Privacy policy

What we collect

Your test answers, the time spent on each question, your age group, your education, the email you give us to receive the result, your name (if you give it) and your choice in the optional emails box. When you buy, the order record; card details stay with the payment processor, not with us. The name and CPF you enter when paying go straight to the payment processor (Asaas, which requires them) and are not stored here.

What we use it for

To calculate and deliver your result and to run your account (performance of the service, LGPD art. 7, V). To send one reminder to people who left their email and did not complete the purchase (legitimate interest, LGPD art. 7, IX; see Reminder and offer emails). If you tick the box "Send me IQNorth training tips, reminders and offers by email", to send tips, further reminders and offers (consent, LGPD art. 7, I). The box is unticked by default and does not change how you get your result; you can withdraw your consent at any time.

Reason for cancelling

When you cancel your subscription in your account, you may choose a reason from a list and write a short comment. Both are optional: you can cancel without answering. We use the reason and the comment to understand why people cancel, to improve the service and, if there is a complaint about your subscription, to defend ourselves. We do this on the basis of performance of the contract and the regular exercise of rights (LGPD, art. 7, V and VI). Please don't write personal data in the comment. We keep the reason and the comment with your subscription for 12 months from the cancellation; after that they are anonymized, meaning they are no longer linked to you or your email (LGPD, art. 12 and art. 16, IV). To ask for deletion before then, write to contato@iqnorth.com, or delete your account under Your account (LGPD, art. 18).

Research to improve the test

To recalibrate the questions and the age comparison, we use pseudonymized data: your answers, response times, age group and education — without your email, IP address or payment data. The legal basis is legitimate interest (LGPD, art. 7, IX). This option is on by default, and you can object at any time (right to object, LGPD, art. 18, § 2): just turn off “Use my answers, without my name or email, to improve the test” in Your account.

Who we share it with

We don't sell your data. We share it only with the providers needed to run the service (Cloudflare for hosting and database, Resend for email delivery, Amazon Web Services for backup email and backups, and Asaas for payment; your CPF or CNPJ goes only to Asaas) and with TikTok and Meta to measure ads (see Ads and measurement). Cloudflare, Resend, Amazon Web Services, TikTok and Meta may store data outside Brazil, under data protection clauses (LGPD, art. 33). No test data (answers, result, age) goes to an ad platform.

Ads and measurement

We record which link or ad brought you here: the utm_source, utm_medium, utm_campaign, utm_content and utm_term parameters, the click ID (TikTok ttclid or Meta fbclid) and the referring site. We may also record the type of device (phone, tablet or computer) and the app the link was opened in (TikTok, Instagram or Facebook), worked out on our server; the full browser identifier (the user agent) is not stored. The purpose is to measure which ads and posts bring visits, tests and purchases. The legal basis is legitimate interest (LGPD, art. 7, IX).

To measure ads, the site loads the TikTok pixel (and the Meta pixel, when active) and our server sends the same events to those companies (TikTok Events API and Meta Conversions API). This happens without asking your permission first, based on legitimate interest (LGPD, art. 7, IX). The events are: a page visit, starting and finishing the test, the email you entered, starting payment, payment details submitted and a completed purchase (with the amount). They carry the click ID, the _ttp, _fbp and _fbc cookies, the IP address, the browser, your email hashed with SHA-256 (never the email in plain text) and, for TikTok, a visitor identifier also hashed with SHA-256 (external_id), which is a code of ours and not your email.

What never goes to TikTok or Meta: your answers, your result and your age or age group.

In the IQNorth app (Android and iOS). We collect the same test and account data described above. The app does not load the TikTok or Meta pixel, sends no event generated in the app to those companies (not even from our server) and does not use the device advertising identifier. For our own measurement, the app uses the same visitor identifier as the website, which stays with us. The app sells nothing: purchases and subscriptions happen only on the website.

How to decline. In Cookie preferences, in the footer of any page or in your account, choose "Decline". From the next page on, the pixel no longer loads in your browser, none of your events are sent by our server and any still in the queue are cancelled. People who decline are left out of this measurement, even though it applies to other visitors. Details in the Cookie policy.

Reminder and offer emails

If you leave your email and do not complete the purchase, we may send one reminder with the link back to your test and the price, based on our legitimate interest (LGPD art. 7, IX). The reminder is a single one, tied to the test you started: it uses only your email, your name (if you gave it) and your language, with no profiling and no sharing with third parties, and it does not go to people who have already paid, turned off reminders or deleted their account.

Further reminders (up to two, one and three days later) and offers, such as an email after your purchase about what the subscription includes, are only sent if you ticked the optional emails box, based on your consent (LGPD art. 7, I).

Every email has a link to stop receiving them, which works immediately, without logging in, and also turns off news emails; your email app may show the same button (“unsubscribe”). You can do the same in Your account. To know whether reminders work, we record whether the link in the email was clicked and whether a payment followed within 7 days of the click. We do not use a pixel to know whether the email was opened. Addresses that bounce or mark our email as spam stop receiving it.

How long we keep it

For as long as your account exists. Where the visit came from (UTM, click ID, device type, app and referring site) is kept in our measurement records; those records do not contain your name and, if you delete your account, they are erased together with your result, history and email. Without an account, you can ask for deletion through Contact. The IP address and browser used to send events to TikTok and Meta are kept for at most 7 days, and what is sent to those companies leaves our queue right after it is sent. In your browser, the source of your first visit is kept for 30 days. Payment records that the law requires us to keep stay for the legal period and are used for nothing else. What TikTok and Meta keep follows their own policies. If you left your email and never completed a payment, the email and the account are erased after 90 days without use; of the reminders sent we keep only counts (how many went out, were clicked or ended in a purchase), without your email.

Your rights (LGPD)

You can request access, correction, portability or deletion of your data, withdraw your consent to the optional emails and object to the reminder and the measurement based on legitimate interest. In your account, "Download or delete my data" downloads everything or erases your result, email and click and device identifiers. For other requests, write to us on Contact with the subject "Personal data".

Controller and data protection officer

Data controller: DC SOLUTIONS LTDA, CNPJ 63.680.570/0001-90, Rua João Pereira Neto, 20, Residencial Doutor Walchir Resende Costa, Divinópolis/MG, CEP 35503-131. The email contato@iqnorth.com is the channel for exercising your rights and also the data protection officer's channel (LGPD art. 41): there is no separate email address for the data protection officer. Write with the subject "Personal data".