Updated on October 18, 2026
Privacy policy
Draft under legal review. This text is provisional and may change before Tripula launches. In case of any discrepancy, the Portuguese version prevails.
This policy explains which personal data Tripula processes, why, and what your rights are, under Brazil's General Data Protection Law (LGPD, Law 13.709/2018).
1. Who the controller is
Be Talent Tech LTDA, CNPJ 04.600.221/0001-51, headquartered at Rua Barão de Santa Tecla, 611, Centro, Pelotas/RS, CEP 96010-140, is the controller of the personal data processed on the Tripula website and platform. The data protection officer can be reached at privacy@tripula.dev.
2. Data we process
Account data: name, email, organization and, when you connect GitHub, the account's ID and username.
Billing data: name or company name, CPF or CNPJ, address and card details, processed by Stripe (card details stay with Stripe only).
Usage data: platform events (tasks, stages, timings, Quality results), access logs and technical browser data.
Machine content (code, databases, files) stays on the machine's disk and is not used for metrics or to train AI models.
3. What we use it for
To provide the contracted service (performance of contract), to bill and issue invoices (legal obligation), to keep the platform secure and prevent abuse (legitimate interest), and to send notices about your account and tasks.
Marketing communications are only sent with your consent, which you can withdraw at any time.
4. Sharing
We only share data with providers needed to run the service (infrastructure, payments, email delivery), under contract and with appropriate security measures, or when required by law.
What agents send to Claude, Codex or other model providers goes out from your own account with them and is governed by those providers' terms and privacy policies.
The list of providers that process data for Tripula (subprocessors), with what each one does, which data it receives and in which region, is on the Security and subprocessors page.
5. Retention and security
We keep data while the account is active and for the period required by law for tax records. After cancellation, machines are deleted following 30 days of hibernation.
Each machine is an isolated VM, and git access keys are kept outside it. Even so, no system is fully immune to incidents; if one affects your data, you will be notified.
6. Your rights
You can request confirmation of processing, access, correction, portability, anonymization or deletion of your data, and information about sharing, through the data protection officer's email. You can also file a complaint with Brazil's National Data Protection Authority (ANPD).
7. Cookies
This website does not use advertising cookies or third-party analytics tools. The platform only uses the cookies needed to keep your session.