Privacy notice

Account details you give us: e-mail address, full name, mobile number, country of residence and date of birth, plus your profession and organisation if you choose to add them.

Your official document — type, number and issuing country — which we ask for only when you book the final exam. The exam is supervised and the credential is issued in your name, so we need to confirm who sits it. We do not ask for it to open an account.

What you write on the platform: your answers in the simulator rounds, your answers in the final exam and the questions you send to the expert.

Records of your certification: enrolments, purchases, exam bookings, scores and issued credentials.

Preferences: the market you chose (United States, Brazil or Portugal), kept so the platform opens in the same language on your other devices.

Decision library: if you sign up to read the commented solutions, we collect your name, email, company, job title (optional) and country, which solutions you opened, where you came from (for example, a social media post) and your consent to receive our emails. To remember the sign-up, your browser keeps an access code; we store only a fingerprint of it.

Evidence from exam supervision: the final exam runs over video conference with your camera on and your screen shared. The examiner records in the platform that your identity was checked against the document above, together with images of your screen and of the room you are in, and a link to the meeting recording, which stays on the video conferencing platform. We collect this only for the supervised final exam, because the credential is issued in your name.

To deliver the certification you enrolled in — generate the exercises, assess your answers, run the final exam and issue the credential. This is the performance of our contract with you.

To keep accounting and tax records of purchases, which is a legal obligation.

To answer you when you contact us, and to keep the platform secure and working.

We do not sell your data. We only send marketing emails — new cases, content and information about the certifications — to people who asked for them when signing up for the decision library, based on that consent, which you can withdraw at any time.

The exercises you receive and the assessment of your answers are produced with the help of an artificial intelligence provider. Today that provider is Google (Gemini models).

This means the text you write in the simulator, in the final exam and in questions to the expert is sent to that provider for processing, and the result is stored with your account.

The assessment is not purely automated: the final exam is reviewed by a human examiner before a credential is issued, and you can ask us to review any assessment you disagree with.

Payment provider: purchases are processed by our payment platform and by Stripe. We never receive or store your full card details.

Scheduling: the final exam booking uses our scheduling application, which receives what is needed to book the session.

E-mail: transactional messages (confirming your address, resetting your password, access links) are delivered by Resend.

Artificial intelligence: as described above.

Video conferencing: the supervised final exam is held on Microsoft Teams, which processes the session — including your image and voice — and holds the recording.

These providers process data on our instructions and for no other purpose.

The platform serves candidates in the United States, Brazil and Portugal, and some of the providers above operate outside your country. When data leaves the European Economic Area, the transfer relies on the safeguards those providers offer, such as the European Commission's standard contractual clauses.

While your account exists, we keep what is needed to deliver the certification and show you your history.

Decision library sign-ups are kept until you ask us to delete them. If you stop accepting our emails, we keep only the record of that request, so a new email is never sent without new consent.

If you delete your account, we erase your profile, your simulator rounds, your exam answers and your questions to the expert.

Two things survive that deletion, with every link to you removed: the purchase record, which we must keep for accounting, and the record that a certification was issued, which is what makes a credential verifiable. Neither can be traced back to you afterwards.

Evidence from exam supervision — including the image of your document and the captures of your screen and room — is erased 24 months after the exam. It exists only to support the result if it is challenged, and has no use beyond that period.

You can download everything we hold about you, and delete your account, from your profile page — no request needed, no waiting.

You can correct your name, mobile number, country of residence, date of birth, official document, profession and organisation on the same page.

You may also object to a particular processing, ask us to restrict it, or complain to your supervisory authority: in Portugal the CNPD, in Brazil the ANPD.

To exercise anything not available in the interface — including stopping our emails or deleting a decision library sign-up — write to contact@gafm.org.br.

We use only what the platform needs to work: a session cookie that keeps you signed in, and a cookie that remembers the market you chose. We do not use advertising or third-party tracking cookies.

If this notice changes in a way that affects you, we will say so on the platform before the change takes effect.