Privacy Policy

2. What we collect, why, and on what basis.

Proposal request. Name, e-mail, company, interest and message, sent through the form. We use them to answer your request and talk about a possible project. Legal basis: preliminary procedures of a contract at your request (LGPD art. 7, V).

Demo booking. Name, e-mail and the time you chose. Used to hold the conversation you booked. Legal basis: art. 7, V. Demo conversations are not recorded.

Visiting the site. Our hosting provider records technical information about each request, such as IP address, page, browser and time, to keep the site running and secure. Legal basis: legitimate interest (art. 7, IX) in the site's security and operation. We do not use these records to identify visitors.

Your browser. We set no cookies. We store only two preferences in your browser: your chosen language and a marker so the site's assistant does not open itself twice. Neither identifies you, and you can clear them with your browsing data.

Audience statistics. We use Vercel Web Analytics to learn how many people visit the site, where they come from, from which country and on what kind of device, and which pages they read. This measurement sets no cookies, does not follow you across other sites and keeps no persistent identifier; what we see is aggregate. Legal basis: legitimate interest (art. 7, IX) in understanding how the site is used.

We send no marketing e-mail. We only reply to what you asked us.

3. Who data is shared with. Processors that provide services to us, each under its own policy: Vercel (hosting; access logs; audience statistics), Formspree (form delivery; keeps a copy of each message in its dashboard, under its own policy), Cal.com (scheduling), Google (Gmail and Google Calendar, where messages and bookings are kept). We do not sell personal data and do not share it with third parties for their own purposes.

4. International transfers. The services above operate outside Brazil, and one of the responsible persons accesses the inbox from the United States. These transfers take place to carry out what you asked of us (LGPD art. 33, IX, with art. 7, V) and, for hosting, under the providers' contractual clauses (art. 33, II).

5. How long we keep data. Form messages and bookings are kept while the conversation or relationship with you is active and, afterwards, for as long as needed to meet legal obligations or exercise rights in proceedings. Access logs follow the hosting provider's retention.

6. Security. Every connection to the site is encrypted. Access to the inboxes and calendars requires authentication. Client data in projects follows what the site's Security section and each project's contract describe.

7. Your rights. At any time you may ask for: confirmation that we process your data; access to it; correction of incomplete or outdated data; anonymisation, blocking or deletion of unnecessary data; portability; information on whom we share it with; and deletion of data processed with your consent, where applicable (LGPD art. 18). Write to prismadatasupport@gmail.com. We answer within 15 days. You may also petition the National Data Protection Authority (ANPD).

8. Under 18s. The site is for people aged 18 or over acting for a business. If we learn we have received data from a minor, we will delete it.

9. Visitors outside Brazil. This policy follows Brazilian law. If you access the site from another country you may have additional rights under local law; the same channels above apply.

10. Changes. If this policy changes, we update the date at the top. Material changes in how we use your data will be highlighted on this page.

11. Language. If the versions differ, the Portuguese version prevails.