Your data, and what you can demand of us.

Orkestia operates from Brazil and sells in Brazil, so the law that governs what we do with personal data is the Lei nº 13.709/2018 (LGPD) — the Lei Geral de Proteção de Dados. The regulator is the ANPD — Autoridade Nacional de Proteção de Dados.

This page is the LGPD-specific notice: your rights as a titular, the legal bases we rely on, and what the site stores on your device. The general description of website, platform, API, and MCP processing lives in the privacy policy.

• Controller: LTINTEG SOFTWARE LTDA - EPP — CNPJ 45.337.609/0001-99
• Encarregado (data-protection officer), Art. 41: lgpd@orkestia.dev

Messages sent to that address about data protection reach the person responsible for answering them. You do not need to be a customer to write.

Under Art. 7, every processing operation needs a basis. For the site and platform, the principal bases are below; only one is consent:

• Legitimate interest (IX) — delivering the pages you requested and keeping the service available and free of abuse, using the technical data every web request carries.
• Consent (I) — storing anything optional on your device and loading our ad measurement tags. Given actively in the cookie panel, refused just as easily, withdrawn at any time.
• Pre-contractual measures at your request (V) — answering an email you send us about working together, and answering the contact form on /, /contabilidade, /seu-chat and /chatgpt (name, WhatsApp, business, optionally site or Instagram and a note, plus the page and the campaign tags of the link you came from).
• Legal obligation (II) — where a law, a regulator or a court requires us to keep or produce something.
• Performance of contract (V) — creating accounts, authenticating users, and executing, supporting, or auditing the workflows an organization requests through the application, API, or MCP service.

Where we rely on legitimate interest, you may object — see your rights below.

The LGPD gives you these rights over your personal data, free of charge, at any time:

• Access (acesso) — Know whether we hold data about you and get a copy of it.
• Correction (correção) — Have incomplete, inaccurate or outdated data fixed.
• Deletion (deleção (eliminação)) — Have data removed when it is no longer necessary, or when you withdraw the consent it rested on.
• Portability (portabilidade) — Receive your data in a structured format so you can take it elsewhere.
• Objection (oposição) — Object to a specific use of your data, including any use we base on legitimate interest.
• Anonymization (anonimização) — Have your data anonymized, blocked or deleted where it is unnecessary, excessive, or processed outside the law.

You may also ask us to confirm that processing exists at all, to tell you with whom we have shared your data, and to explain what happens if you refuse consent.

Write to lgpd@orkestia.dev and say which right you are exercising. It helps if you include:

• the right you want (access, correction, deletion, …);
• enough detail to find the data — for most visitors that is simply the email address you wrote to us from;
• where to send the answer.

We answer within 15 days (Art. 19, II), and immediately in simplified form where that is what you asked for. There is no charge. We may ask for something that reasonably confirms who you are before handing over personal data — that protects you, not us.

If we cannot do what you asked — because the law requires us to keep something, or because the data is no longer identifiable — we will say so and explain why, rather than going quiet.

This site sets no tracking cookies unless you allow Marketing: only then do our ad tags (Meta Pixel, Google Ads) load and set their cookies (listed below), to measure our ads. It has no analytics tool, no tag manager and no session recorder. Everything it can store is listed here in full:

Anything outside the strictly-necessary row is stored only after you allow it in the cookie panel. Refusing is not a formality: the site deletes the corresponding keys from your browser when you save the refusal, and checks again on every page load — so a value written before your decision cannot survive it.

Analytics is listed in the panel with nothing behind it today; it stays there deliberately, so that if it is ever used it can only load after you have switched it on. Marketing gates two things: our ad measurement tags (Meta Pixel, Google Ads), and the YouTube player for the demo videos on /chatgpt and /seu-chat. Until you allow it, neither tag loads, /chatgpt serves the same video from this domain, /seu-chat shows a link, and neither Meta nor Google is contacted.

The site, platform infrastructure, and email providers operate from the United States. An organization may also direct a workflow to a provider elsewhere. These international transfers use the applicable safeguards required by LGPD Art. 33.

If you are not satisfied with how we handled a request, you may petition the ANPD directly (Art. 18, § 1). You do not have to talk to us first — but we would rather you did, because we can usually fix it faster.

Orkestia currently operates under the LGPD only. The protections on this page — the storage inventory, opt-in consent, refusal that actually deletes, and the rights process above — are applied to every visitor regardless of where they are. If you are in the EU or the EEA and want to exercise a right under the Regulation (EU) 2016/679 (GDPR), write to us and we will handle it through the same process; a GDPR-specific notice will be published if and when we serve that market directly.