Privacy policy

1. Who we are

Nucleo Company (“Nucleo”, “we”, “us”) operates the Nucleo digital ecosystem. This policy explains how we process personal data when you use our public Services.

Privacy and data-protection contact: contact@nucleo.company.

2. Scope

This policy applies to the public Services listed below. It does not replace written contracts for custom development, hosted systems for clients, or other commercial engagements. Those relationships are governed by the applicable contract and any product-specific notices provided to the contracting party.

• nucleo.company — institutional site, company information, projects, and contact.
• help.nucleo.company — documentation and guides for the ecosystem.
• chat.nucleo.company — conversational support and product discovery.
• hub.nucleo.company — digital tools and product launchpad.
• account.nucleo.company — single sign-on, profile, and security settings.
• legal.nucleo.company — privacy, terms, and policies for the Services above.

3. Data we process

• Account data (name, email, profile picture, authentication identifiers) when you create or use a Nucleo Account.
• Contact and conversation content when you message us via forms, Chat, or other public channels.
• Usage context in Help and Chat (for example pages viewed and questions asked) to operate and improve those Services.
• Hub activity related to tools you open and preferences stored with your account.
• Technical data (partial IP address, logs, device and browser information, cookies and similar technologies) for security and operation.
• Analytics data when you consent via the cookie banner on surfaces where analytics are configured.

4. Purposes

• Provide, operate, secure, and improve the Services.
• Authenticate you and maintain sessions across nucleo.company subdomains.
• Respond to contact, support, and product inquiries.
• Measure performance and understand how the Services are used, when permitted.
• Prevent abuse, investigate incidents, and comply with applicable law.

5. Legal bases (LGPD)

Depending on the context, we rely on: performance of a contract or pre-contractual steps (for example operating your Nucleo Account); legitimate interests (security, fraud prevention, essential product improvement without selling personal data); and consent (non-essential cookies, analytics, and optional communications), which you may withdraw at any time.

6. Cookies and similar technologies

We use cookies and similar technologies as described in our Cookie policy. Preference cookies (theme, language, zoom) may be necessary for the Services to work as expected across subdomains. Analytics and marketing technologies run only after consent where a banner is shown.

7. Sharing

We share personal data with service providers that help us run the Services (for example hosting, email delivery, authentication, analytics, and AI inference), only as needed for those purposes and under appropriate safeguards. We may disclose information when required by law or to protect rights, safety, and the integrity of the Services. We do not sell personal data.

8. International transfers

Some providers may process data outside Brazil. When that happens, we take steps consistent with applicable law so that personal data remains protected.

9. Retention

We keep personal data only for as long as needed for the purposes above, including security, dispute handling, and legal obligations. Account data is generally retained while the account remains active and for a reasonable period afterward. Logs and backups follow operational schedules and are then deleted or anonymized.

10. Your rights

Under the Brazilian LGPD and other applicable laws, you may request access, correction, anonymization, deletion, portability, information about sharing, and withdrawal of consent, within legal limits. Contact contact@nucleo.company. We may need to verify your identity before fulfilling a request.

11. Security

We apply technical and organizational measures appropriate to the risk, including encrypted transport (HTTPS), access controls, and account security features such as multi-factor authentication where available. No method of transmission or storage is completely secure.

12. Children

The Services are not directed to children under 13. If you believe a child has provided personal data, contact us so we can delete it where appropriate.

13. Changes

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Material changes may also be highlighted on legal.nucleo.company or through the Services.