This text is a starting draft and should be reviewed by legal counsel before launch.

Legal

Privacy Policy

Last updated on 5 September 2026

This policy explains what personal data Práxis collects, why we collect it, how long we keep it and which rights you can exercise. It applies to this website, to the consultation requests sent by AI labs and to the applications sent by professionals who want to join our expert network.

Who we are

Práxis builds expert data for frontier AI, with operations in São Paulo, Brazil and a legal entity in Delaware, United States. For the purposes of the LGPD and the GDPR, Práxis acts as controller of the personal data described in this policy.

You can reach us at hello@praxis.ai for any question about this policy or about your data.

What we collect through the two forms

  • Consultation form for labs: your name, work email, organization, organization type, domain of interest and, when you choose to share it, an approximate volume or timeline.
  • Application form for practitioners: your name, email, professional area, professional registry, years of experience, city and, when you choose to share it, a link to your professional profile.
  • Both forms also record the page you submitted from and any campaign parameters present in the address, so we know which channel brought you to us.

What our first party analytics collects

We run our own lightweight measurement instead of loading third party advertising scripts. It records anonymous events such as a page view, a section becoming visible, a button click, a form starting, a submission succeeding or failing, and a booking being completed.

These events carry no personal data. They store an event name, the page path, a section name, a random session identifier kept in your browser, campaign parameters, the referring address and whether the device is mobile or desktop. We cannot identify you from them.

Why we collect it and the legal basis

  • To reply to your request and to run a commercial conversation with your organization. Legal basis: performance of a contract or preliminary steps at your request, article 7, V of the LGPD and article 6(1)(b) of the GDPR.
  • To assess an application to join the expert network and to send you the practical test of your area. Legal basis: preliminary steps at your request and our legitimate interest in building a qualified network, article 7, IX of the LGPD and article 6(1)(f) of the GDPR.
  • To understand how the website performs in aggregate and improve it. Legal basis: legitimate interest, with no personal data involved, article 7, IX of the LGPD and article 6(1)(f) of the GDPR.
  • To meet accounting, tax and legal obligations when a commercial relationship starts. Legal basis: compliance with a legal obligation, article 7, II of the LGPD and article 6(1)(c) of the GDPR.

Retention

  • Consultation requests and expert applications: up to twenty four months from the last interaction, unless a contract or a legal obligation requires a longer period.
  • Anonymous website events: up to twenty four months, after which they are aggregated or deleted.
  • You can ask us to delete your record earlier at any time, unless the law requires us to keep it.

Processors and service providers

We keep the operation deliberately small. Two processors handle personal data on our behalf, each under a data processing agreement and each limited to what the service requires.

  • Supabase: database and authentication hosting for form submissions and website events.
  • Resend: delivery of the notification and confirmation emails triggered by a submission.
  • Cal.com, only when you choose to book a call from the confirmation screen, so the meeting can be scheduled with the name and email you already gave us.

International transfer

Our providers process data on infrastructure located outside Brazil, mainly in the United States and in the European Union. Transfers rely on standard contractual clauses and on the equivalent safeguards allowed by article 33 of the LGPD and chapter V of the GDPR.

We only send abroad what the service needs to work, and we do not sell or rent personal data to anyone.

Your rights

You can ask us to confirm whether we process your data, to give you access to it, to correct it, to anonymize or delete it, to restrict or object to a specific use, to port it to another provider, and to explain with whom we shared it. Where we rely on consent, you can withdraw it at any time.

Write to hello@praxis.ai and we will answer within fifteen days. If you are in the European Union you may also complain to your local supervisory authority; in Brazil you may complain to the ANPD.

Security

Access to submissions is restricted to a short allowlist of team emails, protected by authenticated sessions and row level security rules in the database. Traffic is encrypted in transit. We review access whenever the team changes.

Changes to this policy

When we change this policy we update the date at the top of the page. Material changes will be announced on this website before they take effect.

Contact

Práxis, a Forward AI company. São Paulo, Brazil and Delaware, United States. Data protection contact: hello@praxis.ai.