Last updated: 21 September 2026
This Privacy Policy explains how Quorus processes personal data when you visit this website, contact us or use our services. Processing is carried out in accordance with the GDPR (Regulation (EU) 2016/679), the German BDSG and TTDSG, and the Brazilian LGPD (Law 13.709/2018).
Controller: Quorus Inteligência Tecnológica Ltda.
Privacy contact: projetos@quorus.com.br
To exercise your rights or ask questions about the processing of personal data, you can reach our Data Protection Officer (Datenschutzbeauftragter) at projetos@quorus.com.br.
When you access the site, technical data such as your IP address and the information you submit through forms are processed to deliver the content, ensure the stability and security of the platform and prevent misuse. The legal basis is our legitimate interest in operating the site securely (Art. 6(1)(f) GDPR; Art. 7 (IX) LGPD).
The following processors act on our behalf under data processing agreements:
| Provider | Purpose | Location |
|---|---|---|
| Akamai Technologies, Inc. (Linode) | Hosting and server infrastructure | Brazil (São Paulo) |
| Google Ireland Ltd. | Usage analytics (GA4) and tag management (Tag Manager) | Ireland (EU) / USA |
For security and stability reasons, our servers automatically record access data (including IP address, date and time of the request, page accessed, browser and operating system). These logs are stored for up to 30 days and then deleted, unless they need to be retained to investigate a security incident.
Strictly necessary cookies are set on the basis of our legitimate interest. Analytics and marketing cookies are only activated after your freely given, informed and revocable consent, collected through our consent panel. You may review or withdraw consent at any time. The details of each cookie, its purpose and duration are described in our Cookie Policy.
When you contact us through a form or by e-mail, we process the data you provide (such as your name, e-mail and the content of your message) solely to respond to your request. The legal basis is the taking of pre-contractual steps and the performance of a contract (Art. 6(1)(b) GDPR; Art. 7 (V) LGPD) or our legitimate interest in replying. The data is kept for as long as needed to handle your request and is then deleted in line with statutory retention obligations.
TrafficHub is Quorus's paid media management application. When an advertiser connects their Meta (Facebook and Instagram) ad account to it, the application processes:
What we do not process: the application does not collect, receive or store personal data of Facebook or Instagram users. It does not read profiles, messages, contact lists or custom audiences, nor any information that identifies the people who saw or interacted with the ads. All figures are aggregated at campaign level.
Purpose: to show campaign performance to the advertiser, to produce reports and analyses of that performance, and to run the automation rules the advertiser sets up (for example, adjusting a budget or pausing a campaign according to criteria they define). The data is not used for third-party advertising, is not sold and is not shared with third parties for commercial purposes.
Legal basis: performance of a contract with the advertiser (Art. 6(1)(b) GDPR; Art. 7 (V) LGPD) and, for the access token, the consent given when connecting the account, which can be withdrawn at any time by disconnecting.
Processors: Akamai Technologies (Linode), for hosting the application and its database; Hostinger, for the infrastructure that schedules the synchronisation and automation routines; and, when the advertiser uses the AI analysis features, Anthropic PBC (USA), which receives only the performance figures needed for that analysis. No processor receives the access token.
Security and retention: the token is stored encrypted (AES-GCM), with the key kept outside the code and the database; all communication with Meta takes place over HTTPS. The token is kept while the account remains connected. Metrics are kept as history for reports and comparisons over time until the advertiser requests their deletion (section 8).
Some processors may handle data on servers located outside the European Union or Brazil. In such cases, transfers rely on Standard Contractual Clauses approved by the European Commission and supplementary technical measures (IP anonymisation, encryption in transit), ensuring an adequate level of protection.
With regard to your personal data, you may at any time:
To exercise these rights, simply write to projetos@quorus.com.br.
The processing of personal data relies, as applicable, on:
We may update this Privacy Policy to reflect legal, technical or organisational changes. The version in force is always the one published on this page, with its corresponding last-updated date.