Privacy Policy.

ISA may process data provided directly by users, including full name, email address, passwords protected through security mechanisms, academic and professional information, institutional affiliation, profile information and data required for membership.

Technical records related to platform use may also be processed, such as access date and time, session information, IP address and data necessary for security, fraud prevention and service operation.

Personal data may be used for account creation and management, authentication, membership administration, issuance of documents and certificates, content delivery, member communications, support, payment processing, platform security and compliance with legal or regulatory obligations.

ISA seeks to limit processing to information that is necessary and compatible with each purpose.

Processing may rely on different legal bases provided under applicable law depending on purpose and context, including performance of a contract or pre-contractual procedures, compliance with legal or regulatory obligations, exercise of legal rights, legitimate interests where applicable and consent when required.

Where consent is used as the legal basis, the data subject may withdraw it as permitted by applicable law without affecting processing lawfully carried out before withdrawal.

ISA may share personal data with service providers strictly necessary for platform operation, such as hosting, infrastructure, authentication, security, communications and payment processing providers.

Payment-related information may be processed by Mercado Pago under that provider's own policies and terms. ISA should not store complete payment card information on its platform.

Data may also be shared when necessary to comply with legal obligations, court orders, protect rights or prevent fraud and security incidents.

Personal data will be retained for the period necessary to fulfill the purposes for which it was collected, maintain the institutional relationship and comply with legal, regulatory or legal-defense obligations.

After the primary purpose ends, certain records may remain stored where there is a lawful basis for their retention.

ISA adopts technical and administrative measures intended to reduce the risks of unauthorized access, loss, alteration, disclosure or improper processing of personal data.

No digital environment is completely immune to incidents. In the event of a relevant security incident, appropriate measures will be taken according to the nature of the incident and applicable law.

Under Brazil's LGPD, where applicable, data subjects may request confirmation of processing, access to data, correction of incomplete or inaccurate information, anonymization, blocking or deletion of unnecessary or unlawfully processed data, portability where applicable, information regarding data sharing and other rights provided by law.

Certain requests may require identity verification and remain subject to lawful data-retention requirements.

The platform may use cookies and similar technologies that are strictly necessary for authentication, session maintenance, security and operation of digital features.

If additional cookies are used for analytics, personalization, advertising or other non-essential purposes, ISA should provide appropriate information and, where required, consent mechanisms.

Requests relating to privacy, data protection and the exercise of data subject rights may be submitted through ISA's official contact channels.

This Policy may be updated to reflect legal, regulatory, operational or technological changes. The current version will remain available on this page.