Privacy Policy

In effect since: June 23, 2026

1. Introduction

Viabilize Projetos e Negócios Ltda., a private legal entity registered with the Brazilian CNPJ under No. 32.286.061/0001-53, owner and operator of the Vibz platform, values privacy, security, and transparency in the processing of users' personal data.

This Privacy Policy explains how we collect, use, store, share, and protect personal data related to the use of the website, the Vibz platform, its features, artificial intelligence resources, communications, complementary services, and other interactions with Viabilize.

By accessing, registering for, or using Vibz, you acknowledge the practices described in this Privacy Policy. If you do not agree with any provision of this document, we recommend that you do not use the platform.

2. To Whom This Policy Applies

This Privacy Policy applies to all users who access or use the website, the Vibz platform, its resources, features, content, forms, communications, digital services, and, when available, complementary consulting, mentoring, diagnosis, follow-up, or professional support services.

This Policy also applies to website visitors, registered users, paying customers, users under free or trial periods, representatives of companies, partner institutions, consultants, mentors, and other individuals who interact with Viabilize through Vibz.

3. Personal Data Controller

For the purposes of the Brazilian General Personal Data Protection Law - LGPD, Law No. 13.709/2018, Viabilize Projetos e Negócios Ltda. generally acts as the controller of personal data processed in the context of the Vibz platform, being responsible for defining the purposes and means of such processing.

In certain situations, especially when Vibz is used by institutions, partners, companies, acceleration programs, incubators, universities, public agencies, or other institutional contractors, Viabilize may act as a data processor, depending on the case and in accordance with the applicable specific agreements.

4. Personal Data We May Collect

We may collect different categories of personal data depending on how you use Vibz.

4.1. Registration and identification data

Full name;
Email address;
Password or authentication credentials, when applicable;
Company, institution, or organization linked to the user, when provided;
Job title, role, or usage profile, when provided;
Language, country, communication preferences, and other profile information, when provided by the user.

4.2. Platform usage data

Access, login, session, and authentication information;
Features used;
Business plans created or accessed;
Interactions with forms, steps, resources, templates, and platform tools;
Usage history, activity logs, and technical events necessary for security, auditing, and experience improvement.

4.3. Content entered by the user

Business ideas, descriptions, answers, and texts entered into the platform;
Information about market, customers, competitors, products, services, operations, team, strategy, financial projections, and other elements of the business plan;
Documents, notes, comments, learnings, goals, actions, and other content voluntarily provided by the user;
Information shared during complementary consulting, mentoring, diagnosis, or follow-up services, when contracted.

The user should avoid entering sensitive personal data, excessive information, third-party data without authorization, third-party trade secrets, or any information that is not necessary for the intended use of Vibz.

4.4. Payment and contracting data

When the user contracts paid plans, subscriptions, packages, additional resources, or complementary services, we may process information related to the contracting, such as:

Contracted plan;
Payment status;
Billing history;
Contracting, renewal, cancellation, or expiration dates;
Tax or commercial data necessary for issuing documents, complying with legal obligations, or financial control.

Complete credit card data or other payment method information may be processed directly by third-party payment providers, according to their own policies and security measures. Viabilize may receive only the information necessary to confirm the transaction, manage the subscription, provide support, and comply with legal obligations.

4.5. Technical, cookie, and browsing data

We may also collect technical and browsing data, such as:

IP address;
Device type;
Browser used;
Operating system;
Date and time of access;
Pages accessed;
Access source;
Cookie identifiers or similar technologies;
Aggregated information about performance, errors, stability, and platform usage.

5. How We Collect Data

Personal data may be collected in the following ways:

Directly from the user, when they create an account, fill out forms, use the platform, contract services, request support, or communicate with us;
Automatically, through cookies, technical logs, authentication tools, security tools, usage analysis, and performance monitoring;
Through integrations, payment providers, communication tools, infrastructure services, artificial intelligence services, and other suppliers necessary for the operation of Vibz;
Through companies, institutions, partners, or programs that make Vibz available to their participants, employees, students, mentees, or customers, when applicable.

6. Purposes of Data Processing

The personal data collected may be used for the following purposes:

Create, authenticate, and manage user accounts;
Enable access to and use of the Vibz platform;
Provide features, steps, templates, analyses, recommendations, and documents;
Generate content, analyses, and suggestions with the support of artificial intelligence;
Organize, store, and process business plans and other content entered by the user;
Provide technical, operational, and user support;
Process payments, subscriptions, renewals, cancellations, and contracts;
Enable the provision of complementary consulting, mentoring, diagnosis, follow-up, or professional support services, when contracted;
Send transactional, operational, administrative, legal, or platform-related communications;
Send content, materials, news, updates, and promotional communications, when applicable;
Improve user experience, usability, security, stability, and platform performance;
Perform statistical analyses, usage metrics, and internal studies, preferably in aggregated or anonymized form;
Prevent fraud, abuse, unauthorized access, security incidents, and misuse of the platform;
Comply with legal, regulatory, tax, accounting, and contractual obligations;
Exercise rights in administrative, judicial, or arbitration proceedings.

