Privacy policy

1. Controller

Exacta Labs ("Exacta"), a company based in Brazil, is the controller of personal data collected on this website. For any privacy matter, including exercising your rights, email bruno@exactalabs.com.br.

2. Data we collect

• Contact, quote and assessment forms: name, company, email, phone or WhatsApp, service of interest, message and assessment answers.
• Website assistant: messages you type and, if you ask for a human, the details you provide.
• Technical data: referring page, campaign parameters (UTM) and a non-reversible hash derived from your IP address, used for abuse prevention.
• Usage measurement: aggregated events (for example, a click on a contact button), without cookies or personal identification.

3. Purposes and legal bases

We process data to reply to your request and prepare proposals (steps taken at your request prior to a contract), to protect the website against spam and abuse (legitimate interest), to send news by email only if you opt in (consent, which you can withdraw at any time), and to improve the website with aggregated statistics (legitimate interest). Depending on where you are, this processing is governed by Brazil's LGPD and, for people in the EU/EEA or UK, by the GDPR.

4. AI assistant

Messages sent to the assistant are processed by a language model provider to generate replies. Do not share sensitive data in the chat. Conversations are stored so our team can review quality and follow up when you ask.

5. Processors and international transfers

We share data only with providers needed to run the website (hosting, email delivery and the AI assistant provider), under contract and only for these purposes. Data may be processed in Brazil and other countries; where the GDPR applies, transfers rely on appropriate safeguards such as standard contractual clauses. We don't sell personal data.

6. Retention

Inquiries that don't become projects are kept for up to 24 months after the last contact and then anonymized or deleted. Client data follows contract terms and legal obligations.

7. Cookies

This website uses only strictly necessary cookies: your language preference and the admin session used by our team. We don't use advertising cookies.

8. Your rights

You can request access, correction, deletion, restriction, portability and object to processing, and withdraw consent at any time. You may also complain to your local data protection authority.

9. Changes

We may update this policy. The date at the top shows the current version.