Privacy Policy

Last updated: June 27, 2026

1. Who we are

The complexus institute is Complexus’s applied research arm, dedicated to specialist computational models applied to structured neuropsychological tasks — especially visuoconstructive, graphomotor, and visuospatial tasks. Complexus is currently in the process of incorporation; there is not yet an active CNPJ, and the responsible parties are acting as individual founders.

2. Scope of this policy

This policy covers only the institutional website complexus.org, published on WordPress, in its current phase as an article repository and contact channel for researchers. It does not cover the future SaaS product, to be hosted at complexus.com.br, nor any clinical beta, which will have their own dedicated documents.

3. What data we process

  • Technical data / logs: IP address, browser identifier (user-agent), access date/time, and technical records from hosting and the security/CDN layer (Cloudflare). These are used to operate and protect the website.
  • Voluntarily submitted email data: if you write to us at [email protected], we process your name, email address, and the content of your message only to respond to your inquiry.
  • Analytics data — only after consent: if you consent, we use Google Analytics to measure website access. Without your consent, analytics is not loaded.

4. Purposes

  • To present the institute and make articles available.
  • To respond to contacts from researchers.
  • To maintain the security and operation of the website.
  • To measure access in aggregate form — only if you consent.

5. Google Analytics and cookies

  • By default, we use only cookies that are strictly necessary for the operation and security of the website.
  • Google Analytics is a non-essential measurement feature and is only activated after your consent, through the cookie notice.
  • We do not use marketing cookies or advertising tracking cookies.
  • You may accept, reject, or configure your cookie preferences at any time. Rejecting is as easy as accepting.

6. Data subject rights

Under the LGPD (Law No. 13,709/2018), you may request: confirmation of processing; access to data; correction; anonymization, blocking, or deletion of unnecessary data; portability; information about sharing; and withdrawal of consent. To exercise your rights, contact our Data Protection Officer (DPO) channel.

7. Data Protection Officer (DPO) channel

5. Who Has Access To Your Data
If you are not a registered client for our site, there is no personal information we can retain or view regarding yourself. If you are a client with a registered account, your personal information can be accessed by:
  • Our system administrators.
  • Our supporters when they (in order to provide support) need to get the information about the client accounts and access.

8. Important notice — do not send sensitive data by email

To protect the privacy of data subjects and comply with ethical and legal limits, do not send real patient data, reports, test results, clinical documents, materials from psychological instruments, or any sensitive documents through this channel.

9. Subprocessors by category

To operate the website, we rely on third parties, disclosed by category:

  • Hosting: infrastructure provider (DigitalOcean) and management layer (ServerPilot).
  • CDN / security: Cloudflare.
  • Email: email provider for the address [email protected].
  • Analytics, only if consented: Google Analytics.
  • WordPress and plugins: website platform and extensions necessary for its operation.

10. International transfer

Some providers may process data outside Brazil. We adopt the applicable safeguards and seek to minimize the data involved. Specific details will be provided as the services are consolidated.

11. Security

We adopt reasonable technical and organizational measures to protect the data we process.
No system is completely secure, and we do not promise absolute security or certifications that we do not yet hold.

12. Retention

We retain data for the time necessary to fulfill the purposes described and for the applicable legal periods. The retention criteria are provisional and will be detailed in the final version of this policy.

13. Changes to this policy

We may update this policy. The “last updated” date at the top indicates the current version.

14. Contact

Go to Top