Privacy Policy

capi.legal is currently operated by Roberto Pitaguari Germanos – Sociedade Individual de Advocacia (“RPG”), registered with OAB/SP under No. 69.175, CNPJ 67.677.694/0001-77. RPG is the controller of personal data processed through this website and capi.legal’s services, under art. 5, VI, of the LGPD.

capi.legal is currently a small-scale personal data processing agent (art. 3, II, of Complementary Law No. 123/2006), which allows us to adopt the simplified compliance regime provided by CD/ANPD Resolution No. 2/2022, while still observing the legal bases, principles, and data subject rights established by the LGPD.

This policy applies to anyone who visits capi.legal, fills out the contact form, or sends documents and information to receive a legal service supported by artificial intelligence and lawyer supervision.

Contact data: name, email, phone number, company, and the content of the message sent through the website contact form.

Browsing data: cookies and similar technologies, including Meta Pixel, Google tools, the LinkedIn Insight Tag, and PostHog, used to understand website use, measure ad performance, and improve the experience.

Case documents and data: when you register for or hire a service, you may send contracts, corporate documents, or other information, which may contain personal data about you or third parties (partners, employees, clients, or counterparties), for analysis by artificial intelligence tools and by the responsible lawyer.

The LGPD requires every processing of personal data to have a legal basis (art. 7). At capi.legal, we use:

Contact form → to answer your message and, if requested, present a service proposal → based on carrying out preliminary procedures related to a contract, at your request (art. 7, V, LGPD).

Case documents and data → to provide the contracted legal service → based on the performance of the legal services agreement and compliance with legal and regulatory obligations applicable to the practice of law (art. 7, II and V, LGPD).

Usage analytics cookies and tools (PostHog and Google Analytics) → to understand how the website is used and improve the experience → based on legitimate interest (art. 7, IX, LGPD). These are first-party tools, entered fields are masked in session recordings, and this data is not used for ad targeting.

Advertising cookies and pixels (Meta Pixel, Google Ads, and the LinkedIn Insight Tag) → to measure how our campaigns perform and to build remarketing audiences → also based on legitimate interest (art. 7, IX, LGPD).

In both cases you may object to this processing (art. 18, § 2, LGPD). For advertising, use the control at the end of this page, which switches the three pixels off in this browser. The control also opens the app to save your account preference; sign in if asked. Once saved, that preference also stops future server-side advertising conversions based on previously stored attribution until you explicitly allow advertising again. For the usage analytics tools, write to lgpd@capi.legal.

Meta Platforms, Inc. (Facebook/Instagram): receives browsing data through Meta Pixel for campaign measurement and marketing. This sharing may involve international data transfers (art. 33, LGPD), because Meta processes data outside Brazil.

Google LLC: may receive browsing data through tools such as Google Analytics and/or advertising tags, for traffic analysis, campaign measurement, and website improvement. This sharing may also involve international data transfers.

LinkedIn Corporation (a Microsoft company): receives browsing data through the LinkedIn Insight Tag for campaign measurement, remarketing audiences, and aggregated reporting on visitors' professional profiles. This sharing may involve international data transfers (art. 33, LGPD), because LinkedIn processes data outside Brazil.

PostHog, Inc.: may receive browsing data and website usage events for product analytics, experience improvement, and functionality diagnostics. Although PostHog is more of a product tool than an advertising tool, we disclose it for transparency as a privacy best practice. This sharing may involve international data transfers.

Service providers strictly necessary for operating the website and the AI tool (for example, hosting, email, and productivity software), always under confidentiality and security commitments.

Lawyers who may be associated with providing the contracted service, exclusively for the performance of the legal service and under professional legal privilege/confidentiality (item 6 below).

You can switch off sharing with Meta, Google Ads, and LinkedIn at any time, using the control at the end of this page.

We do not sell personal data to third parties.

Because we are a law firm, every document and piece of information received in connection with a legal service is subject to the professional confidentiality provided by art. 7, XIX, of Law No. 8,906/1994 (the Brazilian Statute of the Legal Profession and OAB) and by the OAB Code of Ethics and Discipline, a protection that adds to, and does not replace, the safeguards under the LGPD. Documents submitted for analysis by the artificial intelligence tool are processed only for the purpose of providing the contracted service, under the same confidentiality obligations.

We keep your data only for as long as necessary to fulfill the purposes described in this policy, the retention periods applicable to legal services, and relevant limitation periods, or until you request deletion, whichever applies and does not conflict with a legal retention obligation.

We adopt technical and administrative security measures compatible with the size of our business, as required by art. 46 of the LGPD, following the simplified information security regime for small-scale processing agents under arts. 12 and 13 of CD/ANPD Resolution No. 2/2022.

Under art. 18 of the LGPD, you have the right to:

• confirm whether we process your data;
• access the data we hold about you;
• correct incomplete, inaccurate, or outdated data;
• request anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data;
• request portability of your data to another service provider;
• request deletion of data processed based on your consent;
• know which public and private entities we share your data with;
• know the consequences of not giving consent, when consent is required;
• withdraw your consent at any time;
• object to processing carried out on the basis of legitimate interest, such as that in items 4 and 5 above;
• file a complaint about the processing of your data with the Brazilian National Data Protection Authority (ANPD).

To exercise any of these rights, or ask questions about how we process your data, write to: lgpd@capi.legal.

Because we are, at this stage, a small-scale processing agent, we are exempt from formally appointing a data protection officer (DPO) under art. 11 of CD/ANPD Resolution No. 2/2022, and instead maintain this direct and centralized communication channel through the email address above.

We will respond to simple declarations about the existence of processing within 15 days from the date of the request (art. 15 of CD/ANPD Resolution No. 2/2022). For the other requests provided in art. 18 of the LGPD, we respond within double the general deadline applicable to other processing agents, under the differentiated regime for small-scale processing agents (art. 14, I, of the same Resolution), while always aiming to respond as soon as possible.

We may update this policy from time to time, especially as capi.legal grows and its structure changes. The latest version will always be published on this page, with the last updated date shown at the top.