Privacy Policy
Last updated: October 4, 2026
This policy explains what data NaHero collects, why, who we share it with and how you can control it. It follows the Brazilian General Data Protection Law (LGPD).
Who we are
NaHero (nahero.site) is a practice-exam platform for cloud and IT certifications. For anything about your data, write to contato@nahero.site.
Data we collect
- Account: your name, email and password. The password is stored encrypted, never in plain text.
- Profile details you choose to add, such as phone, bio, photo, tax ID (CPF) or address.
- Platform use: the practice exams you take, your answers, scores, dates and time spent.
- Subscription: your plan, its status and billing period. Card details are handled by Stripe and never reach our servers.
- Where you came from: the campaign parameters (utm) of the link you used to reach the site.
- Technical data and cookies, described below.
How we use it
- To run your account and show your results, dashboard, history and feedback.
- To build your personalized study plan.
- To send account emails (email verification, password recovery) and study reminders, which you can unsubscribe from at any time.
- To process your subscription.
- To understand where visitors come from and measure our campaigns.
- To keep the platform secure and prevent abuse.
Who we share it with
We do not sell your data. We only share what each service needs to do its job:
- Stripe, to process payments.
- DeepSeek, to generate study plans. We send only the attempt statistics and the text of the questions you missed, never your name, email or other identifying data.
- Google (Google Ads and Google Analytics), to measure visits and campaigns.
- Our email and hosting providers, to send emails and run our servers.
Some of these services may process data outside Brazil, always for the purposes above.
Cookies
- Login session: keeps you signed in. Required for the site to work.
- Language: remembers whether you use the site in English or Portuguese.
- Campaign origin: stores the utm parameters of the link you came from for up to 30 days.
- Google: measures visits and ad performance.
How long we keep it
We keep your data while your account is active. When you delete your account, we delete or anonymize it, except for what the law requires us to keep, such as payment records.
Your rights
Under the LGPD you can ask us to confirm whether we process your data, access it, correct it, delete it, receive a copy of it, find out who we share it with and withdraw any consent you gave. Send your request to contato@nahero.site and we will reply as soon as possible.
Security
We use encrypted passwords, HTTPS connections and restricted access to our systems. No system is perfectly secure, but we work to protect your data.
Children
NaHero is not intended for children. If you are under 18, use the platform with the permission of a parent or guardian.
Changes to this policy
When this policy changes, we will update this page and the date at the top.