Privacy Policy

This page is a translation of the original Portuguese text, provided for convenience. It deals with Brazilian law. If there is any discrepancy, the Portuguese version prevails. Read the original in Portuguese

This Privacy Policy explains how the law firm Cassius Marques ADVOCACIA, which operates the website cassiusmarques.adv.br, collects, uses, stores, and protects the personal data of the individuals who visit or interact with this website. Data is processed in accordance with Law No. 13.709/2018 (the General Data Protection Law, or LGPD) and other applicable rules. We recommend that you read this policy carefully before providing any personal data or using the services available on this website.

Data Controller

The controller responsible for processing the personal data collected on this website is the law firm Cassius Marques ADVOCACIA, the holder of the domain cassiusmarques.adv.br. For privacy matters and for exercising the rights provided by the LGPD, the official contact channel is the e-mail address contato@cassiusmarques.adv.br.

Data Protection Officer (DPO)

You can contact the Data Protection Officer (DPO) at the e-mail address contato@cassiusmarques.adv.br. The DPO is the point of contact between the controller, data subjects, and the ANPD (Brazil’s National Data Protection Authority).

Data We Collect

In addition to the data you provide in forms, the website also records technical data and tool usage events, as described below:

Data you provide voluntarily: your name, e-mail address, telephone number, and message, as entered when you complete the contact or request forms available on the website. For features that offer downloadable material, your name and e-mail address may be sent, with your consent, to the delivery and follow-up workflow associated with that feature.

Technical and usage data: IP address, user agent, device, referring domain, the tool or event triggered, and the date and time of the event. This data may be recorded for security, abuse prevention, usage measurement, and website improvement. The fields you fill in on the BPC (Continuous Cash Benefit) checker are not sent by the checker to the server or to Analytics.

Purposes of Processing

We process the personal data we collect for the following purposes:

  • To respond to the requests and messages you send through the website forms;
  • To provide legal assistance and the services offered by the firm;
  • To improve the browsing experience and the performance of the website;
  • To protect the website, limit abuse, and preserve the security of its tools;
  • To comply with the legal and regulatory obligations that apply to the practice of law.

Legal Bases

The processing of personal data on this website relies on the following grounds provided in Art. 7 of the LGPD:

  • Consent of the data subject: when you provide your data voluntarily, after being informed of the purposes of the processing;
  • Performance of a contract and of preliminary procedures: when processing is necessary to handle your request or to provide legal services;
  • Compliance with a legal or regulatory obligation: when processing is required by the legislation that governs the practice of law;
  • Legitimate interest: when processing is necessary for the controller’s legitimate purposes, within the limits of the law and provided that the data subject’s fundamental rights and freedoms do not override it.

Data Sharing

This firm does not sell personal data. Information may be shared with service providers that support hosting, security, delivery of materials, measurement, and client service, always for the applicable purpose and only to the extent necessary. It may also be shared when required by a legal or regulatory provision, or to comply with an order issued by a competent judicial or administrative authority. In every case, data sharing follows the principles set out in the LGPD.

Cookies

We use essential and consent cookies for the website to function and to remember your preferences. Statistics and marketing features remain subject to the choices you record in the consent banner. Technical events from the tools are processed separately on the website’s server and may include your IP address, user agent, and event metadata, with a planned retention period of up to 180 days. They do not include the answers you enter in the BPC checker.

You may manage or disable cookies at any time through your browser settings. Disabling certain cookies may affect how some features of the website work.

Data Retention

Technical events from the tools are deleted after 180 days, in line with our retention routine. Data from forms and materials is kept for as long as necessary to serve the stated purposes and to meet the applicable legal, regulatory, and professional obligations. Once the relevant periods end, the data is deleted or anonymized, unless a legal or regulatory requirement calls for continued retention.

Data Security

The firm adopts appropriate technical and administrative measures to protect personal data from unauthorized access and from accidental or unlawful destruction, loss, alteration, disclosure, or any other form of improper processing, as provided in Art. 46 of the LGPD. Any security incident that may pose a risk or cause significant harm to data subjects will be reported to the ANPD and to the affected data subjects, in accordance with the terms and deadlines set by law.

Your Rights as a Data Subject

Under Art. 18 of the LGPD, you have the following rights regarding the processing carried out by this firm:

  • Confirmation that your personal data is being processed;
  • Access to the personal data being processed;
  • Correction of incomplete, inaccurate, or outdated data;
  • Anonymization, blocking, or deletion of data that is unnecessary, excessive, or processed in violation of the LGPD;
  • Portability of your data to another service or product provider, upon express request;
  • Deletion of personal data processed with your consent, except where the law allows it to be kept;
  • Information about the public and private entities with which the controller has shared data;
  • Information about the option not to give consent and about the consequences of refusing;
  • Withdrawal of consent at any time, through a free and simple procedure.

How to Exercise Your Rights

You may exercise the rights described in this policy by sending a request to the e-mail address contato@cassiusmarques.adv.br, stating which right you wish to exercise and providing the information needed to identify your request. The firm will respond within the legal deadline set by the LGPD.

National Data Protection Authority (ANPD)

You have the right to file a petition with the ANPD (Brazil’s National Data Protection Authority) regarding the processing of your personal data, without prejudice to seeking redress from the Judiciary. Information about the ANPD is available on the official website of the federal agency.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, in the applicable legislation, or in the services the firm provides. The current version will always be available on this page, along with the date of the last update. We recommend that you review this document periodically.

Last updated: October 2026.

Cassius Marques ADVOCACIA’s Case OS and Google Drive API Data

Application, API, and scope. Cassius Marques ADVOCACIA’s Case OS is an internal productivity tool for personal, limited use. With the account holder’s express authorization, the application uses the Google Drive API with a single scope: https://www.googleapis.com/auth/drive.metadata.readonly.

Data accessed. The system may process the account’s technical identifier, solely to confirm who granted authorization and to display it in masked form, as well as the metadata that the scope technically makes available and that the feature requires, such as item identifiers, names, MIME types, folder relationships, trash status, and creation or modification dates. Case OS does not read the content of files, and it does not create, edit, delete, move, or rename items in Google Drive.

Purpose and RootGuard. We use this data to identify, synchronize, and operationally organize authorized documents and cases within the folder tree controlled by Case OS. Although Google’s technical authorization may allow metadata queries beyond that tree, an internal mechanism called RootGuard accepts only items whose link to the authorized root is verified, and it rejects external items and items of uncertain origin.

Use and sharing. We do not use Google User Data for advertising, marketing, building commercial profiles, sales, credit analysis, or training general-purpose, foundation, or frontier models. We do not share this data with independent third parties, except when strictly necessary for the authorized operation, including with a contracted infrastructure provider to the minimum technical extent required, or when the law requires it.

Storage and retention. Before consent is activated, Case OS stores no authorization code, access token, refresh token, or real Drive metadata. If consent is completed, the refresh token will be kept encrypted, on infrastructure under the firm’s operational control, for as long as the authorization remains active. The access token will be ephemeral and used only during the authorized operation. The canary planned for this phase will not persist Drive metadata in the Core. Any future operational persistence of metadata will require specific authorization, implementation, and a retention policy before it is activated.

Revocation and deletion. You may revoke access at any time in your Google Account security settings and request deletion of the corresponding credentials and data through the firm’s contact channel. Revocation prevents any further access. Once the purpose has ended, or when a valid request is received, the credentials are revoked and deleted, except where retention is legally required.

Limited Use. The use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.