Privacy policy

Who is accountable for this data. RBMC Tecnologia da Informação Ltda, Brazilian company registration (CNPJ) 60.820.506/0001-79, trading as C-Fractionals. For anything concerning this policy: privacidade@cfractionals.com.

What we collect. Only what you write in the form — name, e-mail, company, phone if you choose to give it, and the message — together with the page you sent it from, the campaign parameters of the link you followed and the IP address of the submission.

What for. To reply to you and assess the enquiry. Nothing beyond that. We do not sell, share or use your data for mailing lists. The legal basis is the taking of steps at your request prior to a possible contract (LGPD, art. 7, V).

Who we share it with. Three providers, named because "the providers we need" tells you nothing: DigitalOcean, which hosts the portal and holds the backup, Resend, which delivers the e-mail, and Google, which measures this site's audience. All three process the data solely on our behalf and never for their own purposes. We do not sell, share or use your data for mailing lists.

Where the data is held, and transfers. In the United States. Hosting, backup, e-mail delivery and audience measurement all run there. If you are writing from the European Economic Area, this is a transfer to a third country: it relies on the contractual guarantees we hold with each provider, which bind them to a level of protection equivalent to the one your law requires.

For how long. Up to 24 months from the moment you send the form. Once that period ends the record is deleted automatically, by a daily routine — not on request. Before that, just write and we delete it.

Cookies and audience measurement. This site uses Google Analytics to measure its audience — how many people arrive, where from, and which pages they read. It writes its own cookies in your browser and sends that data to Google, which processes it on our behalf. There are no advertising cookies: ad personalisation and Google Signals are switched off in the measurement configuration, and we do no remarketing. The basis here is not consent but legitimate interest in maintaining and improving the site (LGPD art. 7, IX; GDPR art. 6(1)(f)) — the assessment behind that choice is on record and available on request. That is why measurement starts on your first visit, and why you may object to it (LGPD art. 18, § 2; GDPR art. 21): the button is at the end of this page, the refusal takes effect at once and is remembered in this browser. The client portal, at app.cfractionals.com, uses a session cookie strictly necessary to keep you logged in, plus equivalent usage measurement — a separate property, with screen addresses masked so that no client, engagement or statement identifier ever reaches Google.

Your rights. Brazil's data protection law (LGPD) gives you the right to confirm processing, access, correct, anonymise, port or delete your data, and to withdraw consent. Where processing rests on legitimate interest, you may object to it. If the GDPR applies to you, you hold the equivalent rights of access, rectification, erasure, restriction, portability and objection. Write to privacidade@cfractionals.com and we will answer.

If you are in Europe. We are a Brazilian company and the LGPD is the law we operate under, but this page is written for readers abroad too. Where the GDPR applies, the legal basis is the same as above read through its article 6: steps taken at your request before a contract, and our legitimate interest in answering an enquiry you sent us. You may also lodge a complaint with your national supervisory authority.

If you were registered in the portal. This policy covers this site's form. The mandate portal handles other data, including about people who never accessed it — vendors, partners and client employees named in a mandate's records. That is covered by the portal privacy notice, a separate document.

Last updated: September 2026.