IQBoost

Privacy policy

Last updated: August 7, 2026

This policy explains what data IQBoost collects, why, who we share it with, and what you can demand from us at any time. It covers the whole site, in every language.

1. Definitions

  • Personal data — any information relating to an identified or identifiable person: email, IP address, device identifier.
  • Processing — anything done with personal data: collection, use, storage, sharing, deletion.
  • Controller — whoever decides how and why data is processed. That is us.
  • Processor — a vendor handling data on our behalf and on our instructions (hosting, email, payments).
  • Data subject — you, the person the data is about.
  • Service — the IQBoost website, the test, and the result report.

2. Who the controller is

The controller for data processed on IQBoost is IQBoost (tax ID 00.000.000/0001-00), SP, Brazil.

For anything privacy-related — exercising your rights, questions, complaints — write to privacidade@iqboost.com. We answer within 15 days.

3. What we collect

We collect only what the test and the report need. No special-category data: we never ask for ID numbers, biometrics, health, religion, political opinion or sexual orientation.

CategoryWhat it isHow we get it
Test answersOptions chosen, time per question, total time, scoreFrom you, while taking the quiz
Declared profileGender, age range and education level entered in the quizFrom you, while taking the quiz
ContactEmail addressFrom you, on the result delivery screen
TechnicalIP address, browser type and version, operating system, language, screen size, referrerAutomatically, on every visit
UsagePages viewed, clicks, the step where the test was abandonedMeasurement tools, only if you accept cookies
TransactionPlan, amount, currency, charge status and dateFrom the payment processor (Hotmart)

Your answers are saved first in your own browser, in localStorage (key iq-funnel-state), so you can close the tab and pick the test back up. That copy is yours: clearing site data wipes it without involving us.

We never see your card number, CVV or expiry date. Payment happens entirely inside Hotmart; all that comes back to us is the outcome of the charge.

4. Why we use it, and on what legal basis

PurposeData usedLegal basis (GDPR / LGPD)
Run the test and compute the resultAnswers, declared profilePerformance of a contract
Deliver the report and billing noticesEmail, transactionPerformance of a contract
Charge, invoice and prevent fraudTransaction, technicalContract and legal obligation
Keep the service up and secureTechnical, logsLegitimate interest
Measure audience and improve the funnelUsage, technicalConsent (cookies)
Advertising and remarketingUsage, technical, hashed emailConsent
Product news and offers by emailEmailConsent, withdrawable in every message
Establish or defend legal claimsWhatever appliesLegitimate interest / legal claims

We do not use your data for automated decisions with legal effect. The score is indicative and never determines access to credit, employment, insurance or any other right.

5. Who we share it with

We never sell personal data. We share it only with vendors the service depends on:

  • Hosting and CDN — serve the pages and keep access logs.
  • Payment processor (Hotmart) — receives your email and the amount to raise the charge and issue the receipt.
  • Transactional email provider — delivers the report and billing notices.
  • Measurement and advertising — Google Analytics 4, Meta Pixel, only if you accept the matching cookies.
  • Authorities — on a valid court order or legal request, limited to exactly what is required.
  • Successors — in a merger, acquisition or asset sale, with prior notice and this policy still applying.

Every processor works under a contract requiring them to handle data only on our instructions and to return or delete it when the relationship ends.

6. International transfers

Some vendors operate outside your country. Those transfers rely on standard contractual clauses, on an adequacy decision by the competent authority, or on your consent, as applicable — always with protection equivalent to your local law.

7. How long we keep it

DataRetention
Answers in your browserUntil you clear site data
Answers and result on our sideWhile the account exists, plus 6 months after closure
Email used for marketingUntil you unsubscribe
Application access logs6 months
Tax and financial records5 years, by legal obligation
Data needed to defend a claimUntil the applicable limitation period ends

Once the period ends, data is deleted or irreversibly anonymised. Aggregate statistics that identify no one may be kept indefinitely.

8. Your rights

At any time, free of charge, you can:

  • Confirm whether we process your data and access what we hold;
  • Correct incomplete, inaccurate or outdated data;
  • Request anonymisation, blocking or deletion of data that is unnecessary, excessive or unlawfully processed;
  • Port your data to another provider in a structured, machine-readable format;
  • Delete data processed on the basis of consent;
  • Learn who we shared your data with;
  • Withdraw consent, without affecting processing already carried out;
  • Object to processing based on legitimate interest;
  • Complain to your national data protection authority — the ANPD in Brazil, your local DPA in the EU/UK.

Ask at privacidade@iqboost.com. We may request extra information to confirm it is really you — and nothing beyond that.

9. Security

  • All traffic runs over HTTPS with TLS.
  • Access to data is limited to people who need it, with individual credentials.
  • Vendors are reviewed for security practices before we hire them.
  • Incidents with material risk are reported to you and to the competent authority within a reasonable period.

No system is unbreakable. If you suspect misuse of your account or find a flaw, tell us at privacidade@iqboost.com — vulnerability reports get priority and never retaliation.

10. Children

IQBoost is for people aged 18 and over. We do not knowingly collect children's data. If we find an account belonging to a minor without specific parental consent, we close it and delete the data. Guardians can request deletion at the address above.

11. Changes to this policy

We may update this text. Material changes — a new purpose, a new recipient, a longer retention period — are announced by email or an on-site notice at least 7 days in advance. Wording fixes take effect on publication. The date at the top always marks the version in force.

12. Contact

  • Privacy and data protection officer: privacidade@iqboost.com
  • General support: suporte@iqboost.com
  • Address: IQBoost, SP, Brazil