Privacy Policy

1. Data controller

The data controller is Denware - Software House, São Paulo/SP. Privacy contact, including our data protection officer (DPO): [email protected].

2. Data we collect

• Contact and brief forms: name, company (optional), e-mail, phone (optional), project description, stage, integrations, desired timeline and services of interest, plus the page the form was sent from.
• Security data: IP address and time of submission, used to block abuse and spam.
• Cookieless aggregate metrics (pages viewed and traffic source) that do not identify you.
• Only if you accept analytics cookies: a random browser identifier, pages visited, clicks on buttons and links, form interaction (which fields were filled in, the step where you stopped and whether there was a validation error), language, device type, browser, operating system and approximate location (city), collected by Google Analytics. What you type in the forms is never sent to Google Analytics.
• Data kept only in your browser and never sent to us: theme preference, your cookie choice and the brief draft until you send it.

3. Why we use it and the legal basis

We do not sell personal data, do not use it for advertising and do not enable Google advertising or profiling features (such as Google Signals). We make no automated decisions about you based on this data.

• Reply to your brief and prepare a proposal: pre-contractual steps at your request (art. 7, V).
• Prevent fraud, spam and form abuse: legitimate interest (art. 7, IX).
• Cookieless aggregate metrics, to learn which pages are useful: legitimate interest (art. 7, IX).
• Detailed measurement with Google Analytics, to understand navigation, improve pages and forms and measure how many enquiries the site generates: consent (art. 7, I), which you give or refuse in the banner and can withdraw at any time.

4. Cookies and browser storage

We use Google Tag Manager to load our measurement tools. When you arrive, analytics cookies stay off until you choose. Declining does not change how the site works.

To change your choice at any time, click “Cookie preferences” in the footer of any page. If you decline after accepting, measurement stops and the Google Analytics cookies are deleted from your browser. Your choice lasts 12 months; after that we ask again.

• Necessary (no consent required, kept only in your browser): denware_theme (light/dark theme), denware_consent (your cookie choice, for 12 months) and denware_briefing_draft (brief draft, deleted when sent).
• Analytics (only with consent): _ga and _ga_<ID>, from Google Analytics, which tell visits from the same browser apart. Duration: up to 13 months.

5. Who we share it with

Only with vendors that help us run the website and respond to you, under contract and only as needed: hosting, transactional e-mail, CRM and analytics tools.

If you accept analytics cookies, the data described above is processed by Google (Google Analytics and Google Tag Manager) as a processor, under Google's data processing terms. Google may store it outside Brazil, including in the United States. This and other international transfers follow the safeguards of art. 33 of the LGPD, such as standard contractual clauses.

6. How long we keep it

• Briefs that did not become a project: up to 24 months after the last contact, then deleted.
• Briefs that became a contract: for the term of the contract and applicable legal periods.
• Security logs: up to 6 months.
• Browsing data in Google Analytics: up to 14 months, then deleted automatically. Aggregate reports that identify no one may be kept.

7. Your rights

At any time and free of charge, you can e-mail [email protected] to request:

• confirmation that we process your data and access to it;
• correction of incomplete or outdated data;
• anonymization, blocking or deletion of unnecessary data or data processed unlawfully;
• portability and information about who we share it with;
• information about the option not to consent and its consequences;
• withdrawal of consent, also through the “Cookie preferences” link, and deletion of the data processed under it;
• objection to processing based on legitimate interest.

8. Security

We use encrypted connections (HTTPS), per-person access control and vendors with recognized security practices. No system is infallible; if a relevant incident occurs, we will notify those affected and the ANPD as required by law.

9. Changes

We may update this policy. The date of the current version is shown at the top of the page. If we start using cookies or tools for other purposes, we will ask for your consent again.