What we do with your data.

Who looks after your data

The controller is Bruno Fabrício Soluções Tecnológicas (Bruno Fabricio), Brazilian company number (CNPJ) 41.633.752/0001-77, in Porto Alegre, RS, Brazil. For any request about your data, reach us on WhatsApp at (51) 99533-1099 or by email at ola@brunofabricio.com.

What data we collect and why

What you write in the forms, the technical minimum for sending to work and, in the check-up, what is already public about your business.

• Contact form: name, email, WhatsApp (if you give it), subject and message. Purpose: to reply to you and, if you ask, prepare a proposal.
• Free digital check-up: your name, the type and name of your business, what you want to solve, what you already have, timeline, budget range, email and WhatsApp (if you give it). Purpose: to prepare and send your check-up and talk about the project.
• Public business data: to prepare the check-up, we look at what anyone can see about your business online (website, Google profile, company social media). We do not log into accounts or look for personal data.
• Technical sending data: to block bots and limit repeated submissions, we use a scrambled code of your IP address, deleted after 2 days. The IP and the browser are not stored with your contact. When you arrive through a campaign link, we keep the UTM parameters to know how you found us.
• We do not ask for or want sensitive data (health, documents, passwords) in the forms. If you need to share something like that for a project, we agree on a secure channel.

Legal basis

Replying to you, preparing the check-up you asked for and preparing a proposal are steps before a contract, taken at your request (Brazil’s LGPD, art. 7, V). In the check-up, the “I read the notice” box is recorded with your request, with the date and the version of this policy, to show what you were told.

Protection against bots and abuse, looking at public business data and the source of the visit are legitimate interest (art. 7, IX), with the minimum data and the same simple way out: ask us to delete it.

We do not send email campaigns based on these forms. If there is ever a list, it will have its own sign-up, with your consent and an unsubscribe link in every email.

Who else sees the data

We do not sell personal data. To handle your request, we use our own infrastructure and a few providers. Some are outside Brazil (the United States and other countries), which the LGPD calls an international transfer; we use only what each purpose needs:

• Hostinger: the BF server, where the website, the API and the contact system (CRM) live.
• Cloudflare: domain protection and email forwarding.
• Telegram and email: internal alerts that a new contact arrived. The alert carries only the contact number and the link to our system, without your name or your message.
• AI assistants (Claude, by Anthropic): they help organize our replies, for example summarizing requests and reminding us of follow-ups. A person reviews everything before any reply or decision.
• WhatsApp (Meta): if you choose to continue the conversation on WhatsApp, the message with the summary of your check-up goes through the Meta app.

How long we keep it

We use fixed periods. When a period ends, the contact is anonymized: name, email, phone and message are deleted, and only the date, the source and the type of business remain, with nothing that identifies you.

• Contact or check-up with no follow-up: 6 months after the last conversation.
• Contact who received a proposal and did not go ahead: 12 months after the last conversation.
• Client: during the contract and for 5 years after it ends, for tax and billing obligations.
• System backups are replaced in rotation; deleted data stops existing in them in the next cycle.

What stays in your browser

The website does not use tracking cookies or analytics tools. What exists is local storage, only to make the website work:

• Check-up draft (localStorage): your business answers, the business name and the source of the visit stay in the browser for up to 7 days and are discarded the next time it opens. Your name, email and WhatsApp are not saved. The draft is cleared after sending and can be deleted with the “Delete draft” button.
• Sound preference (sessionStorage): if you turned the website sound on, it only applies to the open tab.
• WhatsApp bubble (sessionStorage): remembers that the bubble already appeared, so it does not repeat in the same tab.
• Links page (brunofabricio.com/links): each tap on a button sends our server only the name of the button and where you came from on Instagram (bio, story or highlight), so we know what people look for most. No cookie, no IP and nothing that identifies you. If your browser asks for “do not track”, not even that is sent.

Your rights

You can ask at any time for: confirmation that we handle your data, access, correction, anonymization, portability, deletion and information about who we share it with. Just ask on WhatsApp at (51) 99533-1099 or by email at ola@brunofabricio.com.

We confirm we received your request right away and give a full answer within 15 days. To make sure it is you, we reply on the same email or WhatsApp that is in our records; we do not ask for documents. You can also file a complaint with Brazil’s National Data Protection Authority (ANPD).

Artificial intelligence and voice

The voice that reads the check-up questions is generated by AI from the founder’s voice, with his permission, and is labeled on the website. AI agents help produce projects and organize our replies, always with human review. No decision about you is made by a machine alone.

Data about children and teenagers

Do not include data about children, documents or sensitive information in the free text fields. When a project involves minors, talk to the person in charge at BF to agree on the channel and on the participation of a parent or legal guardian.

Changes to this page

When something changes, we update the date at the top. A relevant change in how data is used comes with a notice on the website itself.