Privacy Policy

Crivo is a lesson planning platform. This policy explains what data we collect, how we use it, and what your rights are under Brazil's General Data Protection Law (LGPD, Law 13.709/2018).

To provide the service, we collect four categories of data. Account data: name, email, and password, stored as a bcrypt hash. Usage data: lesson plans created, reviews, exports, and platform interactions. Payment data: processed exclusively by Asaas; Crivo does not store credit card numbers or PIX keys. Navigation data: pages visited and interaction events, via PostHog for product analytics.

Crivo does NOT collect or store: student names, birth dates, grades, attendance, academic history, residential addresses of students or teachers, or any other personal data of students. Information about classes is anonymous descriptions of teaching conditions (number of students, grade level, available resources).

Your data is used exclusively to provide the lesson planning service, manage your account and subscription, improve product quality through aggregated usage analysis, and send essential service communications. We do not sell, rent, or share your data with third parties for marketing purposes.

Prompts sent to AI models (Anthropic, OpenAI, DeepSeek) contain only the information necessary to generate or review a lesson plan: class context descriptions, learning objectives, pedagogical approach, and planning constraints. No personally identifiable information about teachers or students is included in prompts. We do not authorize AI providers to use prompt data for model training.

Your data is stored on servers with encryption at rest and in transit. Passwords are stored as bcrypt hashes. No one, including the Crivo team, has access to your plain-text password. Data access is restricted to authorized personnel and recorded in audit logs.

Your data is retained while your account is active. You may request deletion of your account and all associated data at any time by emailing [email protected]. Deletion is processed within 30 days. Billing data is retained for the period required by Brazilian tax law.

Crivo uses only essential cookies. Authentication: we store a JWT token in localStorage (technically not a tracking cookie). Language preference: a NEXT_LOCALE cookie to remember your choice between Portuguese and English. Product analytics: an anonymized PostHog session cookie to understand how the platform is used. We do not use advertising tracking cookies or third-party ad networks.

Under the LGPD, you have the right to confirm whether we process your data, access your data, correct incomplete or inaccurate data, request anonymization, blocking, or deletion, portability of your data to another service, withdraw consent at any time, and receive information about data sharing. To exercise any of these rights, email [email protected].

The data controller is Jedie's Tech (Jedson Gabriel). For privacy questions, LGPD inquiries, or to exercise your rights, contact us at [email protected].