Privacy and data removal
dembli publishes data public bodies make public about Brazilian companies. This page explains what we publish about people, why, what happens when you visit the site and how to ask for removal.
Updated October 2026 · what changed
In short
- We publish
The companies' registration as the Receita publishes it. Partners and contacts only on request and out of search engines.
- We never publish
A CPF or its digits, a MEI's contacts, the names of possible minors.
- Want something removed?
Write with the CNPJ and the name. We answer within 15 days.
Ask for removal
What we publish
Of each company, what the Receita Federal publishes in the CNPJ Open Data: legal name, trade name, registration status, activities, head office address, size, capital, tax regimes and what changed in the registration month by month. Of individual entrepreneurs and MEIs, the company's name, which is its holder's.
Partners and administrators and, of legal persons, the phone and e-mail given to the Receita show only when the visitor asks to see them, and never to search engines. A phone or e-mail other companies also give is shown with how many they are; one more than 20 companies give is not shown, being usually an accountant's or a service's, nor an address at a personal service such as Gmail or Hotmail.
When they reach the site, the records public bodies publish of a company will be only those published under its exact CNPJ, with a link to check them at the source.
What we do not publish
- No CPF, nor the digits the Receita leaves visible.
- No phone or e-mail of an individual entrepreneur or MEI, nor their address's history.
- The names of partners who may be minors.
- No record found by a company's or a person's name alone.
Why and on what basis
So that anyone may know, with source and date, what public records say of a company they intend to deal with. Processing the data the Receita Federal publishes as open data, for that purpose, rests on legitimate interest (art. 7, IX, and §§ 3 and 7, of Law 13.709/2018), assessed before publication.
Who visits the site
Looking up companies and statistics needs no sign-up. The server records the page, the response and the time, without the IP address, the URL's parameters or any form's content.
To list the most read posts, a post's page tells the site once it has been on screen for ten seconds, and the site adds one read to the post for that day. We keep nothing of who read it: no address, cookie or identifier. The counts are deleted after 90 days.
Audience measurement (Google Analytics). Only if you allow it, the site loads Google Analytics, by Google LLC, acting as a processor: it records the pages viewed, when you ask to see a company's contacts or partners (not what is shown), where the visit came from, the device and browser type and an approximate location, and sets the _ga and _ga_* cookies for up to 14 months. The data is processed in the United States. We do not use Google's signals for advertising or ad personalization. Without your permission, nothing is loaded and nothing is sent to Google; withdrawing it stops measurement and deletes those cookies.
Advertising
Today there are no ads or advertising cookies on the site. The home page will never carry ads. When ads arrive, this section will list the partners and their cookies, and we will ask for a new choice before turning them on. A company's page will never send advertisers its CNPJ, partners or contacts.
Your rights
A data subject may ask for confirmation of processing, access, correction, anonymisation, objection and removal (art. 18 of Law 13.709/2018). The data come from the Receita Federal: a correction to the registration is made with the Receita and appears here with the next monthly publication. If dembli's answer does not resolve it, you may complain to the National Data Protection Authority (ANPD).
Ask for removal
- Copy the CNPJ of the page the information appears on.
- Write to contact@dembli.com with the CNPJ and the name to remove.
- Within 15 days, the removal holds for the following pages, cached copies included.
Controller and data protection officer
dembli is being incorporated; until then, its founder is the data controller and answers as data protection officer at contact@dembli.com.
What changed in this notice
October 2026. The launch-interest form and its cookie go; the sign-ups already made keep the rules they were collected under and are deleted 12 months after each. The cookie table, the advertising section and the sharing section come in.