Your data deserves
clarity and care.

1. Who is responsible for processing

This policy applies to the website of Instituto Salve Jorge de Inclusão Social — ISJ, an initiative being established in Mauá, São Paulo. The administrators organizing the vote determine its purposes and control access to the records. The institute's formalization is not presented as complete.

Information being updated: the name of the person responsible for processing at this stage still needs to be confirmed by the organization and published here. For requests about your data, corrections, deletion or withdrawal of consent, use the institute's contact channel free of charge: contato@institutosalvejorge.org or (11) 98366-8088. Viewing your vote and deleting your own record are also available on the home page when signed into the same account.

2. What data we use and why

• Name: to identify participation and allow administrators to review it.
• WhatsApp or phone number with area code: to associate a contact with the record and allow clarification strictly related to participation when necessary. This is not a subscription to institutional communications.
• Technical account identifier: to keep one vote per account and allow you to view, change or delete your own record. This does not verify civil identity.
• Chosen drawing and dates: to record the initial vote, last update and consent; to check the count.
• Page counts: to monitor site use through daily and per-page totals without creating a visitor browsing profile.

The participant provides their phone number. We validate its format but do not verify ownership by SMS. We do not ask for a CPF, home address, documents, diagnosis, health or disability information. Do not use the name or phone fields to send this data.

The login service processes account information, including email, for authentication. The application receives the authenticated identity; email may be used temporarily to check administrative authorization, but is not included in the votes table, participant list or CSV. Your ChatGPT password is not provided to ISJ.

3. Legal grounds and freedom of choice

Participation registration and the use of your name and phone number for this vote are based on your specific consent (Article 7, I, of the LGPD). The authorization box starts unchecked. Without checking it, the site does not record the vote. Refusal does not prevent reading institutional content and does not mean refusal of services by the institute.

Resources strictly necessary for security and the session serve the interest of protecting the service and are limited to that purpose. Any retention required by law or essential to exercising rights must have its own documented legal basis. Consent to vote is not a general authorization for other activities.

4. Limits on WhatsApp and phone use

Voting does not send automatic WhatsApp messages. Providing a number does not send your vote to Meta/WhatsApp. We do not access your contact list, conversations, profile photo or app content.

This consent does not allow contact information to be sold, given to partners for advertising, used in political campaigns, added to groups or included in broadcast lists. If your participation needs clarification, contact must be individual and limited to that matter. News, campaigns, events and donations will require separate, optional consent.

If a conversation is started through WhatsApp, that service will also process the conversation data under its own terms. ISJ must not request passwords, authentication codes or banking information to validate a vote.

5. Your rights and how to exercise them

You can request confirmation and access, correction, information about sharing, anonymization, blocking or deletion of unnecessary or unlawfully processed data, withdrawal of consent and portability where applicable. You can also object to unlawful processing and submit a petition to the ANPD. These rights follow the requirements and exceptions of the LGPD.

Access your participation on the home page using the same account. Until 21 October 2026 at 11:59 p.m. (Brasília time), you can correct your name and phone number and update your choice. The option “Delete my vote” removes the active record associated with the account, including after voting has closed, and ends the use of that data for the vote.

Deletion also removes that vote from the active count. If you participate again while voting is open, you will need to authorize a new record. Requests requiring human assistance can be sent to the contact channel above; do not send sensitive data in public comments. A request should be verified using only proportionate information to prevent third-party access.

6. How long records are kept

Voting closes on 22 October 2026 at midnight, Brasília time. Closing the vote does not automatically delete the data. Identifiable records should remain only for the time needed to check the count and resolve directly related questions, with an administrative review at the end of this stage.

Once the purpose has been fulfilled, administrators must delete personal data or keep only truly anonymous results. Exceptional retention requires a documented reason, legal basis and period; it does not authorize reuse of phone numbers for another purpose. The operational deadline for finalizing the count and disposal still needs to be defined and published by the organization. Individual deletion can already be requested through the site.

Downloaded CSV files are copies under the responsibility of the person who exports them: access must be restricted, and they must reflect corrections, deletions and disposal of records. Deletion from the active database does not demonstrate immediate deletion of exported copies or infrastructure backups, whose cycles must be checked with providers.

7. Who can access data and which providers are involved

The named list is restricted to authorized administrators. Other participants cannot view third parties' names, phone numbers or votes. Any published results must be aggregated, without disclosing contact information.

Hosting and login use ChatGPT Sites/OpenAI; application processing and the database use Cloudflare infrastructure. These services may process technical data and data needed for operation. There is no promise of storage exclusively in Brazil. The organization must check contracts, processing locations and safeguards applicable to any international transfer before expanding collection.

Data should only be provided to other recipients on valid grounds and to the extent necessary, such as under an applicable legal order. This policy does not constitute unrestricted authorization to share data.

8. Protection and incident response

The application uses HTTPS, authentication for voting, specific dashboard authorization, protection against unauthorized requests, server-side validation and parameterized database queries. Responses containing personal data must not be cached, and the administration area is not intended for search engine indexing. The site does not include names and phone numbers on institutional pages or in application error logs.

These controls reduce risks, but no system offers absolute security. The organization must protect the administrative account, limit exports, review access and maintain procedures for requests and incidents. If an incident occurs, it must contain the problem, assess the affected data and people, and make the legally required notifications to the ANPD and data subjects, according to the severity and applicable deadlines.

9. Children, adolescents and sensitive data

This form is not a register of children, beneficiaries or health conditions. Do not enter a child's name and phone number or another person's data without legitimate authority. When participation involves a child, the responsible adult must use their own account and data. Any future collection directly from children and adolescents will require a dedicated process considering their best interests and legal requirements; this form does not replace that procedure.

10. Cookies and optional features

Necessary cookies

We use the security cookie __Host-ijs-csrf to protect the submission, alteration and deletion of votes and attendance confirmations against unauthorized requests. It lasts up to one hour, is sent only over a secure connection and cannot be read by scripts. The cookie __Host-ijs-cookie-notice stores only that you closed this notice for up to 180 days, without a name or phone number.

We do not install advertising or statistical tracking cookies. Page counting does not use cookies. The authentication platform may use its own cookies necessary for session and security, according to its policies. Necessary cookies do not depend on the “Got it” button; it only closes the notice. You can delete or block them in your browser, but blocking may prevent account access and vote registration.

Preferences on your device

Reading preferences, such as text size, font, spacing, colors, contrast and reduced motion, are saved in your browser's local storage. The option selected before signing in may be kept temporarily in this browser to make returning to the vote easier. That selection is not a confirmed vote.

You can reset reading options in the accessibility panel or delete site data in your browser settings.

Optional voice, camera and translator

Read-aloud uses the browser's voices, preferring local voices in Portuguese. Some voices may send text to external browser or operating-system services.

Face navigation only starts after your action and authorization to use the camera. Images are processed on this device, without recording or sending camera content to ISJ. The microphone is not used.

VLibras is loaded only after specific confirmation. This external service may receive connection data, text submitted for translation and usage metrics. Authorization applies only to the current page. The external translator is not offered in the administration area or attendance confirmation, to protect participants' data.

11. Updates and references

Version 2.2, dated 16 October 2026. Significant changes to purposes or data used will be communicated before any new use and, when necessary, will require new authorization. Simply browsing does not constitute consent to advertising.

References: Brazilian General Personal Data Protection Law, data subject rights — ANPD and cookie guide — ANPD.