Privacy notice

Who handles your data

Redbeard Soluções Digitais, a Brazilian company registered under CNPJ 38.196.917/0001-86. For anything related to privacy, write to contato@redbeard.com.br.

This notice is a translation of the Portuguese original at /privacidade. Both describe the same system. Where the two diverge, the Portuguese version is the one that governs, because it is the one written in the language of the law that applies.

What this site collects

Three things, through different paths.

1. The contact form. When you send it, we receive the fields you filled in: name, company, e-mail, phone (optional), the channel you prefer for a reply, a summary of the process you want to change, the type of need, the size of the company and when you intend to start. The date and time of the submission go with it. Nothing beyond that is taken from the form, and none of it is sent to any measurement tool.

The form has an invisible field that identifies robots. If it arrives filled in, the submission is discarded, not stored, not forwarded to anyone.

2. The two tools. Two pages exist in Portuguese only and ask questions, returning a reading immediately. /diagnostico asks eight questions about a process in your company, plus a ninth that only appears if you say you already use a tool. /risco-do-conhecimento asks twelve questions about what has already happened in your company: what depends on one person, which version of a document counts, and who sees what. In both, while you answer, nothing leaves your browser, and the reading is calculated there. Copying and printing the result also happen only there, without passing through us. Closing the page before submitting leaves nothing with us.

Only if you fill in and submit the form at the end do we receive your answers, the reading the tool gave and its text, your name, company, e-mail, phone (optional), your preferred channel, whether the operation spans more than one country, whether anyone would access it from mainland China, and a free comment if you write one. The knowledge risk test also sends an estimate of the company's size, taken from your answer about how many people would use this in a typical week. That estimate does not appear on screen or in the text you copy; it only helps us prepare the conversation.

Both forms carry the same invisible robot field and have the same destination: e-mail and CRM, with the same retention periods and the same providers described below.

3. Your visit. We use Google Analytics 4 to know, in aggregate, how many people visit the site and which pages matter, but only after you accept, in a banner shown on the first visit. Without acceptance, Google Analytics does not load. If you accept, that involves cookies and a visit identifier, with the IP address truncated by Google before storage. We also record an event when a form is submitted successfully, with none of the form content attached. In both tools, that event carries the name of the reading, and another, identical one records when the reading appears on screen, before any submission. Neither carries an answer, name, company or contact.

Beyond that, serving the page involves the IP address, the browser and the requested URL, handled by Cloudflare to deliver the site and protect it from attack. The typefaces are served by this site itself, not by a third-party font provider.

Cloudflare also measures how fast each page load was, and it is worth saying how: your browser downloads a measurement file from static.cloudflareinsights.com and sends back to this same domain how long the page took to appear, the URL you visited and an identifier for that single page load, which is not repeated on the next one. This measurement writes no cookie, stores nothing in your browser and cannot link two visits to the same person. It does not depend on the consent banner, and is a different thing from Google Analytics, which only loads if you accept.

Why we process it, and on what legal basis

The law that applies is Brazil's General Data Protection Law, the Lei Geral de Proteção de Dados, Federal Law 13.709/2018, referred to here as the LGPD.

• Contact form: to answer you and carry on the commercial conversation you started. Legal basis: preliminary procedures at the request of the data subject, article 7, item V of the LGPD.
• Audience measurement through Google Analytics: to understand what matters and improve the site. Legal basis: your consent, article 7, item I. It only loads after you accept in the banner shown on the first visit, and you can change your mind at any time, and the section on cookies explains how.
• Delivery, security and visit counting: so the site works, resists abuse, and we know the volume of traffic without identifying anyone. Legal basis: legitimate interest, article 7, item IX. You may object to this processing through the channel in the rights section.

Where form data goes

What you send goes to two destinations, in this order:

• Resend, an e-mail delivery service, which carries the message to our inbox. It keeps the delivery record for 30 days.
• Redbeard's CRM, our own system at crm.redbeard.com.br, where the contact is recorded so we can follow the conversation. Only Redbeard has access.

If the CRM record fails, the e-mail will already have arrived and your contact is still attended to. We do not sell, rent or pass on any data to third parties for commercial purposes, and we do not use your data to train artificial intelligence systems.

We reply through the channel you choose in the form within 2 business days of the submission. That period is about the commercial conversation; it is a different thing from the period for exercising data rights, described further down.

Who else is involved

• Cloudflare: hosts the site, processes request metadata to deliver and protect it, and measures how fast each page load was through a file running in your browser, with no cookie and no identifier that carries across visits.
• Google: as the operator of Google Analytics.
• Resend: as described above.

All of them are companies operating in the United States. That means there is an international transfer of data, carried out under each provider's contractual clauses and safeguards. The CRM is Redbeard's own system and involves no third party.

How long we keep it

• A contact that does not become a project: kept in the CRM for up to 24 months from the last contact, then deleted.
• A contact that becomes a client: kept for as long as the relationship lasts, and for the legal period that applies afterwards.
• E-mail in our inbox: the same period as the corresponding CRM record.
• Delivery record at Resend: 30 days, the provider's period.
• Audience measurement: as configured in Google Analytics, always in aggregate form. Cloudflare's performance measurement is aggregate from the start and keeps no per-visitor record.

You can ask for deletion before any of these periods, at any time.

Your rights under the LGPD

• Know what data we hold about you.
• Ask for correction of incomplete or outdated data.
• Ask for deletion of the data we process.
• Ask for a copy of your data in a readable format.
• Object to processing carried out on the basis of legitimate interest.
• Withdraw consent at any time.

To exercise any of them, write to contato@redbeard.com.br. We confirm receipt within 2 business days and answer within 15 days, the period set by the LGPD.

Cookies, and how to refuse measurement

This site writes one cookie that does not wait for your consent: cf_clearance, from Cloudflare's bot protection, so the site does not ask you to verify yourself on every page. It belongs to this domain and exists for security, not to measure you. The others are Google Analytics', and those only exist if you accept them in the consent banner. The form uses no cookie at all.

On the first visit, a banner asks whether you accept measurement. Refusing or accepting is saved only in your browser (not in a cookie, but in local storage), and you can change your mind by clearing the site data in your browser settings, which makes the banner ask again. The site keeps working in full either way, form included.

Changes to this notice

When a field, a provider or a purpose changes, this page changes with it and the date at the top is updated. If the change matters to someone who has already written to us, we say so by e-mail.