This is an English translation provided for convenience. In case of any discrepancy, the Portuguese version prevails.
This Policy explains how FM4 SOLUCOES EM ENGENHARIA LTDA (FM4 Automation & Energy), CNPJ 36.575.204/0001-06, headquartered at Rua Ottokar Doerffel, 1249, Anita Garibaldi, Joinville/SC, processes the personal data of people who visit the fm4.com.br website, fill out our forms, and buy and study on the learning platform. It complies with the Lei Geral de Proteção de Dados (Law No. 13,709/2018 — LGPD, Brazil's General Data Protection Law).
FM4 is the controller of the data. For any matter regarding your data, contact our data protection officer at contato@fm4.com.br.
1. What data we collect
When you buy a course
- full name, e-mail, phone number, country and CPF (Brazilian individual taxpayer ID);
- for purchases arranged with companies: CNPJ (Brazilian company taxpayer ID), legal name, address and the responsible contact person;
- the payment method, amount, installments and payment status. Card details are entered on the page of Asaas, our payment intermediary; FM4 does not receive or store this data.
When you study on the platform
- account data: name, e-mail, CPF, phone number and, if you provide it, date of birth;
- your password, stored in encrypted form (not even FM4 can read it);
- your progress: lessons watched, study time, assessments and scores, certificates issued;
- what you write on the platform: notes, messages and attachments sent to Student Support, and course reviews;
- access logs: date and time of login and logout, IP address and type of device/browser;
- the platform page you are currently on (for example, "watching lesson X"), used to show the instructor who is online.
When you fill out a form on the website
- contact, proposal request for companies, waiting list and newsletter: name, e-mail, phone number, company (if provided) and your message.
When you just visit the website
- we count visits anonymously: a random number that is valid only while the tab is open, the page visited, where you came from (for example, Google or Instagram) and the type of device. We do not store your IP in this count and we do not use cookies for it.
2. What we use the data for
| Purpose | Legal basis (LGPD) |
|---|---|
| Create your account, grant access to the courses and manage the access period | Performance of a contract (Art. 7, V) |
| Process payment, issue receipts and refund when requested | Performance of a contract (Art. 7, V) |
| Issue the invoice (nota fiscal) and keep tax records | Legal obligation (Art. 7, II) |
| Show your progress, run the assessments and issue the certificate (with validation code) | Performance of a contract (Art. 7, V) |
| Answer your questions in Student Support, in the website chat (name, email and messages) and respond to website forms | Performance of a contract / preliminary procedures (Art. 7, V) |
| Send e-mails about your purchase and your course (access granted, receipt, support reply, certificate, expiration notice) | Performance of a contract (Art. 7, V) |
| Notify you when enrollment opens (waiting list) and send the newsletter | Consent (Art. 7, I) — you can unsubscribe at any time |
| Protect the course content: watermark with name and CPF on the videos and access control | Legitimate interest (Art. 7, IX) |
| Keep access logs and ensure the security of the platform | Legal obligation (Marco Civil da Internet — Brazilian Internet Civil Rights Framework, Art. 15) and legitimate interest |
| Understand how many people visit the website and which pages are of most interest | Legitimate interest (Art. 7, IX), using anonymous data |
| Publish your course review on the website | Consent: only with your express authorization on the platform |
We do not sell your data and we do not use it for third-party advertising.
3. Who we share data with
We share only what is necessary, with companies that provide services to FM4:
- Asaas — payment processing (Pix, boleto (bank slip) and credit card) and refunds;
- Brevo — sending the platform's automatic e-mails (the service may store data outside Brazil);
- Hostinger — the server that hosts the website, the platform and the database, located in Brazil;
- Google (Google Drive) — daily backups of the database, stored with restricted access (the service may store data outside Brazil);
- Receita Federal (Brazil's Federal Revenue Service) / Sistema Nacional da NFS-e (National Electronic Service Invoice System) and the City of Joinville — issuance of the invoice;
- YouTube — introductory videos on the course pages, which only load when you click to watch.
When any of these services stores data outside Brazil, the transfer follows the LGPD rules (Art. 33), with providers that adopt adequate protection standards.
We may also share data when required by law or by order of a competent authority.
Anyone who has the validation code of a certificate can check, on the website, the student's name, the course, the completion date and the course hours. This is how companies confirm that a certificate is genuine.
4. Cookies and browser storage
- Platform: we use a single cookie, required to keep you logged in (session). It lasts 12 hours, or 30 days if you check "Keep me logged in".
- Browser: the platform stores a few simple preferences in your browser (for example, whether you have already seen the "How It Works" window).
- Website: we do not use advertising or tracking cookies. If you use the website chat, your browser stores an identifier of the conversation so you can see the history when you come back.
5. How long we keep data
- Account and study history: for as long as the account exists. After your last access period ends, they may be kept for up to 5 years, the time limit for possible consumer claims (Código de Defesa do Consumidor — Brazilian Consumer Protection Code, Art. 27).
- Purchases, invoices and tax data: for the period required by tax law (generally 5 years).
- Certificates: certificate data (name, course, date and code) is kept so that validation continues to work.
- Access logs (date, time and IP): at least 6 months, as required by the Marco Civil da Internet.
- Website visit counts and "who is online": up to 90 days.
- Backups: up to 30 days.
- Forms, website chat, waiting list and newsletter: until you request deletion or unsubscribe.
6. Security
We use a secure connection (HTTPS) across the entire website and platform, encrypted passwords, encrypted videos accessible only to enrolled students, restricted access to the administration panel and daily backups. No system is 100% secure, but we work to protect your data and will notify you and the authorities in the event of a relevant incident, as required by the LGPD.
7. Your rights
Under the LGPD (Art. 18), you may, at any time:
- confirm whether we process your data and access it;
- correct incomplete or inaccurate data (your full name is corrected upon request, through the platform itself, so as not to affect the certificate);
- request the anonymization, blocking or deletion of unnecessary data or data processed in violation of the law;
- request the portability of your data;
- request the deletion of your account and of the data processed with your consent — data that the law requires us to keep (such as tax data) is retained for the legal period;
- know who we share your data with;
- withdraw your consent (for example, leave the newsletter or the waiting list, or revoke authorization to publish your review).
To exercise any of these rights, write to contato@fm4.com.br. We will reply within 15 days. If you are not satisfied, you may also contact the Autoridade Nacional de Proteção de Dados (ANPD, Brazil's National Data Protection Authority).
8. Minors
The courses are intended for adults. Persons under 18 may only buy and use the platform with the consent and supervision of their parents or legal guardians.
9. Changes to this Policy
This Policy may be updated. The current version is always available on this page, with the date of the last update. Significant changes will be announced by e-mail or on the platform.