Privacy policy

1. Who is responsible

The data controller is GSDev Tech, CNPJ 67.106.241/0001-90, based in Niterói, RJ, Brazil. For any privacy matter, email [email protected].

2. What data we handle

Public business data (outreach): to find businesses that may benefit from our services, we look up information the businesses themselves publish on Google Maps (Google Business Profile), such as business name, industry, address, business phone, website, opening hours and public reviews. We do not access private data or use any non-public source.

Data you send us: when you fill in a form, message us on WhatsApp or send an email, we receive whatever you choose to share, such as name, phone, email, business details and project details.

Browsing data: we use Umami, an open-source analytics tool running on our own server, to understand how the site is used, such as pages visited, referrer, device type, browser and country. Umami does not use cookies, does not ask for your name or contact details and shares nothing with third parties: the data stays in our possession.

Session recording and heatmaps: on a random sample of visits, Umami also records how the page was used (scrolling, clicks and mouse movement) for a few minutes, so we can see where people get stuck or give up. Anything you type into form fields is masked in your own browser before it is sent, so the recording does not show what you wrote. The recording is tied to a random session code, with no name, email or phone number, and is seen only by us.

The site also stores your theme preference (light or dark) in your own browser. We do not use advertising cookies. The hosting provider may log technical data, such as IP address, for security and to keep the site running.

3. How we use it

• Contacting businesses to present a commercial offer related to their business.
• Replying to messages, preparing quotes and discussing projects.
• Understanding site usage, through aggregate statistics and unidentified session recordings and heatmaps, to improve content and navigation.
• Delivering contracted services and providing support.
• Meeting legal, tax and accounting obligations.

4. Legal bases

• Legitimate interest (art. 7, IX), for outreach using data businesses made public, respecting the purpose and context in which it was published (art. 7, §§ 3 and 4), and for site statistics, session recordings and heatmaps.
• Pre-contractual steps and contract performance (art. 7, V), for quotes and services you request.
• Compliance with legal obligations (art. 7, II).
• Consent (art. 7, I), where applicable, which you can withdraw at any time.

5. We do not sell your data

We do not sell, rent or hand over to third parties the information found publicly or the information you give us. Data is only shared with providers needed to run the service, such as the tool that receives the site forms (Formspree), WhatsApp and the hosting provider, or when required by law or by a competent authority.

6. How long we keep it

We keep data only as long as needed for the purpose it was collected for, or to meet legal obligations. Outreach data about businesses that show no interest is deleted once it is no longer useful, or as soon as deletion is requested.

7. Your rights

Under art. 18 of the LGPD, you can, at any time and free of charge:

• Confirm whether we process your data and access it.
• Correct incomplete, inaccurate or outdated data.
• Request anonymization, blocking or deletion of unnecessary data.
• Request data portability.
• Find out who your data was shared with.
• Withdraw consent and object to processing.

If you no longer want to hear from us, just reply asking to be removed. Your data comes off our outreach list.

8. Security

We take reasonable technical and administrative measures to protect data against unauthorized access, loss or misuse, and we limit access to those who actually need it.

9. Contact and changes

Privacy requests and questions should be sent to [email protected]. We reply as soon as possible. If you are not satisfied, you can also contact Brazil's National Data Protection Authority (ANPD).

This policy may be updated. The date of the latest version is always shown at the top of the page.