Privacy Policy
Company website · Version 1 · November 2, 2026
1. Responsibility and scope
APILAB TECNOLOGIA LTDA, Brazilian company registration (CNPJ) 69.284.049/0001-10, is responsible for the personal data processed through this company website. Our registered address is Rua Joaquim Antunes, 470, sala 01 — Pinheiros, São Paulo–SP, 05415-001, Brazil. Our contact and privacy channel is info@apilab.com.br. This policy covers the ApiLab website and correspondence initiated through its contact links. CapMap and Staks have their own policies and terms on their respective websites.
2. Browsing and contacting us
This website introduces our company and products. It does not provide registration, sign-in, payments, a contact form or a marketing mailing list. Clicking an email address opens your email application; the website does not automatically send a message. If you write to us, we receive your email address, your name if provided, the message and any attachments, as well as message metadata. Send only what is necessary for your request, without passwords, private keys, sensitive documents or patient information.
3. Purposes and legal bases
We use correspondence to answer questions and handle requests. Where a request concerns a potential or existing contract, processing relies on pre-contractual steps requested by the individual or performance of that contract. For general company correspondence and service protection, we may rely on legitimate interests, limited to what is necessary and subject to individuals’ rights. Legal obligations and the establishment, exercise or defence of legal claims may justify retention for those purposes. Contacting us does not subscribe you to marketing campaigns.
4. Hosting, email and technical records
This website is hosted by Vercel. Page delivery and security may involve technical records such as IP address, browser, date, time and the resource requested. Zoho Mail hosts ApiLab’s email inbox. These providers may process data for their infrastructure and security functions. We do not sell personal data. Any other sharing is limited to what is necessary to handle a request, comply with legal obligations or protect rights.
5. Cookies and international transfers
The code of this website does not install audience analytics, advertising pixels or cross-site tracking, and does not store preferences in local storage. The hosting platform may use technical features for security and page delivery. Hosting and email providers may process data outside Brazil. Transfers are subject to applicable legal requirements and safeguards; information about relevant recipients and instruments can be requested through our privacy contact.
6. Retention and security
Messages are retained for as long as needed to handle the request and the relationship to which they relate. Records necessary to meet a legal obligation or establish, exercise or defend legal claims may be retained for those purposes. Once no longer needed, data should be deleted or anonymised, except where retention is legally permitted. Providers’ technical records and backups follow their applicable retention cycles. Access to correspondence is restricted to authorised people; no security measure eliminates every risk.
7. Rights and requests
You may request confirmation of processing and access, correction, information about sharing, portability as provided by applicable regulations, and anonymisation, restriction or deletion where legally applicable. You may object to unlawful processing and withdraw consent when consent is the legal basis. Write to info@apilab.com.br with “Privacy” in the subject line. We may ask for identity verification proportionate to your request. Requests are handled free of charge within applicable legal time limits. You may also contact Brazil’s data protection authority, the ANPD. Mandatory rights under other laws that apply to you remain unaffected.
8. Links and updates
When visiting CapMap, Staks or other destinations, consult their policies. This policy does not replace product-specific rules. Material changes will be announced on this page and, where necessary, through other appropriate channels. An update does not authorise incompatible uses of data already received.