Privacy Policy

Last updated: May 2026  ·  Avora AI  ·  contact@avoraai.co

1. Who we are

Avora AI is the commercial brand of JG NEGÓCIOS DIGITAIS LTDA, a private legal entity registered in Brazil under CNPJ No. 63.896.234/0001-89, headquartered in Brazil and acting as the controller (and, where applicable, the "data controller" under the EU GDPR or the "business" under the California CPRA) of the personal data collected through this website and in connection with the Claude Academy product. We sell internationally and our customers may be located outside Brazil. For any privacy-related inquiry, contact us at contact@avoraai.co.

2. Scope

This Policy applies to (i) visitors of our website, (ii) prospective customers who interact with our marketing channels, and (iii) customers who purchase Claude Academy. It does not apply to third-party websites, services, or platforms linked from our site, whose privacy practices are governed by their own policies.

3. Personal data we collect

We collect the following categories of personal data:

• Identification data: full name, email address, and, where required by the payment processor, tax identification numbers (e.g., CPF in Brazil) or equivalent.
• Contact data: phone number or messaging-app handle voluntarily provided by you.
• Transaction data: billing information processed exclusively by our third-party payment processor. We do not store full credit card or banking details on our servers.
• Usage and device data: IP address, browser type and version, operating system, device identifiers, referrer URL, pages visited, time spent on pages, clicks, and conversion events.
• Marketing and analytics data: data collected through cookies, pixels, and similar technologies, including campaign attribution parameters (e.g., UTM tags).
• Communications: the content of emails or support messages you send us.

We do not knowingly collect sensitive personal data (racial or ethnic origin, religious beliefs, political opinions, health data, biometric data, etc.) and ask that you do not submit such information to us.

4. How we use your data

We use your personal data for the following purposes:

• To process and confirm purchases and to deliver access to the product;
• To send transactional communications (purchase confirmation, login details, content updates, support responses);
• To send marketing communications about Claude Academy and related products, subject to your right to opt out at any time;
• To operate, analyze, secure, and improve our website and the product;
• To detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activities;
• To measure the performance of our advertising and marketing campaigns;
• To comply with applicable legal obligations and to enforce our Terms & Conditions.

5. Legal bases for processing

Where the EU GDPR, the UK GDPR, the Brazilian LGPD (Law No. 13.709/2018), or similar laws apply, our processing is based on one or more of the following legal bases:

• Performance of a contract — to deliver the product you purchased and provide related support;
• Legitimate interests — to operate and improve our business, prevent fraud, secure our systems, and conduct marketing analytics, where such interests are not overridden by your rights and freedoms;
• Consent — for non-essential cookies, marketing emails, and any other processing that requires consent under applicable law. You may withdraw consent at any time;
• Compliance with a legal obligation — to satisfy tax, accounting, regulatory, or other legal requirements.

6. Cookies, pixels, and tracking technologies

We and selected third parties use cookies, web beacons, pixels, software development kits (SDKs), local storage, and similar technologies to operate the website, remember your preferences, analyze traffic, measure conversions, and serve relevant advertising. Categories include:

• Strictly necessary — required for the site to function;
• Analytics — to understand how visitors use the site (e.g., Meta Pixel, UTMify, Google Analytics, or equivalent);
• Marketing and advertising — to measure ad performance and serve retargeting on third-party platforms.

You can manage or disable cookies in your browser settings and may opt out of interest-based advertising through industry tools such as the Network Advertising Initiative (NAI), the Digital Advertising Alliance (DAA), or the Your Online Choices initiative (EU). Disabling certain cookies may affect site functionality.

