Privacy policy

Who is responsible

This website belongs to AC Alcateia, registered under CNPJ 32.557.495/0001-40, which decides how the personal data processed through it is used, under the Brazilian General Data Protection Law (Law No. 13,709/2018, LGPD).

Requests about personal data are made through the channels in the section “How to contact AC Alcateia about your data”.

What this policy covers

This policy applies to the pages of the AC Alcateia website, to the quote form and to the contact links that start from it.

WhatsApp, Instagram and other third-party services have their own privacy policies, which apply when you use them.

Quote form

The form lets you describe what your business needs so that AC Alcateia can reply with the right path: a conversation, a written proposal or, for systems and apps, a technical assessment.

• Name and email, required.
• WhatsApp number and company name, optional.
• Service of interest and a description of the need.
• Service and page of origin, when you reach the form through a link on the website.

Today the form does not send this data to any server. It stays in the browser memory, on the open page, and is gone when you close or reload it. When you tap “Continue on WhatsApp”, the message text is passed to WhatsApp in the link address; it only reaches AC Alcateia if you send it there.

Do not include sensitive data, or data about other people that the quote does not need, in the description.

Conversations on WhatsApp and Instagram

When you send a message, AC Alcateia receives your number or profile and the content of the conversation, and uses them to reply, prepare proposals and follow up.

WhatsApp and Instagram are Meta services and handle data under their own policies.

Sending by email (not active yet)

The option to send the form directly by email, without WhatsApp, is planned. It is not active yet.

Once it is turned on, the form data will go through Cloudflare, which runs the website server and the bot check (Turnstile), and through Resend, which delivers the email to AC Alcateia's sales inbox. This policy will be updated before that happens.

Browsing the website

As with any website, the servers that deliver the pages receive technical connection data, such as the IP address, the browser and the requested page, to deliver the content and protect the website against abuse. The planned host is Cloudflare, and this policy will confirm the provider at launch.

Cookies and browser storage

The website sets no cookies of its own. It only keeps in your browser's local storage what it needs to work the way you chose:

• your theme preference (light, dark or system);
• your choice about audience measurement, once it is available.

This data stays on your device and can be deleted in your browser settings. The website fonts are served by the website itself, without requests to third-party services.

Audience measurement

Measurement with Google Analytics is not active yet. Once it is turned on, it will only start after you accept it in the preferences panel; without your acceptance, no measurement script is loaded and no measurement cookie is set.

Measurement records the pages visited and actions on the website, such as clicks on the WhatsApp buttons and use of the form, without the content you type. Once measurement is active, you will be able to change or withdraw your consent at any time in “Privacy preferences”, in the footer.

Legal bases

• Quote form and quote conversations: preliminary steps related to a contract, at your request (LGPD, art. 7, V).
• Audience measurement: your consent (art. 7, I).
• Technical connection data for delivering and securing the website: legitimate interest (art. 7, IX).

Sharing

AC Alcateia does not sell personal data. Data is only handled by the providers named in this policy, to the extent each service needs, or when the law requires it.

How long data is kept

Form data is not kept by this website.

WhatsApp and Instagram conversations are kept while they are needed for the service and the business relationship, or for as long as the law requires, and can be deleted at your request when there is no obligation to keep them.

Security

• Encrypted connection (HTTPS) on every page.
• A form that stores nothing on a server.
• Service credentials kept only on the server, never in the website code.
• Once email sending is active: bot checks, a sending limit and technical logs without personal data.

Your rights

Under the LGPD (art. 18), you can ask AC Alcateia for:

• confirmation that your data is processed, and access to it;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary or excessive data, or data processed unlawfully;
• data portability;
• deletion of data processed with your consent;
• information about who the data is shared with;
• information about the possibility of not giving consent and its consequences;
• withdrawal of consent.

How to contact AC Alcateia about your data

Send your request on WhatsApp or Instagram. AC Alcateia may ask for information to confirm your identity before handling it, and replies within the deadlines set by the LGPD.

You can also file a complaint with the Brazilian Data Protection Authority (ANPD).

Updates to this policy

This policy describes how the website works today and is updated whenever something changes, such as turning on email sending or audience measurement. The date of the last update is at the top of the page.