Privacy Policy
Last updated: September 8, 2026
1. Controller and scope
The data controller and legal merchant is INDEVS, CNPJ 32.914.505/0001-58, with registered address at Rua Bernardo de Vasconcelos, 48, Tucuruvi, São Paulo, SP, 02342-150, Brazil. This policy explains how INDEVS handles personal data when you use this website, contact us, buy consulting services, or subscribe to an MVP product that links to this policy. For privacy requests, contact [email protected].
2. Data we collect
We collect information you submit, such as your name, work email, phone number, company, message, account details, and project information. When you purchase, our payment provider may collect payment credentials and billing information; INDEVS does not receive or store full card numbers. We also process limited technical information, such as IP address, browser/device data, event logs, and cookie preferences needed to operate, secure, and improve the site and services.
3. Why we use data and our legal bases
We use personal data to respond to enquiries, prepare proposals, enter into and perform contracts, provide subscriptions and support, process payments, prevent fraud and misuse, comply with legal or tax obligations, and improve our products. Depending on the context, our legal basis under the LGPD may be contract performance or pre-contractual steps, legal or regulatory obligation, legitimate interests balanced against your rights, or consent where required. We do not sell personal data.
4. Payments
Payments are processed by the provider selected at checkout or stated on the invoice, such as Stripe, Paddle, PagSeguro, or Infinity Pay. Those providers process payment data under their own privacy notices and may act as independent controllers for fraud prevention, identity verification, and payment compliance. INDEVS receives only the information needed to confirm the transaction, manage your subscription, provide a receipt, and support you.
5. Service providers and sharing
We share data only with providers that help us run the business and services, including hosting and cloud infrastructure, email and communications, customer support, analytics where you consent, professional advisers, and payment providers. We may also disclose information where required by law, to protect rights and security, or in connection with a corporate transaction. Providers may process data outside Brazil; where applicable, we use lawful safeguards for international transfers.
6. Client data in consulting engagements
When we handle personal data on behalf of a consulting client, the signed proposal, statement of work, or data-processing terms govern that work. In that setting, the client generally determines the purposes and means of processing, and INDEVS acts on documented instructions as a service provider. Do not send special-category, regulated, or production personal data through the website contact form unless we have agreed a secure channel.
7. Cookies and analytics
We use essential cookies for site functionality and to remember choices. Optional analytics cookies are used only after you accept them through the cookie banner. You can change browser settings or withdraw optional consent; see our Cookie Policy for details. Refusing optional cookies does not prevent you from using the public website.
8. Retention
We keep information only for as long as needed for the purpose collected, to provide the service, resolve disputes, enforce agreements, maintain security records, or meet legal, tax, and accounting obligations. Retention periods vary by record type and applicable law. When information is no longer required, we delete, anonymize, or securely archive it as appropriate.
9. Security
We use reasonable technical and organizational safeguards designed to protect data against unauthorized access, alteration, disclosure, or loss. No internet transmission or storage system is completely secure. If you believe an account, project workspace, or communication has been compromised, contact us immediately at [email protected].
10. Your LGPD rights
Subject to applicable law, you may request confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary data, portability, information about sharing, deletion of consent-based data, and revocation of consent. You may also object to processing in the situations provided by law. Send requests to [email protected] with enough information for us to identify and protect your record. We may request verification before responding.
11. Children and sensitive information
Our services are directed to businesses and adults. We do not knowingly collect personal data from children through this website. Please do not send health, biometric, government-ID, payment-card, or other sensitive information through the contact form. If you believe a child or another person has submitted data improperly, contact us so we can review it.
12. Changes and contact
We may update this policy when our services or legal obligations change. The current version and date are published here. Questions, privacy requests, or complaints can be sent to [email protected]. You may also contact the Brazilian data-protection authority or consumer-protection body where applicable.