7. Sharing of personal data

We do not sell your personal data in the conventional sense. We share it only with the following categories of recipients, and only as needed:

• Payment processors (such as Stripe, Hotmart, Cakto, Applyfy, or similar) to process transactions and prevent fraud;
• Course-delivery platforms (membership-area providers) to grant and manage access to the product;
• Hosting and infrastructure providers (such as Vercel, Cloudflare, AWS, or equivalent);
• Email and customer-support tools used to deliver transactional and marketing communications;
• Analytics and advertising platforms (such as Meta Platforms, Google LLC, TikTok, UTMify, and equivalents) under their own privacy terms;
• Professional advisors (lawyers, accountants, auditors) under confidentiality obligations;
• Public authorities, courts, and law enforcement when required by applicable law, regulation, or judicial order.

Note for California residents: certain disclosures to advertising partners that involve cookies or similar identifiers may qualify as a "sale" or "sharing" under the California Consumer Privacy Act (CCPA/CPRA). You may opt out of this activity by contacting us at contact@avoraai.co or by enabling the Global Privacy Control signal in your browser.

8. International transfers of data

Avora AI is based in Brazil and uses service providers located in Brazil, the United States, the European Union, and other countries. By using our website or purchasing the product, you understand that your data may be transferred to and processed in jurisdictions whose data-protection laws may differ from those of your country of residence. We rely on appropriate safeguards for such transfers, including Standard Contractual Clauses, adequacy decisions, contractual commitments by our processors, or your explicit consent, as required by Article 33 of the Brazilian LGPD, Articles 44–49 of the EU GDPR, and equivalent provisions of other applicable laws.

9. Data retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, comply with our legal, accounting, and tax obligations, resolve disputes, and enforce our agreements. Typical retention periods are:

• Account and order records: for the duration of the customer relationship plus the period required by applicable tax, consumer-protection, and statute-of-limitations laws (generally up to 10 years);
• Marketing data: until you opt out or until the data is no longer relevant;
• Analytics data: typically up to 26 months in aggregated form;
• Support communications: up to 5 years after the last interaction.

After the applicable retention period, data is deleted, anonymized, or further protected from access.

10. Security

We use commercially reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration, including HTTPS encryption in transit, access controls, and vendor due diligence. No system is, however, 100% secure, and we cannot guarantee absolute security. You are responsible for safeguarding your account credentials.

11. Your rights

Depending on where you live, you may have one or more of the following rights regarding your personal data:

• Access the personal data we hold about you;
• Correct data that is inaccurate, incomplete, or outdated;
• Delete personal data, subject to legal exceptions;
• Restrict or object to certain processing (including direct marketing);
• Withdraw consent at any time, where processing is based on consent;
• Port your data to another controller, where technically feasible;
• Opt out of the "sale" or "sharing" of personal information (CCPA/CPRA);
• Not be discriminated against for exercising your rights;
• Lodge a complaint with the competent supervisory authority — the Brazilian National Data Protection Authority (ANPD), an EU/UK data-protection authority, the California Attorney General, or equivalent.

To exercise any of these rights, email contact@avoraai.co. We may need to verify your identity before fulfilling the request. We will respond within the timeframes required by applicable law.

12. Children's privacy

Claude Academy is intended for adult users (18 years of age or older). We do not knowingly collect personal data from individuals under 18 (or under the digital-consent age applicable in your jurisdiction). If you believe a minor has provided us with personal data, please contact us and we will promptly delete it.

13. Third-party links

Our website and product may link to third-party sites, services, or platforms (e.g., social networks, payment processors, course-delivery platforms). We are not responsible for the privacy practices of those third parties and recommend that you review their privacy policies before providing them with personal data.

14. Do Not Track

Some browsers transmit "Do Not Track" signals. Because there is no industry consensus on how to respond to such signals, we currently do not act on them. We do, however, honor the Global Privacy Control (GPC) signal for users in jurisdictions where it is legally recognized.

15. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Material changes will be communicated by email or by a prominent notice on the site. Continued use of the website or product after changes take effect constitutes acceptance of the revised Policy.

16. Contact

For any privacy-related questions, requests, or complaints:

contact@avoraai.co