Who is responsible
Affigo is a pre-launch project. Its company is AFFIGO LABS DESENVOLVIMENTO DE SOFTWARE NÃO CUSTOMIZÁVEL LTDA, trade name AFFIGO LABS. Its Brazilian company registration (CNPJ) is in progress. Until it is issued, the people behind Affigo act as data controller and answer at beta@affigoai.com. This notice is updated with the CNPJ number once it is issued. We have not appointed a formal data protection officer; the address above reaches the people who decide.
What we collect
Only what you give us, the minimum our server records to accept the submission, and how you reached the page:
- 01Your email address — every form asks for this and nothing else is required.
- 02If you request early access: your name, which of the three profiles describes you, your sector, and a slides-per-month range.
- 03If you answer the optional question after signing up: the free text you write.
- 04Attached automatically to the submission: the time, your browser's user-agent string, and the two-letter country your request came from. We do not store your IP address.
- 05How you reached this page: the campaign tags on the link you followed (utm_source and the like) and, when your browser sends one, the address of the site you came from, without the page you were on. It tells us which channels bring people to the beta. The page reads it from its own address bar, never from a cookie, and it stays with your record for as long as the record does. When there is neither a tag nor a referring site, the field is empty.
- 06Which version of this notice you accepted: the date stamped at the top of this page, saved with your record at the moment you submit. This one is not information about you, it is the record of what you agreed to, so that either side can check later exactly which wording was in force.
- 07Whether you confirmed your address: when we sent you the confirmation link, when it expires, and when you clicked it. We keep only a scrambled fingerprint (a SHA-256 hash) of the link's code, never the code itself.
There is no account, no password, no payment data, and no upload of your own documents on this site.
Why we collect it
Two purposes, both ours alone: to evaluate and contact you about the Affigo beta, and to know which channels bring people to it. We do not use it for advertising, we do not profile you, and we do not sell or rent it. If you never hear about the beta from us, nothing else happens with it.
Legal basis
Your consent, given when you submit a form — the basis set out in article 7, item I of Brazil's General Data Protection Law (Lei nº 13.709/2018, "LGPD"). You can withdraw it at any time, at no cost, by emailing beta@affigoai.com. Withdrawing it means we delete your record and stop writing to you.
Who processes it for us
Three suppliers, each in one role. That is the whole list:
- 01Cloudflare, Inc. — hosts this page, receives the form submission and stores the record. It also runs Turnstile, the bot check on our forms: before a submission is accepted, Cloudflare reads technical signals of your browser (such as your IP address, user-agent and TLS fingerprint) to tell a person from an automated script. A submission that fails the check is not stored. We receive only the answer, pass or fail, never those signals. Cloudflare describes this processing in its Turnstile privacy addendum (cloudflare.com/turnstile-privacy-policy), where it also states that it uses the signals to improve its bot detection, as controller of that use. Where: the record is stored in Cloudflare's D1 database, which has no region in South America (developers.cloudflare.com/d1, data location); the page and the bot check run on Cloudflare's global network.
- 02Resend (resend.com) — delivers two emails: the confirmation email to you (one link, nothing else), and, once you confirm, the internal email that tells us you signed up, which carries what you typed. Where: São Paulo, Brazil (Resend region sa-east-1).
- 03Zoho Corporation — runs the beta@affigoai.com mailbox where that notification lands, and where your message arrives if you write to us directly. Where: Zoho's data centre in the United States (our domain's mail goes to mx.zoho.com).
Each acts as our processor (operador); the one use of its own is Cloudflare's, for the bot check, as described above. There is no analytics provider, no advertising network, no CRM and no email-marketing service. Fonts and images come from this domain. The page loads one resource from another company: the Turnstile bot check, from challenges.cloudflare.com.
One email to confirm your address
Signing up sends one automated message to your address: a link to confirm that the address is yours. The link is valid for 7 days and works once. Opening it shows a page with a button; your address is confirmed only when you press it. Only then are we told about your signup. If you do not confirm, we do not write to you again; if you submit the form again later, we send a new link, at most one an hour. There is no welcome series and no newsletter. When a human writes to you about the beta, that is a person replying, not a system.
International transfer
Two of the three suppliers operate outside Brazil: Cloudflare, which stores your record in its D1 database, outside South America, and runs this page and the bot check on its global network; and Zoho, whose mailbox is in the United States. Resend operates in Brazil, in São Paulo. So your record is stored, and part of the processing happens, on servers abroad. When you submit a form you consent to that international transfer, under article 33, item VIII of the LGPD. We keep the list to three precisely so it stays short and auditable — and we name them rather than hiding behind "our service providers".
How long we keep it
While the beta programme is active. We delete your record when you ask us to, and in any case when the programme closes and you have not become a customer. We have not set a fixed retention period in days yet; when we do, this notice says so.
Your rights
Under article 18 of the LGPD you may ask us, free of charge, to:
- 01Confirm whether we hold data about you, and get a copy of it.
- 02Correct anything incomplete, inaccurate or out of date.
- 03Delete it, or anonymise it, or block it.
- 04Withdraw your consent, and be told who we shared it with — the answer today is nobody beyond the three processors named above.
- 05Port it to another provider.
Cookies
This site sets no cookies — not for tracking, not for advertising, not for analytics, not even for preferences. There is no consent banner because there is nothing to consent to. The Turnstile bot check runs inside a frame served by Cloudflare from its own domain; what it reads is described in the list of processors above.
Children
Affigo is a tool for work. The waitlist is not directed at children or adolescents, and we do not knowingly collect their data.
Changes
If we change what we collect or why, we update this page and its date before the change takes effect. Material changes to the purpose would need fresh consent — we would ask, not assume.
The full data page is still coming
This notice covers the waitlist form on this website. A separate page covering the data you would send us as a customer — your storytelling files, your spreadsheets, retention, sub-processors and a data processing agreement — ships before we charge anyone. It is not written yet, and we would rather say so than imply coverage we don't have.