Privacy policy
Updated on .
Radar do Fornecedor is an independent tender-alert and supplier-registration (CRC) advisory service, with no affiliation with Petrobras or Petronect. This page describes what the system collects, how it uses that information and how you can leave. It describes what the software actually does.
Who is responsible for the data
Radar do Fornecedor. For anything covered by this page — access, correction, deletion or questions — contact contato@radardofornecedor.com.br. This is also the address that answers replies to the emails we send.
What we collect
Alert registration. Your email address, your company’s CNPJ (Brazilian business tax ID), selected sectors and up to 3 keywords describing what you supply. Using the CNPJ, we query public Federal Revenue data services and store the response with your registration: legal name, trading name, registration status, CNAE activity codes, company size, state, municipality and incorporation date. We also record the date, time and IP address of consent as evidence of your acceptance.
Email delivery. We store which opportunities have already been sent to you, so that we do not repeat them the next day, and the events returned by our email provider: delivered, opened, clicked, bounced and marked as spam. This helps us determine whether the alert arrived and stop sending to mailboxes that reject messages.
Free CNPJ lookup. The lookup at /en/crc-petrobras/consulta-cnpj (Portuguese version: /crc-petrobras/consulta-cnpj) asks only for the CNPJ. The public Federal Revenue response may remain in the technical cache for up to 30 days to reduce repeated lookups. After viewing the result, you may voluntarily provide an email address and mobile number and confirm that you want follow-up about that lookup. Only this second submission creates a commercial record; it does not subscribe you to alerts or marketing messages.
CRC diagnostic and advisory services. When you request the diagnostic or contact us about advisory services, we store your CNPJ, legal name, email, phone number (if supplied) and commercial-service history. To prepare a draft assessment, we send public CNPJ data and the information you supplied to an AI provider (Google Gemini). A person reviews the final text before you receive it.
Payment. Diagnostic payments are processed by Asaas. We receive only the payment confirmation and charge identifier — we do not receive or store your card details.
Security and abuse prevention. We record the IP addresses of form requests to enforce attempt limits. The registration form uses Cloudflare’s anti-bot verification (Turnstile).
Website usage. Optional measurement and advertising start disabled. If you accept optional cookies, the site loads the Google tag (gtag.js). It records the visit (page address, title and referral source) in Google Analytics 4, records Google Ads conversions and may feed audience lists used to show our ads to previous visitors (remarketing). This uses Google cookies in your browser. None of these events contains your email, CNPJ or phone number, and we do not use this data to identify you personally. The tag does not load on restricted-access pages or on the private links we send by email (diagnostic and proposal): there is no measurement there. Restricted areas (the administration dashboard and subscriber area) use a session cookie; login cannot work without it.
How we use it
To send the alerts you requested, operate and support the service, respond to commercial enquiries, measure website usage and meet legal obligations. The legal basis is your consent at registration (LGPD, Article 7, I) and, for commercial enquiries, carrying out the steps you requested.
Website measurement and optional advertising depend on your choice in the cookie notice. You may accept or reject them without losing access to public pages. Your preference is retained in your browser for up to one year; clear this site’s browser data to choose again. Strictly necessary session, security and abuse-prevention cookies do not depend on that choice because they are required for requested features.
We do not make automated decisions that affect you: matching a tender to your keywords only determines what goes into the email. You decide what to do with the information.
Who we share it with
We do not sell, rent or give your data to third parties for their marketing. Your email and CNPJ are not added to anyone else’s list.
We use providers that process data on our behalf to operate the service: database, hosting, CDN and anti-bot verification (Cloudflare), email delivery (Resend), public CNPJ lookup, payment (Asaas), assessment drafting (Google Gemini), audience measurement (Google Analytics) and advertising (Google Ads). We also provide data when required by law or a court order.
How to leave (and request deletion)
Alert emails and the content sequence include an unsubscribe link in the footer. Transactional emails — confirmation, login and delivery of a purchased service — do not have this footer because they are part of operating the service. You can also reply to any of them with “sair” (unsubscribe), or write to contato@radardofornecedor.com.br. Emails remain in Portuguese.
When you unsubscribe, we stop sending to that subscription and retain a record of the request. A new registration using the same email will only receive alerts after completing the two-step confirmation again; nobody reactivates your address without your click. If you want your data fully deleted, request this by email and we will delete it, keeping only what the law requires us to retain.
How long we keep it
Your registration is retained while you want to receive alerts. A new registration’s confirmation link expires in 24 hours, and an unconfirmed registration does not receive email. The CNPJ lookup cache lasts 30 days. Sent-alert history and email events are retained for as long as needed to operate the service — to avoid repeating opportunities and sending to mailboxes that reject messages. Commercial-service data is retained for the duration of the relationship and then for the applicable statutory period.
Your rights under the LGPD
Law 13,709/2018 guarantees your rights to confirmation of processing, access, correction of inaccurate data, anonymisation or deletion, portability, information about sharing and withdrawal of consent at any time.
To exercise any of these rights, write to contato@radardofornecedor.com.br. We reply to the address you use and may ask for identity confirmation before changing a registration, precisely to prevent anyone from changing data that is not theirs.
Changes to this page
When something relevant changes, we update the content and date at the top. If a change affects what you have already consented to, we will notify you by email.
Independent service, with no affiliation with Petrobras or Petronect. Tender information comes from official public sources.