Privacy policy
Last updated: August 7, 2026
This policy explains what data IQBoost collects, why, who we share it with, and what you can demand from us at any time. It covers the whole site, in every language.
1. Definitions
- Personal data — any information relating to an identified or identifiable person: email, IP address, device identifier.
- Processing — anything done with personal data: collection, use, storage, sharing, deletion.
- Controller — whoever decides how and why data is processed. That is us.
- Processor — a vendor handling data on our behalf and on our instructions (hosting, email, payments).
- Data subject — you, the person the data is about.
- Service — the IQBoost website, the test, and the result report.
2. Who the controller is
The controller for data processed on IQBoost is IQBoost (tax ID 00.000.000/0001-00), SP, Brazil.
For anything privacy-related — exercising your rights, questions, complaints — write to privacidade@iqboost.com. We answer within 15 days.
3. What we collect
We collect only what the test and the report need. No special-category data: we never ask for ID numbers, biometrics, health, religion, political opinion or sexual orientation.
| Category | What it is | How we get it |
|---|---|---|
| Test answers | Options chosen, time per question, total time, score | From you, while taking the quiz |
| Declared profile | Gender, age range and education level entered in the quiz | From you, while taking the quiz |
| Contact | Email address | From you, on the result delivery screen |
| Technical | IP address, browser type and version, operating system, language, screen size, referrer | Automatically, on every visit |
| Usage | Pages viewed, clicks, the step where the test was abandoned | Measurement tools, only if you accept cookies |
| Transaction | Plan, amount, currency, charge status and date | From the payment processor (Hotmart) |
Your answers are saved first in your own browser, in localStorage (key iq-funnel-state), so you can close the tab and pick the test back up. That copy is yours: clearing site data wipes it without involving us.
We never see your card number, CVV or expiry date. Payment happens entirely inside Hotmart; all that comes back to us is the outcome of the charge.
4. Why we use it, and on what legal basis
| Purpose | Data used | Legal basis (GDPR / LGPD) |
|---|---|---|
| Run the test and compute the result | Answers, declared profile | Performance of a contract |
| Deliver the report and billing notices | Email, transaction | Performance of a contract |
| Charge, invoice and prevent fraud | Transaction, technical | Contract and legal obligation |
| Keep the service up and secure | Technical, logs | Legitimate interest |
| Measure audience and improve the funnel | Usage, technical | Consent (cookies) |
| Advertising and remarketing | Usage, technical, hashed email | Consent |
| Product news and offers by email | Consent, withdrawable in every message | |
| Establish or defend legal claims | Whatever applies | Legitimate interest / legal claims |
We do not use your data for automated decisions with legal effect. The score is indicative and never determines access to credit, employment, insurance or any other right.
6. International transfers
Some vendors operate outside your country. Those transfers rely on standard contractual clauses, on an adequacy decision by the competent authority, or on your consent, as applicable — always with protection equivalent to your local law.
7. How long we keep it
| Data | Retention |
|---|---|
| Answers in your browser | Until you clear site data |
| Answers and result on our side | While the account exists, plus 6 months after closure |
| Email used for marketing | Until you unsubscribe |
| Application access logs | 6 months |
| Tax and financial records | 5 years, by legal obligation |
| Data needed to defend a claim | Until the applicable limitation period ends |
Once the period ends, data is deleted or irreversibly anonymised. Aggregate statistics that identify no one may be kept indefinitely.
8. Your rights
At any time, free of charge, you can:
- Confirm whether we process your data and access what we hold;
- Correct incomplete, inaccurate or outdated data;
- Request anonymisation, blocking or deletion of data that is unnecessary, excessive or unlawfully processed;
- Port your data to another provider in a structured, machine-readable format;
- Delete data processed on the basis of consent;
- Learn who we shared your data with;
- Withdraw consent, without affecting processing already carried out;
- Object to processing based on legitimate interest;
- Complain to your national data protection authority — the ANPD in Brazil, your local DPA in the EU/UK.
Ask at privacidade@iqboost.com. We may request extra information to confirm it is really you — and nothing beyond that.
9. Security
- All traffic runs over HTTPS with TLS.
- Access to data is limited to people who need it, with individual credentials.
- Vendors are reviewed for security practices before we hire them.
- Incidents with material risk are reported to you and to the competent authority within a reasonable period.
No system is unbreakable. If you suspect misuse of your account or find a flaw, tell us at privacidade@iqboost.com — vulnerability reports get priority and never retaliation.
10. Children
IQBoost is for people aged 18 and over. We do not knowingly collect children's data. If we find an account belonging to a minor without specific parental consent, we close it and delete the data. Guardians can request deletion at the address above.
11. Changes to this policy
We may update this text. Material changes — a new purpose, a new recipient, a longer retention period — are announced by email or an on-site notice at least 7 days in advance. Wording fixes take effect on publication. The date at the top always marks the version in force.
12. Contact
- Privacy and data protection officer: privacidade@iqboost.com
- General support: suporte@iqboost.com
- Address: IQBoost, SP, Brazil