out by such third parties on Denouncefy’s business or at a later time, with its definitive transfer to the acquiring company or person, when applicable. In the event of any insolvency or reorganization proceeding involving Denouncefy, your personal data may also be shared with third parties that acquire our business or assets.
With third parties designated by you. We may share your personal data with third parties designated by you, upon your request and based on your consent.

5. What are the legal bases that authorize the processing of your personal data?

All of our personal data processing operations are always carried out based on a legal basis provided for in the applicable legislation, according to the particularities of each data processing activity.

The legal grounds authorizing the processing of your personal data that we rely on to carry out our processing activities include the following:

Compliance with a legal or regulatory obligation. In certain situations, we process your personal data on the basis that it is necessary to comply with a legal or regulatory obligation.
Performance of a contract. When we enter into a contract with you, or when we are carrying out preliminary procedures related to the contract, we will process the personal data necessary for the performance of the contract, such as, for example, your full name, e-mail address, telephone number and address.
Regular exercise of rights. We may process your personal data when necessary to enable the regular exercise of our rights under contracts, or in administrative, judicial or arbitration proceedings, such as, for example, stating your registration data in a lawsuit filed by you against Denouncefy.
Protection of life or physical safety. We will process your personal data when necessary to protect your life or physical safety or that of third parties, such as, for example, when measuring your temperature before allowing you to enter one of our physical facilities, to ensure that you do not show signs of infection by infectious and contagious diseases that could infect our employees or third parties.
Legitimate interest. We will process your personal data when we have a legitimate interest in the processing, except where your fundamental rights and freedoms prevail, such as, for example, when we promote our activities by sending e-mails to our clients.
Fraud prevention and security of the data subject. We will process your personal data when necessary to ensure fraud prevention and the security of the data subject, in processes for identifying and authenticating registrations in electronic systems.
Consent. When we have no other legal basis that allows the processing of your personal data, we may process your personal data based on your free, unequivocal and informed consent, which may be withdrawn at any time, free of charge and easily.

For further details about the legal basis used in a specific processing of personal data carried out by us, please contact our DPO at the following e-mail address: support@denouncefy.com

6. For how long is your data processed,

Denouncefy is committed to processing your personal data only for the period necessary to achieve the specific purposes of each processing activity, retaining the data for the shortest possible time, taking into account all existing legal and regulatory obligations and the need to defend Denouncefy’s interests in judicial, administrative or arbitration proceedings.

Accordingly, the retention periods for each category of personal data are defined by Denouncefy according to the specific characteristics of each processing activity, including the nature of the data, the purposes of the processing, existing legal or regulatory obligations, among other criteria relevant to such definition.

In certain cases, we have legal obligations that require personal data to be kept for specific periods, such as data on your IP address and the date and time of each access to our website, which must be retained for at least 6 months, in compliance with article 15 of the Marco Civil da Internet (Brazilian Internet Civil Framework).

For more information about specific retention periods, please contact us at support@denouncefy.com

7. Cookies

Cookies are text or image files made available on our website and stored on the devices used by the Users who access it, for the operation, performance and optimization of browsing. These cookies may also be used to assess performance metrics, enable the website to function properly and make it more secure, provide a better user experience, understand how the website works and where it needs to be improved, and collect information about user behavior. There are several types of cookies. On Denouncefy.com, we use the following cookies:

Strictly necessary cookies. These are essential for the operation of our website and to ensure its security and proper performance; without them, it would not work properly.
Preference cookies. These store information about your preferences, such as, for example, your language and region, allowing a better browsing experience on the website.
Analytics cookies. These collect information about your behavior while browsing our website, such as the pages accessed, the duration of the visit and the least accessed pages, so as to allow us to improve the quality of the website.

We use cookies based on our legitimate interest, but if you object to their use, you may refuse the installation of these cookies or remove them from your browser or device, except for strictly necessary cookies, which are essential for the website to function properly. An example of the cookies we use are those provided by Google Analytics, which helps us understand how users interact with our website so that we can then find opportunities to improve our services. If you wish to manage your cookie preferences, you can configure your browser or device to remove them. However, by doing so, you acknowledge that some features may not work properly and that your experience with Denouncefy may not be as personalized, compromising the usability of the website.

Each browser provides its own means of configuring cookies. When accessing the respective websites, you will be subject to the privacy policies of other companies, which may not be consistent with or similar to the terms of this Policy. To learn more about how to manage and delete cookies in your browser, visit:

How to remove cookies in Google Chrome
How to remove cookies in Mozilla Firefox
How to remove cookies in Internet Explorer
How to remove cookies in Safari

On app.denouncefy.com, our communication channel software, they are not used.

