Privacy
What we collect, and where it goes
Written against the actual code, not from a template. Last checked 26 October 2026.
Who is responsible
Meritus is a brand of Brown Lima LLC. Questions about your data, including requests to see or delete it, go to contato@trymeritus.com and are answered by a person.
This page describes what the site does today. When the behaviour changes, this page changes with it, and the date above moves.
What you give us on purpose
The free assessment. Your name, e-mail, country of citizenship, field, years of experience, immigration status, whether you have had a visa refused, and your answers to the ten criteria.
The assistant. Everything you type into it, and — if you choose to book — your name, e-mail and phone number. The assistant tells you it is automated before you type anything.
Booking a meeting. Name, e-mail, phone with country code, country, the subject you describe, and your browser's time zone, which is used only to show times in your own clock.
You can use the whole site, read every page and run the criteria grid without giving us any of this.
What is collected automatically
Your IP address, kept as a one-way hash, purely to limit how many submissions one source can make per hour. It is not stored with your name.
Where you came from. If you arrive from an ad or a search, the campaign markers in the link (utm, gclid, fbclid) and the first page you landed on are held in your browser's session storage and sent with your enquiry, so we know which page produced it. Closing the tab discards them.
Meta pixel. The site loads the Meta pixel, which records page views and two events: completing the assessment and booking a meeting. Your browser settings and Meta's own controls govern this.
Who else receives it
Anthropic. The assistant is built on a language model operated by Anthropic, so the text of your conversation is sent to their API to produce each reply. Do not type anything into it that you would not put in a first e-mail to a stranger — for case detail, the booked meeting exists precisely so that it has a better place to go.
EspoCRM. Our own customer record system, on our own server. Your name, e-mail, phone, country and a summary go there so an enquiry does not get lost.
Brevo. Sends the e-mails — our internal notifications and your booking confirmation.
Google Calendar and Zoom. Booking a meeting creates a calendar event and a video room. Your name and e-mail go to both, and Google sends you the invitation.
None of these receive your data for their own marketing, and we do not sell it to anyone.
How long it is kept
Enquiries, assessments and bookings are kept as a business record for as long as the relationship could plausibly continue, and conversation logs with the assistant are kept so we can check that it behaves correctly and see what people actually ask.
If you want any of it gone, write to contato@trymeritus.com and say so. We delete it and confirm by reply. You do not have to give a reason, and asking does not affect anything else.
Your rights
Wherever you are reading this from, you can ask us what we hold about you, ask for it to be corrected, ask for it to be deleted, and withdraw a consent you gave. The address is the same one above, and the answer comes from a person rather than a form.
If you are in the European Union or the United Kingdom, this is the GDPR. If you are in Brazil, it is the LGPD. The practical answer we give is the same in both cases.
Cookies
The site itself sets no cookie to track you. The attribution markers described above live in session storage and disappear when you close the tab, and the only persistent third-party cookies come from the Meta pixel.
There is no cookie banner because there is almost nothing to consent to. If that changes, the banner appears and this paragraph goes away.
Find out where your record stands
The assessment is free and reads your record against the standard USCIS applies. You get a written answer — including when the answer is that this is not your pathway yet.