Privacypolicy.

Cozy World is a film studio operated by [COMPANY LEGAL NAME], a company registered in Brazil (CNPJ [CNPJ]), with its registered address at [REGISTERED ADDRESS]. We are the controller of the personal data described here. This policy follows Brazil's General Data Protection Law (Lei Geral de Proteção de Dados, Law No. 13,709/2018, “LGPD”), which applies to our processing wherever you are.

• Project form. Your name, email, and optionally your phone, company or brand, website or social handle, and everything you tell us about your project (idea, style, references, dates, how you found us).
• Email sign-ups. Your email address, when you join the newsletter or ask to hear when the Academy opens.
• Emails you send us. Whatever you choose to include.
• Purchases. If we sell a product on this site, payment is handled by Stripe. We receive your name, email and the purchase details, never your full card number.
• Technical data. Our hosting provider processes your IP address and basic request data to deliver the site and protect it from abuse (for example, limiting repeated form submissions).

We don't use advertising or tracking cookies, we don't run analytics that profile you, and we never sell your personal data.

• To answer your project and prepare a proposal: procedures preliminary to a contract, at your request (LGPD, art. 7, V).
• To send the newsletter or the Academy announcement: your consent (art. 7, I), which you can withdraw at any time with the unsubscribe link in every email.
• To deliver purchases and keep records: performance of a contract and compliance with legal obligations (art. 7, V and II).
• To keep the site secure: our legitimate interest (art. 7, IX), limited to what that requires.

Only with service providers that process data on our behalf and under our instructions:

• Vercel, which hosts this website;
• Resend, which delivers the emails sent from this site (your project form and sign-ups);
• Stripe, which processes payments, if you buy something;
• our newsletter provider, if you sign up.

We may also disclose data when required by law or by a competent authority.

Some of these providers store data outside Brazil, mainly in the United States. We only use providers that offer appropriate safeguards, such as standard contractual clauses, as allowed by LGPD article 33.

Project details are kept for as long as needed to answer you and prepare a proposal and, if we work together, for as long as the law requires us to keep business records. Sign-up emails are kept until you unsubscribe. After that, data is deleted or anonymised.

The site is served only over encrypted connections (HTTPS), forms are validated and protected against abuse, payment details never touch our servers, download links are personal and expire, and access to your information is limited to the people who need it to work on your project.

Under the LGPD (art. 18) you can ask us, at any time, to:

• confirm whether we process your data, and access it;
• correct incomplete, inaccurate or outdated data;
• anonymise, block or delete data that is unnecessary or processed unlawfully;
• port your data to another provider;
• delete data processed with your consent, and withdraw that consent;
• know who we have shared your data with.

Write to hello@cozyworld.ai and we'll reply within the deadlines set by law. You can also file a complaint with Brazil's National Data Protection Authority (ANPD).

This site isn't directed at children, and we don't knowingly collect data from anyone under 18.

If this policy changes, we'll update it here and change the date below. Significant changes will be highlighted on this page.