7. Legal Bases for Processing

The processing of personal data by Viabilize may occur based on the legal bases provided under the LGPD, according to the specific purpose of each operation.

Performance of a contract or preliminary procedures related to a contract: to create an account, enable access to the platform, deliver features, process contracts, and provide services requested by the user;
Compliance with a legal or regulatory obligation: to meet tax, accounting, regulatory, administrative, or legal requirements;
Legitimate interest: to improve the platform, prevent fraud, ensure security, perform internal analyses, communicate relevant updates, and protect the rights of Viabilize and users;
Consent: when required for specific purposes, such as certain promotional communications, non-essential cookies, or other situations where the law requires the data subject's authorization;
Regular exercise of rights: to defend the interests of Viabilize, users, or third parties in administrative, judicial, or arbitration proceedings.

8. Use of Artificial Intelligence

Vibz uses artificial intelligence resources to support users in structuring, analyzing, and developing ideas, business models, business plans, projections, strategies, and other content related to business planning.

For these resources to function, the information provided by the user may be processed by proprietary or third-party artificial intelligence systems, always in accordance with the purposes described in this Privacy Policy and with reasonable security and confidentiality measures.

Responses, analyses, suggestions, and recommendations generated by artificial intelligence may contain inaccuracies, inconsistencies, limitations, biases, gaps, or outdated information. The user must review, validate, and critically evaluate any content before using it in real business decisions.

When the user contracts complementary consulting or mentoring services, Viabilize professionals or authorized partners may access certain business plan information or content entered by the user, exclusively to the extent necessary to provide the contracted service.

Viabilize may use aggregated, statistical, or anonymized data to improve the platform, enhance its flows, develop features, evaluate performance, and generate internal learnings, without directly identifying users, whenever applicable.

9. Data Sharing with Third Parties

Viabilize may share personal data and necessary information with third parties only when there is a legitimate purpose, operational need, legal obligation, or applicable authorization.

Infrastructure, hosting, storage, database, and security providers;
Authentication, communication, email, notification, and customer support services;
Payment, billing, invoicing, and subscription management providers;
Analytics, monitoring, performance, fraud prevention, and experience improvement tools;
Artificial intelligence providers used to generate analyses, suggestions, texts, and recommendations;
Consultants, mentors, specialists, or authorized partners, when the user contracts complementary services or participates in institutional programs;
Partner institutions, companies, universities, incubators, accelerators, public agencies, or programs that have made Vibz available to the user, subject to applicable agreements, permissions, and limits;
Public authorities, regulatory bodies, courts, or third parties, when necessary to comply with a legal obligation, court order, defense of rights, or prevention of fraud and unlawful acts.

Viabilize will seek to share only the data necessary for each purpose and will adopt reasonable measures to require third parties to observe appropriate standards of security, confidentiality, and data protection.

10. International Data Transfer

Some suppliers, servers, tools, technology providers, artificial intelligence services, payment, communication, hosting, or storage services used by Vibz may be located outside Brazil or process data in other countries.

In such cases, Viabilize will adopt reasonable measures so that the international transfer of personal data occurs in accordance with applicable law and with appropriate standards of protection, security, and confidentiality.

11. Storage, Retention, and Deletion of Data

Personal data will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy, provide the contracted services, maintain the user's account, comply with legal or regulatory obligations, prevent fraud, resolve disputes, and exercise rights.

Business plans and related data may be deleted after 6 months from the end of the validity period of the contracted package, plan, or subscription, if there is no renewal or new contracting by the user.

Whenever technically possible and legally applicable, Vibz may notify the user by email before permanent deletion, allowing the export of data available on the platform.

After permanent deletion, the data may not be recoverable.

Certain data may be retained for a longer period when necessary to comply with legal, regulatory, tax, accounting, fraud prevention, security, dispute resolution, or regular exercise of rights obligations.

Aggregated, statistical, or anonymized data may be retained indefinitely, provided that it does not allow direct identification of the data subject.

12. Information Security

Viabilize adopts reasonable technical and organizational measures to protect personal data and information processed by Vibz against unauthorized access, loss, alteration, destruction, improper disclosure, misuse, or leaks.

These measures may include access controls, authentication, monitoring, technical logs, backups, internal policies, permission segregation, encryption when applicable, and careful selection of suppliers.

Despite security efforts, no digital system is completely immune to failures, attacks, outages, or events beyond Viabilize's reasonable control.

In the event of a security incident involving personal data that may pose a relevant risk or damage to data subjects, Viabilize will adopt the appropriate measures, including communications to competent authorities and affected data subjects, when required by applicable law.

13. Data Subject Rights

Under the LGPD, the personal data subject may exercise, when applicable, the following rights:

Confirmation of the existence of personal data processing;
Access to the personal data processed;
Correction of incomplete, inaccurate, or outdated data;
Anonymization, blocking, or deletion of unnecessary or excessive data or data processed in violation of the law;
Data portability, subject to legal, regulatory, and technical limits;
Deletion of personal data processed based on consent, when applicable;
Information about public and private entities with which data has been shared;
Information about the possibility of not providing consent and the consequences of refusal;
Withdrawal of consent, when processing is based on this legal basis;
Review of decisions made solely based on automated processing of personal data, when applicable.

