Privacy Policy

Last updated: 19 October 2026

This policy describes how SMCS (“we”), headquartered in São Paulo/SP, Brazil, handles personal data on the smcs.com.br website, in the interactive demos and in the chat widget (Sofia), as well as in the associated API at demos.smcs.com.br.

1. Controller and contact

The data controller is MARCELO SA MONTE TECNOLOGIA DA INFORMACAO LTDA (SMCS), Brazilian company registration (CNPJ) 58.598.238/0001-40, headquartered at Av. Paulista, 1106, Sala 01, Bela Vista, São Paulo/SP, 01310-914, Brazil.

To exercise your rights or ask questions: info@smcs.com.br or the contact channel indicated on the site.

2. Data we collect

• Contact form: name, email, interest and message.
• Sofia widget / demos: conversation content, details you type (e.g. email, name), technical session metadata and the automatically generated classification/triage.
• Technical demos (triage, documents, CNPJ, etc.): text or data you voluntarily submit for real-time analysis.
• Technical data: IP address, user-agent, pages visited, via server logs and analytics tools.

3. Purposes and legal bases

• Responding to enquiries and commercial proposals (pre-contractual steps / legitimate interest).
• Operating the demos and the widget, improving the product and the quality of answers (legitimate interest; consent where applicable to non-essential cookies).
• Security, abuse prevention and compliance with legal obligations.

The demos and the widget are, as a rule, illustrative. Do not submit sensitive data, trade secrets or third-party data without authorisation.

4. Cookies and analytics

We use Google Analytics (GA4) and the LinkedIn Insight Tag to measure audience and campaigns. You can restrict cookies through your browser or privacy extensions. The site works without marketing cookies; some metrics will simply not be collected.

5. Sharing

• Infrastructure providers: website hosting (Hostinger), API/demos and database (infrastructure under our control, e.g. VPS and Postgres), and the AI model provider (e.g. xAI) used to generate answers — only what is needed for processing.
• LinkedIn (SMCS AI Factory Page): we use the official LinkedIn API to publish on our own Page and to read comments and metrics of our posts. Data of people who comment (name and comment text) is used only to reply and is deleted within 30 days.
• We do not sell personal data.

6. Retention

Contact messages and widget/demo sessions are kept for as long as needed for the purposes above (support, improvement, security) or for legal requirements, and are then deleted or anonymised where applicable.

7. Your rights (LGPD)

You may request confirmation of processing, access, correction, anonymisation, portability, deletion of unnecessary data, information about sharing and objection, under Brazil’s Law 13.709/2018 (LGPD), through the email above.

8. Security

We adopt reasonable measures (HTTPS, access controls, application best practices). No system is 100% free of risk.

9. Changes

We may update this policy; the date at the top will be revised. Continued use of the site after relevant changes constitutes acknowledgement of the new version where required.

10. Terms of use

Use of the site and demos is also governed by the Terms of Use.