Privacy, confidentiality, and data protection are part of human governance.

This Privacy Policy describes how Eixo4 ("we", "our") collects, uses, and protects personal information from users, website visitors, employees of client companies, and partners, in compliance with Brazil's General Data Protection Law (LGPD - Law No. 13,709/2018) and Federal Council of Psychology regulations on clinical confidentiality.

1. What the contracting company does NOT receive

Trust is the fundamental pillar of our service. Eixo4 acts as data controller/processor (depending on the flow) and structures the data flow so that the employer does not have access to:

• Individual psychiatric or psychological diagnoses.
• Content reported in support sessions.
• Nominal identification of anyone who reported mental distress in surveys (except with the data subject's express, documented authorization, generally in life-risk situations).

We work with Aggregate Data. Companies receive strategic dashboards (via Exora) containing percentages and sectoral or large-group mappings, making it impossible to identify individual employees.

2. What data may be collected

When interacting with our website, forms, or services, we may collect:

• Contact Data: Name, email, corporate phone, company, and role (collected through contact forms, readiness assessment, or materials).
• Browsing Data (Cookies): IP address, browser type, visit duration, and pages accessed, to improve site performance and security.
• Sensitive Data (Platform/Technical Network): Health and well-being information (only if the data subject uses our credentialed expert network or responds to risk surveys). This data receives an additional layer of encryption and anonymization.

3. Purposes of Use and Security

Data collected through the website (leads) is used exclusively for commercial purposes, sending proposals, and content related to psychosocial governance. We do not sell or share contact data with unauthorized third parties.

Eixo4 implements technical information security measures (firewalls, encrypted databases, segmented access) to protect all databases under our custody against unauthorized access.

4. Data Subject Rights

Under the LGPD (analogous to the GDPR), every user has the right to:

• Confirm the existence of data processing.
• Access their personal data.
• Request correction of incomplete or outdated data.
• Request anonymization, blocking, or deletion of unnecessary data.
• Revoke consent at any time (without compromising the legality of prior processing).