To exercise their rights, the user may contact us at privacy@vibz.me.

Viabilize may request additional information to confirm the identity of the requester and ensure the security of the data subject before responding to certain requests.

Some requests may not be fully fulfilled when there is a legal obligation to retain data, a need to preserve rights, fraud prevention, platform security protection, or another justification provided by applicable law.

14. Data Protection Officer

The Data Protection Officer of Viabilize, for matters related to the Vibz platform, is:

Michel Torres
Data Protection Officer

For matters related to privacy, personal data protection, the exercise of rights under the LGPD, or other data subject requests, please contact us through the following channel:

📧 privacy@vibz.me

This channel is intended for data subject requests, questions about this Privacy Policy, communications related to personal data, and other privacy matters.

15. Communications with Users

Viabilize may send communications to users by email, platform notifications, or other means provided by the user.

Transactional messages related to the account, security, payment, support, platform use, or relevant changes to the services;
Updates about features, improvements, changes to terms, policies, or platform conditions;
Educational content, materials, recommendations, and information related to entrepreneurship, planning, and business development;
Promotional, commercial, or institutional communications, when applicable.

The user may request to unsubscribe from promotional or marketing communications at any time. Transactional, operational, or legal messages may continue to be sent when necessary for service provision, security, compliance with obligations, or exercise of rights.

16. Cookies and Similar Technologies

16.1. What cookies are

Cookies are small files stored on the user's device when they access a website or digital platform. They may allow the proper functioning of the service, remember preferences, authenticate sessions, improve browsing, and collect information about platform usage.

We may also use similar technologies, such as pixels, local identifiers, event logs, tags, and analytics tools, according to the applicable purpose.

16.2. Why we use cookies

We use cookies and similar technologies to:

Ensure the proper and secure functioning of the website and platform;
Enable login, authentication, and maintenance of the user's session;
Remember preferences and facilitate browsing;
Analyze performance, stability, errors, and platform usage;
Identify product, content, and experience improvements;
Offer additional features and personalization, when applicable;
Measure the effectiveness of communications, campaigns, or content, when applicable.

16.3. Types of cookies we may use

Necessary or essential cookies: indispensable for the functioning of the website and platform, including login, security, authentication, browsing, and access to restricted areas.
Functional cookies: used to remember preferences, settings, and user choices, such as language, region, or personalization.
Analytics cookies: used to understand how users interact with the website and platform, generate metrics, evaluate performance, and identify improvements, preferably in aggregated or anonymized form.
Marketing or advertising cookies: may be used, when applicable, to measure campaigns, personalize communications, or evaluate the effectiveness of content and ads.
Third-party cookies: may be set by external services integrated into the website or platform, such as analytics, authentication, payment, support, communication, video, media, or marketing tools.

16.4. Session cookies and persistent cookies

Session cookies: are temporary and generally deleted when the browser is closed.
Persistent cookies: remain stored on the user's device for a certain period or until manually deleted, according to their purpose and configuration.

16.5. How to manage cookies

The user can configure their browser to accept, block, limit, or delete cookies. Below are some useful links for managing cookies in major browsers:

Blocking or deleting necessary cookies may affect the functioning of the website, authentication, browsing, and certain platform features.

17. Privacy of Children and Adolescents

Vibz is intended for users capable of contracting or using digital services focused on business planning and development.

The platform is not directed at children. If Viabilize identifies the processing of personal data of children or adolescents in violation of applicable law or without the necessary authorization, it may adopt measures to restrict access, remove data, or request additional information from the legal guardian.

18. Third-Party Links and Services

The Vibz website or platform may contain links, integrations, or references to third-party websites, tools, content, platforms, or services.

This Privacy Policy does not apply to third-party environments. We recommend that users read the privacy policies and terms of use of such third parties before using their services or providing personal data.

19. Changes to this Privacy Policy

Viabilize may update this Privacy Policy at any time to reflect legal, regulatory, technical, commercial, operational changes, or improvements in its privacy and data protection practices.

The updated version will be published on the website or within the platform, indicating the update date. When the changes are relevant, Viabilize may notify users by email, platform notice, or other appropriate means.

We recommend that users read this Policy periodically to stay informed about how their personal data is processed.

20. Contact

For questions, requests, or concerns related to this Privacy Policy, personal data protection, or the exercise of rights under the LGPD, please contact us at privacy@vibz.me.

For general support, operational questions, or matters related to the use of the platform, please use help@vibz.me.

Viabilize Projetos e Negócios Ltda.
CNPJ: 32.286.061/0001-53

📧 Privacy: privacy@vibz.me
📧 Support: help@vibz.me
📍 R. Prof. Telmo de Souza Torres, 255/813 - Praia da Costa, Vila Velha - ES, Brazil.