Transparency and data protection
Privacy Policy
Last updated: November 6, 2026.
1. Purpose and scope
This policy explains how personal data is processed on the website gettracy.io, which presents Tracy, Escola de CAIO's AI process-mapping platform. It applies to browsing, to demo requests and to measurement technologies that only run based on your choice.
Customers' use of the Tracy platform, including recordings, documents, spreadsheets and diagnoses submitted for analysis, is governed by the platform's own contract and terms, not by this policy.
2. Data controller
The controller is ESCOLA DE CAIO LTDA, CNPJ 57.348.910/0001-87, located at Av. Brig. Faria Lima, 1811, sala 1119, São Paulo/SP.
Privacy requests can be submitted through the pre-registration page, by starting the process field with “LGPD Request”, or by mail to the address above. We may request only the information necessary to confirm the identity of the person making the request.
3. What data we process
| Source | Data | Purpose |
|---|---|---|
| Browsing | Pages visited, on-site events, traffic source, UTMs, approximate IP address, browser, device, date and time. | To operate and protect the site, understand its performance and, when authorized, measure campaigns. |
| Language | Country of access provided by Cloudflare at the time of the visit. | To open the page in Portuguese, English or Spanish. The country is not stored by the site. |
| Privacy preferences | Choices about analytics and advertising cookies. | To record and respect your decision for up to 180 days, which you can change at any time. |
| Demo request | Name, email, phone, company, job title and the process you want to map, as provided in this site's pre-registration form. | To contact you by email and WhatsApp, schedule the demo and carry out preliminary procedures for a possible contract. |
We do not ask for sensitive personal data or confidential information about people, clients or processes. Please avoid including it in the form's open fields.
4. Legal bases
Processing takes place according to the purpose, mainly on the basis of:
- legitimate interest, for security, abuse prevention, language selection and the essential operation of the site;
- consent, for analytics cookies, advertising and campaign identifiers;
- preliminary procedures for a possible contract, when you request a demo;
- compliance with legal or regulatory obligations and the regular exercise of rights.
Declining optional cookies does not prevent you from browsing or requesting a demo.
5. Who the data may be shared with
We use service providers linked to the purposes above:
- Cloudflare, for hosting, delivery, security and identifying the country of access;
- Google Tag Manager and Google Analytics 4, to manage tags and produce metrics, only with your authorization;
- Meta Platforms, through the Meta Pixel, to measure campaigns, only with your advertising authorization;
- Brevo and Google Workspace, to record demo requests and respond by email and WhatsApp.
These providers process data in accordance with their contractual roles and policies. We do not sell personal data. Information may also be shared when required by law or by a competent authority, or to protect rights in administrative or judicial proceedings.
6. Cookies
Optional cookies stay off until you make a choice. Categories, names and durations are listed in the Cookie Policy. You can change your choice in Cookie preferences, also available in the footer.
7. International transfers
Some providers may process data outside Brazil. In these cases, we seek providers with contractual and technical measures compatible with the LGPD and with the ANPD's rules on international transfers, limiting sharing to what is necessary for each purpose.
8. Retention and deletion
Data is kept for as long as necessary for each purpose, to comply with legal obligations, safeguard rights and prevent abuse. After that, it is deleted or anonymized, except where the law permits or requires its retention.
9. Data subject rights
Within the limits of the LGPD, you may request:
- confirmation that we process your data, and access to it;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary data or data processed in non-compliance with the law;
- portability and information about data sharing, where applicable;
- information about the possibility of withholding consent and the consequences of doing so;
- withdrawal of consent, subject to legal exceptions;
- objection to irregular processing, and the right to petition Brazil's National Data Protection Authority (ANPD).
10. Security
We adopt technical and administrative measures proportionate to the context, such as HTTPS connections, access control, form protection and access keys stored outside public code. No system is completely immune to incidents; relevant situations will be handled in accordance with the law.
11. Children and adolescents
The site is intended for professionals and businesses and is not designed to collect data from children. If we identify improper collection, we will take steps to delete the data and protect those involved.
12. Updates to this policy
This policy may change when the site, our providers or the law change. The date at the top indicates the current version. Changes that require new consent will be presented before any use.