Privacy Policy

1. Who controls your data

The controller of the personal data processed under this Policy is ORLANDO PAIVA DA SILVA NETTO, registered under Brazilian company ID (CNPJ) 45.287.479/0001-27, with registered offices at Rua Saldanha Marinho, 526 — Mauricio de Nassau, Caruaru/PE, CEP 55012-740, Brasil.

For any matter related to privacy and data protection, including the exercise of the rights described in section 10, write to zextify.dev@gmail.com.

2. What data we collect

We collect only the data needed to answer your request and to deliver the services you hire us for:

• Data you send us voluntarily: name, company name, email address, phone number and the content of the message you write.
• WhatsApp conversation data: your phone number, your WhatsApp profile display name and the content of the messages exchanged with our support number, including any files you send.
• Technical browsing data: IP address, browser type and version, operating system, pages visited, and date and time of access, recorded by the servers hosting this website.
• Commercial relationship data: once a contract is signed, the billing and legal representative data required to issue tax documents and perform the agreement.

We do not collect sensitive personal data (racial or ethnic origin, religious belief, political opinion, health, biometric or genetic data, among others), and we ask that you do not send such data through our channels.

We do not carry out automated processing intended to build personal, professional, consumer or credit profiles.

3. How and why we use your data

Each purpose below is supported by a legal basis set out in article 7 of the LGPD:

• Answering enquiries, questions and quote requests — legal basis: preliminary procedures related to a contract, at the data subject’s request (art. 7, V).
• Delivering, performing and supporting the services you hire — legal basis: performance of a contract (art. 7, V).
• Keeping a history of support conversations for continuity and quality — legal basis: legitimate interest (art. 7, IX).
• Issuing tax documents and complying with accounting, tax and regulatory obligations — legal basis: compliance with a legal obligation (art. 7, II).
• Exercising rights in judicial, administrative or arbitration proceedings — legal basis: art. 7, VI.
• Sending institutional or commercial communications unrelated to an ongoing conversation — legal basis: consent (art. 7, I), which you may withdraw at any time.

We do not use your data for third-party advertising, and we do not sell, rent or transfer personal data for commercial purposes.

4. WhatsApp support

Our WhatsApp channel runs on the WhatsApp Business Platform (Official API) provided by Meta Platforms, Inc. By clicking any WhatsApp button on this website or by sending us a message, you voluntarily start a conversation with us.

In that context we process the following data: your phone number, your WhatsApp profile display name, the content and attachments of the messages, and the technical delivery and read records provided by the platform.

• Messages travel through Meta’s infrastructure and are also subject to the WhatsApp and Meta privacy policies, over which we have no control.
• We use messages exclusively for support, proposals and service delivery. We do not send promotional messages without your prior consent.
• We may use automated replies to acknowledge receipt of your message and inform you of our business hours.
• You may end the communication at any time by replying "STOP", or by blocking our number on your device. Opt-out requests are honoured immediately.
• We never ask for passwords, verification codes, access tokens or full credit card details over WhatsApp. Treat any such message with suspicion, even if it appears to come from us.

Conversation content is stored in our systems for the periods described in section 8.

5. Cookies and tracking technologies

This is a static website. It uses no advertising trackers, conversion pixels or third-party profiling tools. The contact form on this site neither sends nor stores data on our servers: it simply composes a message and opens WhatsApp on your device, leaving the decision to send entirely with you.

Should we adopt audience analytics or non-essential cookies in the future, this Policy will be updated beforehand and, where required, your consent will be requested.

6. Who we share data with

We share personal data only with parties necessary to operate our services, and always in the smallest volume possible:

• Meta Platforms, Inc. — provider of the Official WhatsApp Business API, through which our support messages travel.
• Cloud infrastructure providers (such as Google Cloud Platform and Cloudflare, Inc.), which host this website and our systems.
• Accounting and tax service providers, when required to issue documents and meet legal obligations.
• Public and judicial authorities, upon a substantiated legal request or court order.

All contracted processors are contractually bound to process data solely under our instructions and to adopt security measures compatible with the LGPD.

7. International data transfers

Some of the providers listed in section 6 process data on servers located outside Brazil. Such transfers rely on article 33 of the LGPD — notably performance of a contract to which you are a party — and on contractual clauses ensuring a level of protection compatible with Brazilian law.

8. How long we keep your data

• Enquiries and support conversations that do not lead to a contract: up to 24 months from the last contact.
• Data of clients under an active contract: for the entire term and up to 5 years after termination, the statutory limitation period for potential disputes (art. 16, I, LGPD).
• Tax and accounting documents: for the periods required by tax legislation, currently up to 5 years.
• Website access logs: 6 months, as required by article 15 of the Brazilian Internet Civil Framework (Law 12.965/2014).

Once those periods elapse and no other legal basis justifies retention, data is securely deleted or anonymised.

9. How we protect your data

We apply technical and administrative measures proportional to the risk, including:

• Encrypted traffic in transit (HTTPS/TLS) across this website and all our systems.
• Individual access control, least-privilege principle and two-factor authentication on critical systems.
• Separation between development, staging and production environments.
• Access logging and regular backup routines.
• Review of access granted to staff and contractors whenever a role changes or an engagement ends.

No system is infallible. In the event of a security incident likely to cause relevant risk or damage, we will notify affected data subjects and the Brazilian Data Protection Authority (ANPD) within a reasonable period, as required by article 48 of the LGPD.

10. Your rights as a data subject

Article 18 of the LGPD grants you, at any time and upon request, the following rights:

• Confirm whether we process data about you, and access that data.
• Correct incomplete, inaccurate or outdated data.
• Request anonymisation, blocking or deletion of unnecessary or excessive data, or data processed unlawfully.
• Request portability of your data to another provider, subject to trade and industrial secrets.
• Obtain information about the public and private entities with which we share your data.
• Be informed that consent may be withheld, and of the consequences of withholding it.
• Withdraw consent, where consent is the legal basis for processing.
• Object to processing carried out under one of the consent-exemption grounds, in case of non-compliance with the law.

To exercise any of these rights, write to zextify.dev@gmail.com. We reply within 15 calendar days. We may request additional information to confirm your identity — a safeguard to prevent third parties from accessing your data.

You may also file a complaint directly with the Brazilian Data Protection Authority (ANPD) through its official channels.

11. Children and adolescents

Our services are aimed at businesses and at people over 18. We do not knowingly collect data from children or adolescents. If we become aware of having received such data without the specific, prominent consent of a parent or legal guardian, we will delete the records.

12. Changes to this Policy

We may update this Policy to reflect changes in our services or in applicable law. The current version is always published at this same URL, with the last-updated date shown at the top. Material changes will be communicated through the contact channels available to us.

13. Contact us

Questions about this Policy or about how we handle your data: zextify.dev@gmail.com.

ORLANDO PAIVA DA SILVA NETTO — CNPJ 45.287.479/0001-27 — Rua Saldanha Marinho, 526 — Mauricio de Nassau, Caruaru/PE, CEP 55012-740, Brasil.