Privacy
Policy

1. 1. Data controller

   The data controller is Aguiar Labs, registered under CNPJ 60.440.140/0001-02, headquartered in São Paulo — SP, Brazil. Contact for privacy inquiries: contato@aguiarlabs.com.br.

2. 2. Data we collect

   We only collect what is essential: (a) navigation data through our hosting infrastructure (IP address, device type, browser, timestamp, requested URL) for security and diagnostics; (b) data you voluntarily provide (name, email, company, message) when contacting us via the website form; (c) email address when you voluntarily subscribe to our newsletter.

3. 3. How we use your data

   We use your data to: (a) respond to your inquiry; (b) send quotes and commercial proposals upon request; (c) comply with legal and tax obligations; (d) protect our infrastructure from abuse and fraud. We do not use your data for marketing without explicit consent.

4. 4. Legal basis

   We process data based on: (a) legitimate interest for security logs; (b) contract performance or pre-contractual steps for commercial proposals; (c) consent for non-essential communications; (d) legal obligation for tax retention. EU visitors: equivalent bases under GDPR Article 6.

5. 5. Sharing with third parties

   We do not sell, rent, or trade your data. We only share with processors necessary for site operation: Vercel Inc. (hosting, US-based); Resend (transactional email delivery for the contact form and newsletter list management, US-based). All international transfers are covered by Standard Contractual Clauses. If we engage new processors, this policy will be updated.

6. 6. Cookies and local storage

   We use one essential technical cookie (NEXT_LOCALE) to remember your preferred language, and browser localStorage to remember your visual theme choice. Neither tracks you across sites. Full details in our Cookie Policy.

7. 7. Analytics and measurement tools

   We use Umami Analytics (cloud.umami.is) to understand in aggregate how the site is used. Umami is a privacy-focused tool that does NOT use cookies, does NOT collect identifiable personal data (IP addresses are anonymized before storage, no browser fingerprinting) and is compliant with LGPD and GDPR without requiring explicit consent. Data collected anonymously: page visited, referrer, browser, operating system, country. Umami's privacy policy: umami.is/privacy. We do not use Google Analytics, Meta Pixel, or any other third-party tool.

8. 8. Data retention

   We retain: (a) access logs for 90 days; (b) contact emails and commercial communications for 5 years after the last contact; (c) automatic backups for 30 days. After these periods, data is deleted or anonymized.

9. 9. Your rights as data subject

   Under LGPD Article 18 and GDPR, you have the right to: confirm the existence of processing; access your data; correct incomplete or outdated data; request deletion; restrict processing; data portability; information about sharing; and withdraw consent. EU users may also lodge a complaint with a supervisory authority.

10. 10. How to exercise your rights

    Send your request to contato@aguiarlabs.com.br identifying yourself and describing your request. We respond within 15 calendar days (LGPD) or 1 month (GDPR). Free of charge, except in abusive or manifestly unfounded cases.

11. 11. Security

    We adopt technical and administrative measures to protect your data: HTTPS/TLS on all connections, internal access control, regular dependency updates, and encrypted backups. No system is 100% invulnerable — in the event of a material incident, we will notify you and the relevant authorities as required by law.

12. 12. Minors

    Our services are not directed to individuals under 18. We do not intentionally collect data from children or adolescents. If we identify inadvertent collection, the data will be deleted immediately.

13. 13. Changes to this policy

    We may update this policy periodically. The effective date at the top of the document indicates the current version. Material changes will be communicated on our website or by email to active contacts.

14. 14. Data Protection Officer (DPO) and contact

    The person in charge of data processing can be contacted at contato@aguiarlabs.com.br. Brazilian users may also contact the ANPD (www.gov.br/anpd); EU users may contact their national supervisory authority.

This document is the current version. Changes are published with a new effective date.