Privacy Policy

Effective date: October 6, 2026

This Privacy Policy explains how Inventhors Indústria e Comércio de Máquinas Industriais Ltda., CNPJ 51.537.902/0001-00, which operates guiFW – Filament Winding ("guiFW", "we", "us" or "our"), collects, uses, shares and protects personal data when you visit https://guifw.com (the "Site") or use our software and related services (together, the "Services").

We process personal data in line with the Brazilian General Data Protection Law (Lei nº 13.709/2018 – LGPD). Where it applies, we also follow the EU General Data Protection Regulation (GDPR). For the purposes of these laws, we are the data controller.

1. Data We Collect

1.1 Data you give us

Contact and account data: name, email address, company, job title, country and phone number, when you fill in a form, request a quote or demo, create an account or contact us.
Subscription and purchase data: your plan, billing details and tax identifiers (CPF/CNPJ or VAT number), when you subscribe to a plan. Payment card data is handled directly by the payment provider. We do not store it.
Support data: the content of your messages, plus any files or project parameters you choose to send us for technical support.

1.2 Data collected automatically

Log data: IP address, browser type and version, operating system, the pages you visit, referring URL, date and time of access, and time spent on pages.
Cookies and similar technologies: see Section 6.

We do not intentionally collect sensitive personal data (such as health, religious or biometric data).

2. How We Use Your Data and Our Legal Basis

Purpose	Legal basis (LGPD art. 7 / GDPR art. 6)
To provide the Site and Services, manage subscriptions and deliver support	Performance of a contract
To answer inquiries, quotes and demo requests	Steps taken at your request before a contract
To issue invoices and meet tax, accounting and legal duties	Legal or regulatory obligation
To keep the Site secure, prevent fraud and fix technical issues	Legitimate interest
To analyze how the Site is used and improve it	Legitimate interest, or consent where required for cookies
To send newsletters, product updates and marketing	Consent, which you can withdraw at any time
To establish, exercise or defend legal claims	Regular exercise of rights

We do not sell your personal data, and we do not use it to make automated decisions that have legal or similarly significant effects on you.

3. Sharing Your Data

We share personal data only when necessary, and only with:

Service providers that act on our behalf, such as our hosting provider (UOL Host), Banco do Brasil (boleto and PIX charges), PayPal (subscriptions and card payments), and email and other IT service providers. Each is bound by a contract and confidentiality obligations.
Authorised distributors or partners, when you buy through them or ask to be contacted by them.
Public authorities, when required by law, a court order or a regulator, including the São José dos Campos tax authority, which receives the service invoices (NFS-e).
A successor entity, in the event of a merger, acquisition or sale of assets. Your data stays protected by this Policy.

4. International Transfers

The Site is hosted in Brazil. Some service providers may still process data outside Brazil. When that happens, we use safeguards permitted under LGPD art. 33 and GDPR Chapter V, such as standard contractual clauses or adequacy decisions.

5. Data Retention

We keep personal data only for as long as needed for the purposes described above:

Account and subscription data: while your account is active, and for up to 5 years afterwards for legal and tax purposes. Project data (machines, mandrels, materials and programs) is kept for 90 days after cancellation so you can export it, and then deleted, as described in the Terms of Use.
Tax and invoicing records: for the period required by Brazilian law (generally 5 years).
Contact and quote requests: up to 2 years from the last interaction.
Log data: at least 6 months, as required by the Marco Civil da Internet (Lei nº 12.965/2014, art. 15).
Marketing data: until you withdraw consent or unsubscribe.

When a retention period ends, we delete or anonymise the data.

6. Cookies

Cookies are small text files stored on your device. We use:

Strictly necessary cookies, which the Site needs to work, for example for security and session management.
Analytics cookies, which help us understand how visitors use the Site.
Preference cookies, which remember your settings, such as language.

Non-essential cookies are set only with your consent where the law requires it. You can manage or delete cookies through your browser settings. Blocking some cookies may affect how the Site works.

7. Security

We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration or disclosure. These include encrypted connections (HTTPS), access controls and restricting data to staff who need it. No method of transmission or storage is 100% secure, but if a security incident may cause you significant risk or harm, we will notify you and the competent authority as required by law.

8. Your Rights

Under the LGPD (art. 18), and the GDPR where it applies, you have the right to:

confirm whether we process your data, and access it;
correct incomplete, inaccurate or outdated data;
have unnecessary or excessive data anonymized, blocked or deleted;
receive your data in a portable format;
know which third parties we share your data with;
withdraw your consent at any time, and be told what happens if you do not give it;
object to processing based on legitimate interest;
request review of decisions made solely by automated processing.

To exercise any of these rights, email guifw@guifw.com. We may ask you to confirm your identity. We will reply within the time set by law (normally 15 days under the LGPD).

You may also complain to the Brazilian Data Protection Authority (ANPD, www.gov.br/anpd). If you are in the EU or EEA, you may complain to your local supervisory authority.

9. Children

The Site and Services are intended for professional and business use. They are not directed at anyone under 18. We do not knowingly collect personal data from children or adolescents. If you believe we have done so, please contact us and we will delete it.

10. Third-Party Links

The Site may link to websites we do not control. Their own privacy policies apply to them, and we are not responsible for their practices.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new effective date. If we make significant changes, we will give you notice on the Site or by email.

12. Contact and Data Protection Officer

Controller: Inventhors Indústria e Comércio de Máquinas Industriais Ltda., CNPJ 51.537.902/0001-00
Rua Búzios, 70 – São José dos Campos – SP – CEP 12238-370 – Brazil

Data Protection Officer (Encarregado): Charles Belquis de Medeiros
Email: guifw@guifw.com