Privacy Policy

This Privacy Policy describes how Vinteo Plataforma de Soluções e Revenue Operations Ltda, registered under CNPJ (Brazil's company registry) no. 50.315.772/0001-90 ("Vinteo", "we"), collects, uses, stores and protects the personal data of data subjects who interact with us, including through our online forms, proactive contact via WhatsApp and our other channels. We process personal data in accordance with Brazilian Law no. 13,709/2018 (General Data Protection Law, LGPD).

01Data controller

Vinteo is the controller of the personal data processed under this Policy. For any matter related to privacy and data protection, contact us at [email protected].

02Data we collect

We may collect the following categories of personal data:

• Identification and contact data: name, phone/WhatsApp number, email address and job title.
• Professional and company data: company name, industry, size, approximate revenue and information related to your commercial interest.
• Communication records: messages, replies and the history of conversations exchanged with us via WhatsApp or other channels.
• Interaction data: date, time and status of messages sent and received.
• Technical and source data: when you fill in one of our forms, we automatically collect the campaign parameters present in the link used (UTMs), the address of the page that referred you to us, the date and time of submission, technical information about your browser and an encrypted version of your IP address. The IP address is not stored in readable form.

03How we collect data

Data may be collected when you: fill in one of our online forms, hosted at forms.vinteo.com.br; request contact; provide your information to partners or at events; interact with our channels; or when we obtain business contact data from legitimate sources for prospecting. WhatsApp conversations take place through the official WhatsApp Business platform (Meta).

04Purposes of processing

We use personal data to:

• Proactively contact and respond to interested parties via WhatsApp and other channels;
• Qualify business opportunities and understand the needs of potential clients;
• Present and offer our products and services;
• Record and manage the business relationship in our CRM tools;
• Measure the effectiveness of our communication channels and campaigns, identifying how each interested party found us;
• Protect our forms against abusive or automated submissions;
• Comply with legal and regulatory obligations.

05Legal basis

Data processing is based on the grounds provided for in the LGPD, according to the purpose:

• Consent of the data subject and performance of preliminary procedures related to a contract, when you reach out to us by filling in a form or requesting contact;
• Legitimate interest for prospecting and business relationship activities, for measuring the effectiveness of our channels and for the security of our forms, always respecting the rights and expectations of the data subject;
• Compliance with a legal or regulatory obligation, where applicable.

06Data sharing

We may share personal data with:

• Meta Platforms, Inc., provider of the WhatsApp Business platform, to enable sending and receiving messages;
• Technology providers that support us, under contractual confidentiality and security obligations and only to the extent necessary, including: our customer relationship management system (CRM), our database provider, our application hosting and our workflow automation tools;
• Public authorities, when required by law or court order.

We do not sell personal data to third parties.

07International data transfers

Some of the providers that operate our systems on our behalf, including our CRM, our database provider and our hosting, process and store information outside Brazil, including in the United States.

These transfers take place with the safeguards required by the General Data Protection Law, through contractual clauses and data protection commitments signed with these providers, which are bound to process the information only according to our instructions and to adopt security measures compatible with those set out in this Policy.

08Data retention

We keep personal data for as long as necessary to fulfil the purposes described in this Policy or to meet legal obligations. As a reference:

• Data of interested parties who did not move forward to a negotiation is anonymised 24 months after the last contact, keeping only statistical information that does not identify anyone;
• Client data is kept for as long as the business relationship lasts and for the applicable legal periods after it ends;
• Access and audit logs of our systems are kept for up to 24 months.

Once no longer needed, the data is deleted or anonymised, except where retention is required by law.

09Data subject rights

Under the LGPD, you may request at any time: confirmation that processing exists; access to your data; correction of incomplete or outdated data; anonymisation, blocking or deletion of unnecessary data; portability; information about sharing; and withdrawal of consent.

To exercise these rights, send a request to [email protected]. We will respond within 15 days.

Withdrawing consent does not undo processing lawfully carried out before the request.

10How to stop receiving messages

You can ask us to stop contacting you at any time by replying in the WhatsApp conversation with an unsubscribe request (for example, "stop" or "I don't want to receive any more messages") or by sending an email to [email protected]. We will handle the request promptly.

11Security

We adopt appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or improper disclosure. These include:

• Access to data restricted to authorised people, through individual authentication and according to each user's profile;
• Encrypted communication between your browser and our systems;
• Logging of data access, modification and export actions performed in our internal systems;
• Storage of the IP address in encrypted form only;
• Confidentiality and security agreements with the providers that process data on our behalf.

12Cookies and tracking technologies

This site uses two third-party tools that store cookies in your browser, and only switches them on after you accept in the cookie notice:

• Google Analytics 4 (Google LLC): measures which pages are visited, for how long and where the visit came from, so we can improve the content. It is present on the site's pages.
• Meta Pixel (Meta Platforms, Inc.): measures the results of our ads. It is present only on the home page.

If you decline, neither tool stores cookies in your browser. Google Analytics may still receive signals without cookies and without identifiers, used only for aggregate estimates. This is Google's Consent Mode.

Your choice is recorded in your own browser for 12 months and can be changed at any time through the Cookie preferences link in the site footer.

The campaign parameters (UTMs) mentioned in section 02 are read directly from the address of the link you opened and are kept only during your visit, in the browser's session storage. They are not used to track you across other sites.

13Changes to this Policy

This Policy may be updated from time to time. The current version will always be available on this page, with its update date. Previous versions are archived and can be requested through the contact email.

14Contact

Questions, requests or complaints about this Policy or about the processing of your personal data can be sent to: