Privacy policy

This is a courtesy translation. The Portuguese-language version of this document is the legally binding one; in case of any discrepancy, the Portuguese version prevails.

Last updated: July 2, 2026.

Our commitment to your privacy

GUIDI SISTEMAS E SERVICOS EM TECNOLOGIA DA INFORMACAO LTDA takes privacy and the protection of personal data seriously, including in the context of this landing page, the public CNPJ lookup service and the contact channels associated with the CNPJ API product.

This Privacy Policy explains, clearly and objectively, how personal data may be collected through this site, for which purposes it is used, under which circumstances it may be shared, and which rights you may exercise, especially under the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados Pessoais - LGPD).

Who is the data controller

The controller of the data processed on this site is GUIDI SISTEMAS E SERVICOS EM TECNOLOGIA DA INFORMACAO LTDA, registered under CNPJ no. 11.905.971/0001-05, headquartered in Rio de Janeiro, RJ, Brazil.

What data may be collected

In the context of this site and the CNPJ API public experience, the following may be processed:

• technical and browsing data, such as IP address, browser type, operating system, date, time and minimal security logs;
• information related to the use of the site, such as pages visited, clicks, measurement events and interactions with the landing page, when collection is enabled;
• data you provide when contacting us through channels linked to the site, such as email, WhatsApp, Instagram or other available commercial channels;
• information related to the public lookup, such as the CNPJ searched and technical logs associated with the request, when necessary for operation, abuse prevention, usage limits or application security.

How the data is collected

Personal data and logs related to the use of this site may be collected in the following ways:

• automatically, through technical logs necessary for the operation, security and stability of the site;
• when you use the public CNPJ lookup field and submit a search request;
• when you contact the company through commercial or institutional channels linked to this landing page;
• through analytics, monitoring, hosting and operational protection tools, when configured.

About the public CNPJ lookup

The main field on this landing page exists for CNPJ lookups. The content returned by the search generally refers to public data associated with legal entities and business registrations.

The fact that the tool looks up public information does not rule out the processing of technical data of the user who performed the search. For this reason, minimal request logs may be stored temporarily for security, abuse prevention, operational continuity, limiting free-tier use and investigating incidents.

Purposes of processing

Personal data and operational logs may be used to:

• keep the site available, stable and secure;
• process public CNPJ lookups and deliver the requested response;
• prevent fraud, improper scraping, automated abuse, spam, exploitation attempts and other security incidents;
• apply operational limits of the free public tier, when necessary;
• measure performance, landing page usage and aggregate browsing behavior;
• assist people interested in plans, commercial use or API integration;
• comply with a legal or regulatory obligation, or an order from a competent authority;
• promote internal improvements to the service's operation, experience and reliability.

Applicable legal bases

The processing of personal data may take place, as applicable, based on the following legal bases:

• carrying out preliminary steps related to your contact request or commercial interest;
• the company's legitimate interest in security, service, recording interactions, abuse prevention and operational improvement;
• compliance with a legal or regulatory obligation;
• the consent of the data subject, when this basis is required for a specific purpose.

Data sharing

The data processed is not published or publicly exposed by this site. Access is restricted to teams, vendors and operational workflows related to maintaining the platform, providing support and commercial use of the service.

When necessary, data may be shared with third parties that support the operation of the platform, such as:

• hosting, infrastructure, CDN, DNS, monitoring and security providers;
• analytics, messaging, support and communication tools;
• service providers and operational partners linked to the lookup service, the API or commercial support;
• public authorities, when there is a legal or regulatory obligation or a valid request.

Whenever sharing occurs, the company will seek to ensure that it is compatible with the purpose of the processing and accompanied by appropriate protective measures.

International transfer

Some vendors used for infrastructure, storage, analytics, communication or technical support may maintain servers or operations outside Brazil. In such cases, the company will seek to adopt measures compatible with applicable law to protect the personal data involved.

Retention period

Personal data and operational logs are stored only for as long as necessary to fulfill the purposes described in this policy, maintain service continuity, safeguard the application's security, meet legal or regulatory requirements and protect the company's rights in administrative, judicial or contractual proceedings.

Whenever possible and applicable, the data will be deleted, anonymized or have its use limited after the purpose that justified its collection has ended.

Protection of sensitive data and minors

This site is not intended for the intentional collection of sensitive personal data or data of minors. If such information is voluntarily submitted through contact channels, it may be processed strictly to the extent necessary for support, security or compliance with a legal obligation, with restricted access.

Information security

The company adopts technical and administrative measures compatible with the nature of this site and the service provided to reduce the risk of unauthorized access, misuse, alteration, disclosure or loss of personal data.

Although no digital environment is completely free of risk, we continuously seek to maintain reasonable protection, monitoring and security-improvement controls.

Data subject rights

Under the LGPD, you may request, where applicable:

• confirmation of the existence of processing;
• access to the personal data processed;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary, excessive or non-compliant data;
• data portability, subject to legal requirements;
• information about sharing with public and private entities;
• information about the possibility of not giving consent and its consequences, when this legal basis is used;
• withdrawal of consent, when applicable;
• objection to processing carried out under a legal basis that allows this right.

In certain situations, the company may not immediately comply with a request when there is a legal, regulatory or contractual basis, or a need to preserve rights in administrative or judicial disputes.

How to exercise your rights

To request access, correction, update, review or deletion of data related to this site, contact us through the privacy channel and clearly identify your request:

• channel for privacy and LGPD matters: lgpd@guidisistemas.com.br.

Updates to this policy

This Privacy Policy may be updated periodically to reflect legal, regulatory, operational or technical changes. The current version will always be available on this page, together with its update date.