Legal
Privacy policy
Last updated: August 7, 2026
This policy explains what personal data we process when you use this site or contact us, what it is used for, and what your rights are. It follows the Brazilian General Data Protection Law (Law 13.709/2018) and mirrors the rights granted by the GDPR.
Who the controller is
Alvorance Ltda., registered under CNPJ 00.000.000/0001-00, is the controller of the personal data processed on this site. For any privacy matter, including exercising your rights, write to contato@alvorance.com.
What data we collect
We collect two kinds of data, and only these:
- Data you provide: name, email, company (optional) and the content of your message, when you fill in the contact form or email us.
- Data collected automatically: IP address, browser type, operating system, pages visited and timestamps, logged by the server on every request, as on any website.
We do not collect sensitive personal data, we never ask for identity documents or payment details through the site, and we do not build visitor profiles.
Why we use it, and on what legal basis
| Data | Purpose | Legal basis |
|---|---|---|
| Contact form data | Reply to you and carry the commercial conversation forward | Pre-contractual steps taken at your request (LGPD art. 7, V) |
| Server access logs | Keep the site up, investigate errors, contain abuse and spam | Legal obligation (art. 7, II) and legitimate interest (art. 7, IX) |
| Non-essential cookies | Measure site usage. None are active at this time | Consent (art. 7, I) |
Who we share it with
We do not sell personal data and we do not share it for advertising. We rely on a small number of vendors, acting as processors and handling data only under our instructions:
- Vercel Inc.: site hosting and access logs.
- Resend (Plus Five Five, Inc.): delivery of messages sent through the contact form.
We may also share data where required by law or by a competent authority.
International transfer
The vendors above are based in the United States, so your data may be processed outside Brazil. The transfer happens in order to answer your own request and is covered by the data protection clauses agreed with each vendor (LGPD art. 33).
How long we keep it
- Contact messages: 24 months after the last interaction, or sooner if you ask us to delete them.
- Application access logs: 6 months, the term set by the Brazilian Civil Rights Framework for the Internet (Law 12.965/2014, art. 15).
- Contractual records: for the applicable legal term, including tax obligations.
Your rights
The LGPD gives you the right, at any time and free of charge, to request:
- confirmation that we process your data, and access to it;
- correction of incomplete, inaccurate or outdated data;
- anonymisation, blocking or deletion of unnecessary or unlawfully processed data;
- portability of your data to another provider;
- information about who we share your data with;
- withdrawal of consent, where consent is the basis relied on.
To exercise any of them, write to contato@alvorance.com. We answer within 15 days. We may ask for extra information to confirm your identity first. That protects you, it is not red tape. You can also complain directly to the Brazilian data protection authority (ANPD).
Security
The site is served over HTTPS only, access to the inbox that receives form messages is restricted and protected by two-factor authentication, and third-party credentials live in environment variables, never in code. No measure removes risk entirely: if an incident with relevant risk occurs, we will notify you and the ANPD.
Children and teenagers
This site is aimed at professionals and companies. We do not knowingly collect data from anyone under 18; if we find such a record, we delete it.
Cookies
Cookie usage is described in detail in its own document.
Changes
When this policy changes in a relevant way, we update the date at the top of the page. If the change affects processing based on consent, we ask for your consent again before applying it.