Privacy Policy

Who the controller is

The controller of personal data processed on this site is {{LEGAL NAME}}, registered under CNPJ {{CNPJ}}, with its seat at {{ADDRESS}}.

The data protection officer required by article 41 of Law 13.709/2018 is {{OFFICER NAME}}, reachable at the address below.

What we collect

We collect only what you choose to send and the minimum the site needs to run. No identity document, no banking detail and no sensitive data is requested in any form.

From the contact form, when you fill it in:

• Name, company and role.
• Work email and phone number, so we can reply.
• How you found h|ve and the context you describe in the open field.

From browsing, aggregated and without identifying you:

• Pages visited, country of origin, device type and performance metrics, measured by Vercel analytics.
• Technical server access logs, which any hosting service generates to operate and protect the application.

This site uses no advertising cookies, builds no behavioural profile and shares no data with ad networks.

Why we use it and on what legal basis

• To answer your message and carry on the commercial conversation you started. Legal basis: preliminary procedures related to a contract, at the request of the data subject, LGPD article 7, item V.
• To understand how the site is used and keep the application fast and secure. Legal basis: legitimate interest, article 7, item IX, limited to aggregated data.
• To comply with a legal or regulatory obligation, where applicable. Legal basis: article 7, item II.

We do not use data from this site to train language models, and we do not sell it.

Who we share it with

We share data only with the processors the site needs, each limited to the purposes above:

• Vercel Inc., for hosting, page delivery and aggregated audience and performance metrics.
• Supabase, for the database where a form message is recorded.
• Google (Google Workspace), whose email service carries and receives the notification sent when a message arrives.

Some of these services process data outside Brazil. The international transfer relies on contractual clauses with each vendor, under chapter V of the LGPD.

How long we keep it

Contact messages are kept for {{RETENTION PERIOD}} from the last exchange, unless the relationship becomes a contract, in which case the contract term applies. Browsing metrics are aggregated and cannot identify you.

After that period, data is deleted or anonymised, except where the law requires it to be kept.

Your rights

The LGPD grants you, at any time and free of charge, the right to:

• Confirm whether we process your data and access it.
• Correct incomplete, inaccurate or outdated data.
• Request anonymisation, blocking or deletion of unnecessary or excessive data.
• Request portability to another provider.
• Know who we share your data with.
• Withdraw consent and object to processing based on legitimate interest.

To exercise any of these, write to the address below. We reply within 15 days.

Security

The site is served only over an encrypted connection. Access to the database holding messages is restricted and logged. If we identify an incident that could pose relevant risk to you, we will notify you and the Brazilian data protection authority, as required by article 48 of the LGPD.

To report a vulnerability in this site, use the channel described at /.well-known/security.txt.

Changes to this policy

When this policy changes materially, we update the effective date at the top of this page. The version published here is the one that applies.