Privacy Policy.

1. Who we are

GWK Security, based in Campinas, SP, is the controller of the data processed on this site and across the IEQ product line. Questions and requests about personal data can be sent to the contact listed at the end of this policy.

2. Data we process

Voluntary contact: name, email, organization, and the message content sent through the contact form or by email. We use this data only to answer your request.

Pilot access: access to the Exposure Report uses an essential session cookie, cryptographically signed, restricted to HTTPS, and inaccessible to scripts. It serves only authentication and expires automatically.

Scan technical data: the Exposure Report analyzes only signals that the domain already exposes publicly on the internet, such as TLS configuration, DNS records, and HTTP headers. We do not install agents, request credentials, or access internal systems.

Optional declarative layer: answers provided voluntarily to refine the score. They are used only in the report calculation.

3. What we do not do

This site does not use advertising cookies, third-party trackers, or behavioral analytics tools. We do not sell or share personal data with third parties.

4. Use and sharing

Data is used to operate the service, generate the requested report, and maintain minimal technical records for security and platform auditing.

Sector results published by GWK are always aggregated with k-anonymity: no organization is individually identifiable in publications.

5. Retention and security

We keep data for as long as needed for the purpose for which it was collected or for the period required by law. Site traffic is fully encrypted (HTTPS) and access to report results is restricted and authenticated.

6. Your rights (LGPD)

Under Article 18 of Brazilian Law 13.709/2018, you may request confirmation of processing, access, correction, anonymization, or deletion of your personal data, among other rights. Just write to the contact below; we respond within the legal deadlines.

7. Changes and contact

This policy may be updated to reflect changes in the service or in the law; the effective date is shown at the top of this page. Controller contact: [email protected].