How we handle your data.

We may collect different types of information, depending on the context in which you use our Site.

Information you provide directly:

• Identification data (for example, name).
• Contact details (email and phone).
• Professional data (for example, company, job title, and information about your operation or the solutions you are interested in).
• Messages you send us through support channels or contact forms.

Information collected automatically:

When you browse our Site, we automatically collect technical data such as the page accessed, browser and device type, the source of the visit, and the IP address.

We use cookies and similar technologies, both our own and third-party, to measure Site audience and performance, assess the effectiveness of our advertising campaigns, record the source of the visit and the pages viewed, and estimate the organization a visit corresponds to, for commercial purposes. Some of these technologies allow the same browser to be recognized on later visits. If you go on to identify yourself in one of our forms, that browsing history may be associated with the data you provide, so that we know how you reached us.

You can block or remove cookies at any time in your browser settings, and you can opt out of ad personalization through the settings offered by the providers of these technologies. Requests relating to this data may also be directed to our Data Protection Officer at dpo@lerian.studio.

Lerian uses the data we collect to:

• Operate, maintain, and improve the Site.
• Respond to requests, questions, and support needs.
• Send communications about products, services, promotions, and updates (where you have given consent or another applicable legal basis exists).
• Carry out statistical analysis to improve user experience and the performance of our platforms.
• Comply with legal and regulatory obligations, where required by applicable law.
• Protect Lerian and its customers against fraud, security incidents, or other unlawful activity.

These processing activities rely on recognized legal bases for data processing, such as consent, contract performance, compliance with a legal obligation, exercise of legal rights, or legitimate interest.

Your personal data may be shared with:

• Service providers related to IT infrastructure, data hosting, and technical support.
• Marketing automation and customer relationship management platforms, used to record and follow up on contact requests.
• Service providers supporting audience measurement, advertising campaign measurement, and organization identification.
• Other service providers and partners required to provide features requested by you, when applicable and in accordance with applicable law.
• Public or regulatory authorities, or oversight bodies, to comply with legal, regulatory, or judicial obligations.
• Business partners, where a legal basis or valid consent exists.
• Advisors and consultants (lawyers, accountants, auditors) and, in the event of a merger or acquisition, potential buyers or investors.

Whenever possible, we adopt anonymization or pseudonymization mechanisms to protect your privacy.

We maintain technical and organizational security measures to protect your personal data, including:

• Restricted access controls for sensitive information.
• Storage in protected environments, with security controls appropriate to the risks.
• Encryption processes, where applicable, and good digital security practices.

Despite our efforts, no transmission of data over the internet is completely secure. We recommend that you also adopt good security practices, such as protecting your passwords and using trusted connections.

Your personal data will be retained only for as long as necessary for the purposes described in this Policy or as required by applicable law. Factors influencing the retention period include:

• Legal or regulatory obligations (which may require records to be kept for specific periods).
• Applicable statutes of limitation for potential legal defense.
• Legitimate business interests (for example, for historical and statistical analysis), always subject to applicable data protection safeguards.

When the retention period expires or the data is no longer necessary, we adopt secure deletion or anonymization procedures.

Subject to applicable law, you have the right to:

• Confirm and access your personal data.
• Correct inaccurate, incomplete, or outdated data.
• Request the deletion, anonymization, or blocking of excessive data or data processed in violation of applicable law.
• Request data portability to another service provider, where applicable.
• Withdraw consent previously given, where processing is based on that legal basis.
• Object to certain processing activities (where they violate applicable data protection law).
• Request information about data sharing carried out by us.
• Request deletion of personal data processed with your consent, except where retention is permitted by law.
• Be informed of the possibility of refusing consent and the consequences of refusal, where applicable.
• Submit petitions or complaints to the competent data protection authority or consumer protection bodies, where applicable.

To exercise any of these rights, please contact our Data Protection Officer at dpo@lerian.studio. We may request additional information to verify your identity, in order to protect your data.

We may transfer your data across borders, for example, for cloud hosting services. In such cases, we use a valid transfer mechanism under applicable law, which may include an adequacy decision, standard contractual clauses approved by the Brazilian National Data Protection Authority (ANPD), or another legally permitted mechanism, to ensure your personal data remains protected.

This Policy may be revised periodically to reflect changes in our practices or in applicable legal requirements. When material changes occur, we will publish an updated version with a revision date. We recommend that you review this document periodically to stay informed.

If you have any questions, requests, or other matters related to privacy and the processing of personal data, we are available at:

• Controller: Lerian Ltda., a Brazilian company registered under CNPJ 57.616.968/0001-64, with registered office at Avenida Brigadeiro Faria Lima, 1811, Andar, Sala 1119, Jardim Paulistano, São Paulo - SP, CEP 01452-001, Brazil.
• Data Protection Officer: Taura Security, represented by Micael Braga.
• Contact: dpo@lerian.studio

Thank you for trusting Lerian. We reaffirm our commitment to protecting your privacy and handling your personal data securely and transparently.

This Policy was originally drafted in Portuguese. In the event of any divergence between the Portuguese, English, and Spanish versions, the Portuguese version prevails.