How we handle your data.

1. Who we are

TENVION is a brand of Code Sentrix Tecnologia LTDA, Brazilian company registration (CNPJ) 65.703.232/0001-51, headquartered at Rua Aureo Norberto da Silva, 300, Residencial e Empresarial Alphaville, Ribeirão Preto, São Paulo, Brazil, ZIP 14039-033. We are the controller of the personal data processed through this website.

2. What data we collect

This website does not require registration. The data we process is:

• Data you provide in the contact form: name, work email, company and the description of what you need to build.
• Technical data sent with the form: browser identification (user agent), the page the form was sent from, and the date and time of submission.
• Server access logs: IP address, date, time and pages accessed, generated automatically by the hosting infrastructure for security and operational purposes.

3. What we use the data for

• Replying to your message and holding the initial conversation about the project. Legal basis: steps prior to entering into a contract, at your request (LGPD, art. 7, V).
• Keeping the website secure and running, including identifying automated submissions and abuse. Legal basis: legitimate interest (LGPD, art. 7, IX).

We do not use your data for advertising, we do not sell it, and we do not send marketing communications without your consent.

4. Who we share it with

Data is stored and processed by infrastructure providers acting as processors on our behalf:

• Google Cloud / Firebase (Google LLC): website hosting and the database where form submissions are stored. The database runs on servers in Brazil (São Paulo region); the website is served through a global delivery network.
• Google Fonts (Google LLC): delivery of the website's typefaces. When the page loads, your browser requests the font files directly from Google, which may record your IP address.
• Google Analytics 4 (Google LLC): aggregated website usage statistics, such as pages visited, traffic source, device type and form submissions. Google Analytics 4 does not store full IP addresses. We use these statistics to understand what works on the page; the legal basis is legitimate interest (LGPD, art. 7, IX).

This may involve international transfer of data to the United States, supported by contractual clauses and the data protection commitments of these providers. Apart from these cases, we only share data when required by law or by order of a competent authority.

5. How long we keep it

Contact form data is kept for up to 24 months after the last contact, or until you request deletion. If the conversation leads to a contract, the data is then handled under that contract. Server access logs are kept for the minimum legal period of 6 months (Brazilian Internet Civil Framework, art. 15).

6. Your rights

You may request at any time:

• confirmation that we process your data, and access to it;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of data that is unnecessary or processed in breach of the law;
• portability of your data to another provider;
• information about who we share your data with;
• objection to processing based on legitimate interest.

We respond to requests within 15 days. If you are not satisfied, you may file a complaint with Brazil's National Data Protection Authority (ANPD).

7. Cookies and tracking

This website uses Google Analytics 4, which sets measurement cookies (_ga and _ga_*) to tell visitors and sessions apart and recognize returning visits. These cookies do not identify you by name and are not used for advertising. You can block them in your browser settings or with the Google Analytics opt-out add-on; the website keeps working normally. We do not use advertising cookies. The browser's local storage may be used only by the technical component that sends the form, with no tracking purpose.

8. Security

The website is served exclusively over HTTPS. The database where contacts are stored only accepts the creation of records from the website, with content validation; reading and changing them is restricted to the Code Sentrix team, with authentication. In the event of a security incident that may pose a relevant risk to you, we will notify you and the ANPD as required by law.

9. Changes to this policy

We may update this policy to reflect changes to the website or to the law. The date of the last update appears at the top of the page. Relevant changes will be highlighted here.

10. Contact and data protection officer

To exercise your rights or ask about this policy, contact our data protection officer (DPO): Rogério Defende Alves, managing director of Code Sentrix Tecnologia LTDA, by email at [email protected], on WhatsApp at +55 16 95782-6836, or by mail to the address in section 1.