Privacy Policy
Sofia Pulse / Virtual Arena AI
Last updated: March 27, 2026This Privacy Policy describes how the Sofia Pulse platform (Virtual Arena AI) collects, uses, and protects information, in compliance with the Brazilian General Data Protection Law (LGPD — Law No. 13,709/2018) and the General Data Protection Regulation (GDPR — EU Regulation 2016/679).
1. Data We Collect
Access data:
- IP address (anonymized after 30 days)
- Pages visited and access times
- Browser type and operating system
- Language preference
What we do NOT collect:
- We do NOT collect name or email for basic platform access
- We do NOT perform device fingerprinting
- We do NOT track users across sites (cross-site tracking)
- We do NOT sell data to third parties
2. Public Data on the Platform
The platform displays data obtained from public sources:
- Aggregated and anonymized data from public sources (jobs, patents, papers)
- Names of companies and universities obtained from public records
- Names of paper authors from public databases such as OpenAlex and ArXiv
3. Legal Basis (LGPD Art. 7)
- Legitimate interest — for access data and platform operation
- Consent — for use of non-essential cookies
- Regular exercise of rights — for display of public data
4. Data Subject Rights (LGPD Art. 18 / GDPR Art. 15-22)
You have the right to request:
- Confirmation of data processing existence
- Access to collected personal data
- Correction of incomplete or outdated data
- Anonymization, blocking, or deletion of unnecessary data
- Data portability
- Deletion of personal data
Contact for exercising rights:
5. International Transfer
The platform servers are located in Europe (Contabo). We adopt the safeguards provided by the GDPR for international data transfers, including standard contractual clauses and technical protection measures.
6. Data Retention
- Access logs: 30 days
- Cookies: 12 months
- Aggregated data: kept indefinitely in anonymized form
7. Security
We adopt the following security measures:
- Encrypted communication via HTTPS
- Restricted access to servers and data
- Auditable operation logs
- No storage of user passwords
Contact
For questions related to privacy and data protection: