A skill for Claude Code and Codex · Software and infrastructure
lgpd-baseline is the skill that gets your AI to take Brazil's LGPD (the country's data protection law, not GDPR, CCPA, or any other jurisdiction's) seriously in your actual product: a processing map, legal basis by purpose, privacy notice, a channel for data subjects, retention and deletion, third-party contracts, international transfers, incident response, and RIPD, plus the go-live checklist no software should skip. Operational and auditable, not just paperwork.
Solo skill: unlocks right away, no guarantee after download. Purchase terms.
Or get all 25 skills plus 9 bonuses in the Supreme Pack for R$ 497.
The problem
LGPD handled with a banner, a generic checkbox, and a copy-pasted policy looks like compliance, until the first data subject request or the first incident. Three symptoms, and what changes with the skill.
| Without the skill | With lgpd-baseline |
|---|---|
| One I-accept-everything checkbox at signup serves as the legal basis for the account, billing, marketing, and model training, all at once. | Every purpose gets its own legal basis, operational use kept separate from marketing, analytics, and AI, and no data reused for a new purpose without reviewing the basis and the notice. |
| A customer asks for their data, or asks for it to be deleted, and nobody knows where it lives, or which third parties, backups, and exports it ended up in. | A living map of every flow, vendor, and deadline, with the product ready to export, correct, delete, or anonymize a data subject's information. |
| The app sends customer history to an AI API, keeps everything forever, and has zero plan for when data leaks. | Minimization before any data goes to a model, retention with a real deadline and a deletion job, and an incident process with defined roles and triggers. |
What you get out of it
The LGPD baseline applied to your actual product, ready to guide your code, contracts, and policy.
data, data subject, purpose, legal basis, third parties, country, deadline, and disposal for every flow
the mandatory sections, layered: a short summary at the point of collection and the full policy
deadline by category, the trigger that starts the clock, and the final action, reflected in backups too
what the product needs to meet before going into production
How it works
For every flow: what data comes in, who it belongs to, what it's for, who it's shared with, whether it leaves Brazil, how long it's kept, and how it's disposed of.
Contract, legal obligation, legitimate interest, or consent, each one in its proper place, with extra care around marketing and AI.
A single channel, identity verification, and a system able to export, correct, delete, and anonymize data without breaking the audit trail.
Controller and processor roles, a DPA with every vendor, international transfers mapped out, least privilege, and access logs.
Launch checklist, a tested incident process, and an RIPD (Brazil's data protection impact assessment) for higher-risk processing, before the flow goes into production.
Before you buy
Its limits
The skill defines the operational, auditable minimum every piece of software needs, but it doesn't replace case-by-case legal analysis. Sensitive data at scale, or an incident with real risk, still call for a data protection lawyer.
Compliance depends on product, process, contracts, and governance all at once. The skill guides all four layers, but internal process and signed contracts are still up to whoever runs the business.
A software contract with LGPD clauses and a full DPA is technology-contract-expert's job, and the product's technical security is security-checklist's, both in the catalog.
What you receive
The price
Just lgpd-baseline
R$57one time payment
Bought it solo and now want it all? Message me on WhatsApp and I will deduct what you already paid.
Supreme Pack
R$ 1.665R$497or 10x on a card
Buying all 25 solo adds up to R$ 1.665. The pack pays for itself by the ninth skill. See everything the Supreme Pack includes
04 · Software and infrastructure
Before you ask
The operational minimum of LGPD applied to your product: a processing map, legal basis by purpose, privacy notice, a channel for data subjects, retention and deletion, third-party contracts, international transfers, incident response, the DPO (called encarregado under LGPD), and the RIPD, with a go-live checklist.
No. A banner, a generic checkbox, and a policy with no data map aren't enough on their own. Compliance depends on your product being able to say what data it processes, why, where it's stored, who it's shared with, for how long, and how it gets deleted.
Yes, with its own set of precautions: minimizing data before it goes to the model, controlling what reaches third parties, keeping a vendor trail, and running an RIPD assessment whenever the AI uses history, messages, or support tickets.
No. It organizes the operational baseline and flags what needs a decision. High-risk cases, sensitive data at scale, or a significant incident call for legal analysis. This skill covers Brazilian law only, it doesn't cover GDPR, CCPA, or any other country's regulation.
Yes, the license covers your work for third parties. What's off limits is reselling or redistributing the skill.
One-time payment, 12 months of updates. No refunds after download; the Supreme Pack comes with a 7-day guarantee.
