Privacy notice

This notice explains what GAFM® collects when you use the GAFM® certification platform, why, and what you can do about it. Questions and requests: .

The legal entity and contact address for this notice have not been configured yet.

What we collect

Account details you give us: e-mail address, full name, mobile number, country of residence and date of birth, plus your profession and organisation if you choose to add them.

Your official document — type, number and issuing country — which we ask for only when you book the final exam. The exam is supervised and the credential is issued in your name, so we need to confirm who sits it. We do not ask for it to open an account.

What you write on the platform: your answers in the simulator rounds, your answers in the final exam and the questions you send to the expert.

Records of your certification: enrolments, purchases, exam bookings, scores and issued credentials.

Preferences: the market you chose (United States, Brazil or Portugal), kept so the platform opens in the same language on your other devices.

Why we process it

To deliver the certification you enrolled in — generate the exercises, assess your answers, run the final exam and issue the credential. This is the performance of our contract with you.

To keep accounting and tax records of purchases, which is a legal obligation.

To answer you when you contact us, and to keep the platform secure and working.

We do not sell your data and we do not use it for advertising.

Artificial intelligence

The exercises you receive and the assessment of your answers are produced with the help of an artificial intelligence provider. Today that provider is Google (Gemini models).

This means the text you write in the simulator, in the final exam and in questions to the expert is sent to that provider for processing, and the result is stored with your account.

The assessment is not purely automated: the final exam is reviewed by a human examiner before a credential is issued, and you can ask us to review any assessment you disagree with.

Who else receives your data

Payment provider: purchases are processed by our payment platform and by Stripe. We never receive or store your full card details.

Scheduling: the final exam booking uses our scheduling application, which receives what is needed to book the session.

E-mail: transactional messages (confirming your address, resetting your password, access links) are delivered by Resend.

Artificial intelligence: as described above.

These providers process data on our instructions and for no other purpose.

International transfers

The platform serves candidates in the United States, Brazil and Portugal, and some of the providers above operate outside your country. When data leaves the European Economic Area, the transfer relies on the safeguards those providers offer, such as the European Commission's standard contractual clauses.

How long we keep it

While your account exists, we keep what is needed to deliver the certification and show you your history.

If you delete your account, we erase your profile, your simulator rounds, your exam answers and your questions to the expert.

Two things survive that deletion, with every link to you removed: the purchase record, which we must keep for accounting, and the record that a certification was issued, which is what makes a credential verifiable. Neither can be traced back to you afterwards.

Your rights

You can download everything we hold about you, and delete your account, from your profile page — no request needed, no waiting.

You can correct your name, mobile number, country of residence, date of birth, official document, profession and organisation on the same page.

You may also object to a particular processing, ask us to restrict it, or complain to your supervisory authority: in Portugal the CNPD, in Brazil the ANPD.

To exercise anything not available in the interface, write to .

Cookies

We use only what the platform needs to work: a session cookie that keeps you signed in, and a cookie that remembers the market you chose. We do not use advertising or third-party tracking cookies.

Changes

If this notice changes in a way that affects you, we will say so on the platform before the change takes effect.