Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

2. Data We Collect

We collect the following categories of data:

Personal Data (provided by you)

• Name and email address (via the contact form or when you email us)
• The content of your message and any information you choose to share with us

Usage Data (collected automatically)

• IP address, browser type, device type, and operating system
• Approximate geographic location (city, region, country) and timezone, inferred from your IP address
• Pages visited and time spent on the Website
• Referring URL and search terms that led you to our Website

3. How We Collect Data

• Contact form: When you fill out and submit the contact form on our Website.
• Cookies: Functional cookies used for theme preferences (see Section 10).
• Hosting provider: Our hosting provider (Cloudflare) may automatically log access data such as IP addresses.

4. Purpose of Data Collection

We collect and process your data for the following purposes:

• Service delivery: To review your message, prepare specifications, mockups, and a proposal when you ask for one, and communicate with you about your project.
• Communication: To respond to your request and discuss project details, scope, and pricing via email.
• Legal compliance: To comply with applicable laws, regulations, and legal obligations.

We do not use your data for marketing, advertising, or promotional purposes. We will only contact you about the message you sent us or the project we discuss.

5. Legal Basis for Processing

In accordance with the Brazilian General Data Protection Law (LGPD - Lei 13.709/2018), we process your data under the following legal bases:

• Consent (Art. 7, I): When you submit the contact form, you provide consent for us to process the data you provided.
• Contractual necessity (Art. 7, V): Processing necessary for the execution of a contract or pre-contractual procedures at your request.
• Legitimate interest (Art. 7, IX): Processing necessary for our legitimate interests, such as improving our Website, provided your fundamental rights are not overridden.

6. Third-Party Services

We use the following third-party services that may process your data:

• Cloudflare (hosting and bot protection) - Serves the Website, may log access data such as IP addresses, and may run Turnstile on the contact form to tell people from bots using technical signals from your browser.
• Brevo (email delivery) - Delivers the message you send through the contact form to our inbox. Your name and email address are included in the email transmission.

Each of these providers has their own privacy policy governing how they handle data. We recommend reviewing them for your own understanding.

7. International Data Transfers

Your data may be transferred to and processed on servers located outside of Brazil, as our infrastructure provider (Cloudflare) operates servers internationally. These transfers are conducted with appropriate safeguards in accordance with the LGPD (Art. 33).

8. Data Retention

• Contact data: The information you submit through the contact form is sent to us via email. We retain this data for the duration of any business relationship and for up to 5 years after the last interaction, for legal and contractual record-keeping purposes.
• Usage data: Server access logs are retained by our hosting provider according to their own retention policies.

9. Your Rights

Under the LGPD and, where applicable, the GDPR, you have the following rights regarding your personal data:

• Access: Request confirmation of whether your data is being processed and obtain a copy of it.
• Correction: Request correction of incomplete, inaccurate, or outdated data.
• Deletion: Request deletion of your data when it is no longer necessary for the purpose it was collected.
• Portability: Request transfer of your data to another service provider.
• Withdrawal of consent: Withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• Objection: Object to processing based on legitimate interest if you believe your fundamental rights are being affected.

To exercise any of these rights, reach out through our contact form. We will respond within 15 business days.

10. Cookies

We use only functional storage that is necessary for the Website to work properly:

• Theme preference: We store your display preference (light or dark mode) in localStorage to remember your choice between visits. Until you choose, the Website follows your device's setting.

We do not use marketing cookies, advertising trackers, or third-party analytics cookies.

11. Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (HTTPS/TLS).
• Use of industry-standard infrastructure providers (Cloudflare) with their own security certifications.
• Secure email delivery through Brevo with TLS encryption.

While we take reasonable precautions, no system is 100% secure. If you become aware of a security vulnerability, please contact us immediately through our contact form.

12. Children's Privacy

Our Services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe that a minor has provided us with personal data, please contact us and we will take steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. For material changes, we will make reasonable efforts to notify affected individuals via email.

14. Contact and Data Protection

For questions about this Privacy Policy, to exercise your data rights, or to report a privacy concern, contact our Data Protection contact:

If you believe your data protection rights have been violated, you also have the right to file a complaint with the Brazilian National Data Protection Authority (ANPD).