Privacy Policy

Last updated: July 17, 2026

1. Introduction

This Privacy Policy describes how Laptics collects, uses, stores and protects your personal data, in compliance with Brazil's General Data Protection Law (LGPD — Law 13.709/2018) and, for users in the European Union, the General Data Protection Regulation (GDPR).

2. Who is the data controller

The controller of data processed on this platform is currently Mindvertising Marketing Digital Ltda. (CNPJ 55.121.591/0001-47), based in Sumaré, Brazil. Once Laptics' definitive legal entity is formed, this policy will be updated and you will be notified.

3. What data we collect

We collect: (a) registration data — name, email and password (stored encrypted); (b) telemetry data — lap times, car dynamics, simulator hardware data (e.g., wheel, pedals) and other information captured by Laptics Capture during your sessions; (c) browsing and platform-usage data, collected via cookies and analytics tools (subject to your consent, per the cookie banner); (d) payment data — processed directly by Stripe via Stripe Link; we never access or store credit card data.

4. How we use your data

We use registration and telemetry data based on performance of the contract with you (providing the analysis and coaching service). We use analytics cookies and tracking tools based on your specific consent, collected via the cookie banner shown on the platform.

5. Sharing with third parties

We use the following providers to operate Laptics, who process data on our behalf: Supabase (database, authentication and storage), Cloudflare (telemetry file storage and network infrastructure), Anthropic (telemetry processing to generate AI Coach analyses via Claude models), Stripe (payment processing), Google (Google Analytics and Google Tag Manager, subject to consent), and Microsoft (Clarity, for usage-behavior analysis, subject to consent). Should we use advertising tools such as Google Ads and Meta Ads (Facebook/Instagram), those platforms will also process data under the marketing cookies category, always subject to your explicit consent. We do not sell your personal data to third parties.

6. Cookies and tracking

We use strictly necessary cookies (login, security) that do not require consent; analytics cookies (Google Analytics, Microsoft Clarity) and marketing/advertising cookies (e.g., Google Ads, Meta Ads) — the latter used for personalized advertising once Laptics activates those tools. Both non-essential categories only activate after your explicit consent, collected via the cookie banner shown site-wide. You can review or change your choice at any time via the 'Cookie preferences' link in the footer. Your consent is valid for up to 12 months.

7. Data retention

Telemetry data for free-plan users is retained for 14 days. PRO users have unlimited retention while their subscription is active. Registration data is kept for as long as your account exists; after account deletion, data is removed or anonymized, except where retention is required by law (e.g., payment tax records).

8. Security

We adopt technical and organizational measures to protect your data, including encryption in transit, role-based access control (Row Level Security) and secure authentication via Supabase Auth. No system is 100% immune to incidents; in the event of a significant data breach, we will notify you and Brazil's data protection authority (ANPD) as required by law.

9. Your rights

Under the LGPD (and, for European users, the GDPR), you have the right to: confirm whether processing exists; access your data; correct incomplete or outdated data; request anonymization, blocking or deletion of unnecessary data; request data portability; withdraw consent at any time; and file a complaint with Brazil's National Data Protection Authority (ANPD). To exercise these rights, contact us at contact@laptics.app.

10. Children's data

Laptics is not directed at individuals under 18. We do not knowingly collect data from minors without guardian consent. If you believe a minor has provided us data without authorization, contact us so we can remove it.

11. International data transfer

Some of the providers we use (such as Cloudflare, Anthropic, Stripe, Google and Microsoft) process data on servers located outside Brazil, including in the United States. These transfers rely on internationally recognized safeguards (such as standard contractual clauses), aiming to ensure a level of protection compatible with the LGPD.

12. Changes to this Policy

We may update this Policy periodically. Material changes will be communicated by email or an in-platform notice before taking effect.

13. Contact / Data Protection contact

For questions, requests or to exercise rights related to this Policy, contact us at contact@laptics.app.