Privacy Policy
Last updated: August 24, 2026
1. Introduction
A&B Academy ("we"), Brazilian company registration (CNPJ) 50.460.163.0001/25, is the company responsible for the A&B Codex platform (the "Platform"). This Privacy Policy describes how we collect, use, store and protect the personal data of Platform users, in compliance with Brazilian Law No. 13.709/2018 (General Data Protection Law — LGPD) and other applicable legislation, including, where relevant, the EU General Data Protection Regulation (GDPR) for subscribers in the European Economic Area.
2. What Data We Collect
To provide the service, we collect the following personal data:
- Registration data: name and email address, provided when you subscribe or first sign in.
- Authentication data: your password is managed entirely by Supabase Auth, the authentication service we use — it is never stored in plain text, and we ourselves do not have access to it.
- Usage and subscription data: the plan you purchased, subscription status, market (Brazil or International) and corresponding currency, your generated cocktail-menu history, and renewal date, needed to control your monthly usage limit.
- Language preference: whether you choose Portuguese or English for the interface — this does not affect your plan, market or price.
- Briefing data: the information you voluntarily enter in the menu generation form (venue concept, available ingredients, target audience, etc.), used exclusively to create your original cocktail menu.
3. Cookies and Local Storage
The Platform uses the following cookies:
- Session (login) cookie: created by Supabase Auth to keep you signed in without having to enter your password on every visit. It is checked and renewed by our server on every visit — it is not a simple file loosely stored in your browser. Essential to the site's operation.
- Language preference cookie (
ab_idioma): created when you manually switch the interface language (PT/EN), to remember that choice on your next visit. It stores only "pt-BR" or "en", no personal data, and expires within 1 year. Essential to the site's operation. - Cookie choice cookie (
ab_cookies): created when you click "Accept" or "Reject" on the cookie banner, to remember your choice and avoid asking again on every visit. It stores only "aceito" (accepted) or "rejeitado" (rejected), no personal data, and expires within 1 year. Essential to the banner's operation. - Traffic-analysis cookies (Google Analytics): only loaded after you click "Accept" on the cookie banner (see section 9). If you click "Reject", or simply make no choice, these cookies are never loaded.
You can withdraw your traffic-analysis consent at any time by clearing this site's browsing data (cookies) in your browser — the banner will appear again on your next visit.
4. Purpose of Data Processing
We use the collected data exclusively to:
- Authenticate your access and keep your session active on the Platform;
- Generate the original cocktail menus you request, based on the briefing data you provide;
- Control your plan's monthly usage limit and process your subscription renewal;
- Display the interface in your preferred language;
- Understand, in aggregate and only with your consent, how the Platform is used, in order to continuously improve it (see section 9);
- Provide technical support and respond to your requests;
- Comply with legal and regulatory obligations.
5. Data Sharing
We do not sell, rent, or improperly share your personal data with third parties for marketing purposes. Your data may be processed by the following service providers, strictly to enable the Platform to function:
- Technology infrastructure providers (website and database hosting), used to host the Platform, authenticate your login, and process menu-generation requests;
- Payment processor (Stripe), responsible for managing your subscription and billing;
- Artificial intelligence service (Google Gemini), to which only the briefing data necessary to generate your cocktail menu content is sent;
- Google Analytics, only if you consent via the cookie banner, for aggregate traffic analysis (see section 9);
- Transactional email service, used only for the system's automatic emails (registration confirmation, password reset).
These providers have limited access to only the data strictly necessary to perform the contracted services, and are subject to confidentiality obligations.
6. Data Security
We adopt reasonable technical and administrative measures to protect your personal data against unauthorized access, loss, alteration or leakage, including password encryption (managed by Supabase Auth, never in plain text) and access controls on our database.
7. Data Retention
We keep your personal data for as long as your account remains active on the Platform, or for as long as required to comply with legal, tax or regulatory obligations. After that period, the data is deleted or anonymized, unless its retention is required by law.
8. Your Rights as a Data Subject
Under the LGPD (and, where applicable, the GDPR), you have the right, at any time and upon request, to:
- Confirm whether we process your data;
- Access, correct or update your personal data;
- Request anonymization, blocking or deletion of unnecessary or excessive data;
- Request portability of your data to another service provider;
- Withdraw your consent and request cancellation of your account;
- Obtain information about who we share your data with.
To exercise any of these rights, please contact us at support@aebcodex.com.
9. Traffic Analysis and Marketing
We use Google Analytics to better understand navigation on the Platform (pages visited, time spent) and to continuously improve it. These cookies are only loaded after you click "Accept" on the cookie banner shown on the site — if you reject it, or make no choice, no analytics script is loaded, and your browsing continues normally, with no loss of functionality. You can withdraw your consent at any time by clearing this site's browsing data (cookies) in your browser. We do not use marketing or advertising cookies.
10. Changes to this Policy
This Privacy Policy may be updated periodically, to reflect improvements to the Platform or changes in applicable legislation. We recommend reviewing this document periodically. The last-updated date is shown at the top of this page.
11. Contact
If you have questions about this Privacy Policy or about how your personal data is processed, please contact us at support@aebcodex.com.
See also our Terms and Conditions of Use.