Privacy Policy
Version 3 · effective since July 19, 2026
This policy explains how your personal data is handled on the marinapiaz.com platform, in compliance with Brazil's General Data Protection Law (LGPD — Law 13,709/2018).
1. Who the controller is
Profª Marina Silva Piaz, English teacher, Florianópolis-SC, Brazil. Privacy contact: class@marinapiaz.com.
2. What data we collect
- Website visitor: no personal data — we only use essential cookies (see section 5) and no analytics or tracking tools.
- Prospect (contact form): name, email, phone/WhatsApp, English level and message, with your express consent. We also record the visit origin (campaign parameters) and, for security, your IP address and browser in our audit log.
- Student and contracting company: registration data (name, email, phone, tax ID), lesson records and payment data, needed to perform the contract and issue receipts.
- Authenticated user (portal): login session data (IP and browser), to protect your account.
- Sign in with Google (optional): if you choose to sign in through Google, we receive from them only your email address and confirmation that it has been verified — no name, photo or contact list, because we do not request that data. The email is used solely to find your existing account: signing in with Google never creates a new account. We store no Google identifier and gain no access to your Google account, and signing in with a password keeps working — Google is an extra path, never a requirement.
- Payment receipt: if you choose to upload your PIX receipt through the portal, we store the file (image or PDF) on our server, solely so the teacher can check it and settle your invoice. You may delete it through the portal until she accepts it. It is included in the backups and deleted 12 months after it is accepted or rejected.
- Online lessons (Google Meet): how long each student stayed in the call (to record attendance automatically) and, when transcription is enabled, the spoken text of the lesson — processed to generate an AI teaching analysis. We do not store the full transcript text: we use it only to produce the analysis and keep only the analysis. Recording and transcription are performed by Google Meet, which shows an on-screen notice while they are active. The analysis is visible only to the teacher, who reviews it before any use; she may choose to email you a summary of your lesson with the new words, the corrected mistakes and the study suggestions.
3. Why we use it and on which legal basis
| Purpose | Legal basis (LGPD art. 7) |
|---|---|
| Replying to your contact/quote request | Consent (item I) |
| Delivering lessons, managing schedule, attendance and payments | Contract performance (item V) |
| Recording attendance from Meet participation and generating an AI lesson analysis | Contract performance (item V) |
| Authenticating your access to the portal, including “Sign in with Google” | Contract performance (item V) |
| Issuing receipts and meeting tax obligations | Legal obligation (item II) |
| Security, fraud prevention and audit trail | Legitimate interest (item IX) |
4. How long we keep it (retention)
Automatic cleanup runs daily. Once the period ends, the data is permanently deleted.
| Data | Period |
|---|---|
| Login sessions (IP/browser) | Expire in 7 days; removed by the daily cleanup |
| Password reset tokens | 24 hours after use or expiry |
| Pending two-step verification (Google sign-in) | 5 minutes; deleted as soon as you enter the code |
| Contacts that did not become students | 12 months with no activity |
| Audit records (IP/browser) | 12 months (Brazil's Internet law requires at least 6) |
| Student and payment data | Contract term + 5 years (tax obligation) |
| AI-generated lesson analysis | 24 months |
| Full lesson transcript text | Not stored (used only to generate the analysis) |
| Payment receipt uploaded by the student or company | 12 months after the teacher accepts or rejects it |
| Backups | 30 days |
5. Cookies
| Cookie | Purpose | Duration |
|---|---|---|
| __Host-session | Essential — keeps you signed in to the portal | 7 days |
| g_oauth_state, g_oauth_verifier, g_oauth_locale | Essential — they exist only during “Sign in with Google”, to make sure whoever comes back from Google is the same browser that started the sign-in | 10 minutes |
| theme | Preference — portal light/dark theme | 12 months |
| cookie_consent | Records your choice in the cookie notice | 12 months |
We currently use no analytics or advertising cookies. If we ever adopt one (e.g. Google Analytics), it will only load if you chose “Accept” in the cookie notice — and you can change your mind anytime by clearing your browser cookies (the notice reappears).
6. Who we share it with
- Resend — transactional email (contact notifications, invites, password resets).
- Cloudflare — site protection (CDN, anti-bot verification) and encrypted backup storage.
- Oracle Cloud — platform hosting.
- Google (Workspace / Meet) — lesson calendar, video call, participation records and transcription.
- Google LLC (Sign in with Google) — if you use this path, Google acts as an authentication processor: it confirms to us that the email is yours. This processing takes place on servers in the United States (international data transfer, art. 33 of the LGPD). If you never use the button, no data of yours reaches Google through it.
- Google Gemini — the AI that generates the teaching analysis from the lesson transcript. This processing may occur on servers in the United States (international data transfer, LGPD art. 33).
We do not sell or hand over personal data to third parties for marketing.
7. Your rights (LGPD art. 18)
You may at any time request: confirmation of processing, access, correction, anonymization, portability, deletion of data processed under consent, information about sharing, and withdrawal of consent. Just write to class@marinapiaz.com — we reply within 15 days.
8. Security
Strong password hashing, two-factor authentication for administration, database access isolated per role, encrypted traffic (HTTPS) and an audit trail of sensitive actions.
9. Changes to this policy
If this policy changes materially, the version and date above will be updated and the cookie notice will be shown again to record your new choice.