8. What are your rights as a personal data subject?

You have a number of rights in relation to your personal data, and Denouncefy is committed to fully respecting them. The rights available to you include the following:

Confirmation of the existence of processing. To ask whether we process your personal data, confirming whether or not such processing exists.
Access to data. To request a copy of your personal data processed by us, by secure and reliable electronic means or in printed form, according to your preference.
Rectification. To request the correction of your personal data that is incomplete, inaccurate or out of date.
Anonymization, blocking or deletion. To request the anonymization, blocking or deletion of your personal data in cases where unnecessary or excessive data is processed, or data is processed in breach of the legislation.
Portability. To request the portability of your personal data to other content platforms, in accordance with the regulations issued by the Autoridade Nacional de Proteção de Dados (Brazilian National Data Protection Authority), subject to Denouncefy’s commercial and industrial secrets, if any.
Information about sharing. To request information about the public and private entities with which we share your personal data.
Information about the possibility of refusing consent. To receive information about the possibility of not providing your consent, when consent is the applicable legal basis for the processing of personal data, with an indication of the consequences of such refusal.
Withdrawal of consent. To withdraw your consent easily and free of charge, simply by communicating your decision to Denouncefy’s DPO. It is important for you to know that the withdrawal of consent does not invalidate or render unlawful the personal data processing activities carried out before the date of withdrawal.
Objection to processing. To object to the processing, stating your reasons for doing so, in cases where consent is not the applicable legal basis for the processing of your personal data and where there is any non-compliance with the LGPD. Denouncefy will assess whether or not your objection is justified, taking the necessary measures to suspend the processing or informing you of the grounds on which it understands that the processing is lawful and permitted.
Complaint. To file a complaint regarding the processing of your personal data by Denouncefy with the Autoridade Nacional de Proteção de Dados. However, we hope that, before doing so, you will give us the opportunity to respond directly to any questions or complaints you may have. Our DPO is available to clarify any questions and to help you with the processing of any complaints.
Deletion of data processed with consent. To request the deletion of your data in cases where your consent is the legal basis for a given processing activity, except where we may continue to store the data when necessary to comply with a legal or regulatory obligation, or to defend our interests in judicial, administrative or arbitration proceedings.

You may exercise all of these rights at any time, free of charge, unless the charging of a fee is permitted under the legislation or regulations in force, and Denouncefy undertakes to use its best efforts to meet your requests transparently and promptly.

To ensure that the rights are being exercised by you or by your duly appointed legal representative, Denouncefy may request the information or proof of your identity that is necessary to prevent fraud and protect your privacy, so that your personal data is not shared with anyone who is not authorized to receive it.

We will respond to your requests within a reasonable period, in accordance with the applicable legislation, bearing in mind that we will only be able to respond to some requests after receiving the confirmations provided for above.

In certain cases, such as when your request is particularly complex or when we receive a high volume of requests at the same time, our response may not be as prompt as we would like. On such occasions, we will always keep you informed and updated on the progress of your request.

9. Information Security

Denouncefy adopts technical and organizational measures, based on market best practices, to protect your personal data against unauthorized access or unlawful or accidental situations of destruction, loss, alteration, communication or any other form of inappropriate processing. Your data is stored in a segregated and secure operating environment that is not accessible to the public.

The measures we adopt to protect your personal data include: access controls, asset password management (encryption), monitoring of access to local networks and of remote connections via VPN, user authentication, antivirus, firewall, maintenance of backup copies, periodic testing and scanning of systems, among others.

We maintain administrative, technical and physical safeguards to support the protection of the personal information you share with us. These actions are associated with the effort to prevent security incidents, such as loss, misuse and unauthorized access, disclosure, alteration, destruction or any counterattacks perpetrated by malicious persons, which may be highly sophisticated and innovative, using techniques and methods previously unknown even to the best information security tools.

We know that no transmission over the internet is 100% secure; therefore, the security of your data also depends on your adoption of reasonable measures when using your devices and software. If you identify or become aware of anything that may compromise the security of your personal data, or of any possible vulnerability in our website or systems, please contact us.

10. Third-Party Websites

Our website may provide links to third-party websites. These websites, in turn, have their own privacy policies, which may not be compatible with this Policy. We recommend that you consult the respective privacy policies of these third parties to learn about the personal data protection practices they adopt. Denouncefy is not responsible for the regularity of the data protection practices of third-party websites, nor for their content, which is in no way validated, ratified or endorsed by Denouncefy.

11. How to contact us

If you have any questions about this Policy or about the way your personal data is processed by Denouncefy, or if you wish to submit complaints, suggestions or comments about our personal data processing practices, do not hesitate to contact us.

We have a duly appointed Data Protection Officer (DPO), who is ready to answer all of your questions or complaints and is the point of contact for your communications with Denouncefy regarding the processing of your personal data.

Our DPO can be contacted directly at the following e-mail address: support@denouncefy.com

12. Controller Details

Denouncefy Canal de Manifestacao Ltda ., a limited liability company (sociedade limitada), enrolled with the CNPJ/ME (Brazilian National Registry of Legal Entities) under No. 29.325.233./0001-46, headquartered at Avenida Ataulfo de Paiva, 1079, 6ºandar, Leblon, in the City of Rio de Janeiro, State of Rio de Janeiro, CEP 22440-034, is the Controller of your personal data, as defined in the Lei Geral de Proteção de Dados Pessoais.

13. Updates

As our goal is always to improve our services, this Privacy Policy may undergo changes and updates over time, to better reflect our personal data processing practices and to provide greater security and transparency to our operations.

When material changes are made, we will post a notice on the main page of our websites so that you can quickly identify that an updated version of this Policy exists. For the personal data processing activities we carry out that may be based on your consent, if the changes to this Privacy Policy result in actual changes to our personal data processing practices, we will request your consent again, based on the updated terms of this Policy.

We recommend that you periodically review this Policy to become familiar with any changes.