Introduction
Nuvvun Consultoria e Inovação LTDA ("Roleplays") is committed to protecting the privacy of user data. This Privacy Policy describes how we collect, use, store, and protect the personal information that you provide to us when using our Artificial Intelligence simulation platform.
By accessing or using Roleplays services, you agree to the practices described in this policy. We recommend a careful and complete reading of this document. If you have any questions, please contact us at legal@roleplays.com.br.
Data We Collect
2.1 Data provided by the user
When creating an account or using our services, you may provide us directly with the following information:
- Full name and corporate email
- Company name and job title
- Telephone number (optional)
- Access credentials (encrypted passwords)
2.2 Data generated by use
While using the platform, we generate and collect data related to your experience:
- Simulation content (chat/voice)
- Evaluation results and scores
- Badges and gamification progress
- Access logs and IP addresses
- Usage metrics and performance data
2.3 Data collected automatically
Some data is collected automatically when you access our platform:
- Cookies and similar technologies
- Browser and device information
- Site navigation data
Processing Purposes
The personal data collected is used for the following purposes:
- Provision of contracted services, that is, the execution and delivery of platform features in accordance with the agreed terms
- Experience personalization, including the adaptation of content, simulations, and recommendations to the user profile
- Communications about the platform, such as notifications, updates, and relevant information about the service
- Continuous service improvement, including the analysis of usage to enhance platform features and performance
- Compliance with legal obligations, addressing applicable regulatory and legal requirements
- Fraud prevention and security, identifying and mitigating suspicious or unauthorized activities
- Statistical analyses with anonymized data, generating aggregated insights without individual identification of users
Data Sharing
Roleplays does not sell, rent, or share personal data with third parties for marketing purposes. Your data is handled with seriousness and responsibility.
Sharing may occur only in the following situations:
- Infrastructure and hosting providers, that is, technical partners essential to the operation of the platform
- AI service providers (OpenAI, Anthropic, Google), with simulation data processed in accordance with their respective privacy policies and terms of use
- Legal authorities, when required by law, court order, or applicable regulation
- Account administrators, including corporate managers who access employee performance data within the contractual scope
- Authorized payment processors, to enable financial transactions securely
Storage and Security
Roleplays adopts robust technical and organizational measures to ensure the protection of your personal data. Our security practices include:
- Encryption in transit (TLS/SSL) and at rest, protecting data during transmission and storage
- Role-Based Access Control (RBAC), granular permissions that limit access to what is strictly necessary
- Regular backups, periodic safety copies to ensure data recovery
- Continuous monitoring, active surveillance for the detection of anomalies and threats
- Periodic security audits, regular assessments of infrastructure and security processes
- Database isolation per customer (database-per-tenant), logical separation of each organization's data
- Audit logs for all sensitive operations, full traceability of critical actions
Data Retention
Personal data is retained for as long as the account remains active and as necessary to fulfill the purposes described in this policy.
After account closure:
- 30 days of retention for possible reactivation of the account by the user or administrator
- After this period, the data is submitted for permanent deletion from our systems
Data required by law shall be retained in accordance with the applicable regulation, even after account closure. Properly anonymized data may be retained indefinitely for statistical purposes and service improvement.
Cookies
Roleplays uses cookies and similar technologies to enhance your experience. Cookies are classified into three categories:
- Essential, necessary for the operation of the platform, including authentication and session management. They cannot be disabled.
- Analytics, used to collect usage metrics through Google Analytics, allowing the analysis of navigation patterns and platform performance
- Preferences, which store user settings, such as language and display preferences, to personalize the experience
You may disable non-essential cookies through your browser settings or the platform's cookie preferences. Please note that disabling certain cookies may affect functionality and the quality of your experience.
Data Subject Rights
In compliance with the LGPD (Brazilian General Data Protection Law) and the GDPR (General Data Protection Regulation), you have the following rights regarding your personal data:
- Access your personal data held by Roleplays
- Correct inaccurate, incomplete, or outdated data
- Request the anonymization or deletion of unnecessary data or data processed in non-compliance
- Portability of data to another service provider
- Revoke consent at any time, without compromising the lawfulness of prior processing
- Obtain information about public and private entities with which we share data
- Object to processing in certain circumstances provided for by law
- Not be subject to automated decisions without the possibility of human review
To exercise any of these rights, please send a request to legal@roleplays.com.br. Our response timeframe is 15 business days from the receipt of the request.
International Transfer
Personal data may be transferred to international Artificial Intelligence and infrastructure providers, located outside of Brazil, for the purposes of simulation processing and platform hosting.
Such transfers are carried out on the basis of:
- Standard Contractual Clauses, agreements that ensure an adequate level of data protection
- Specific consent from the data subject, that is, express authorization for the international transfer
- Adequate safeguards under LGPD and GDPR, legal mechanisms that ensure compliance with data protection legislation
Changes to This Policy
Roleplays reserves the right to update this Privacy Policy periodically to reflect changes in our practices, technologies, or legal requirements.
Any changes will be communicated with a minimum of 15 days' notice through the registered email address or notification directly on the platform. The date of the last update will always be indicated at the top of this document.
Continued use of the platform after the changes take effect constitutes acceptance of the new version of this policy. If you do not agree with the changes, you may close your account at any time.