Skip to content

Legal

Privacy notice

Last updated: 20 April 2026. Starter draft — to be reviewed by EU counsel before production traffic.

1. Controller

aplexio Ltda., Florianópolis, SC, Brazil. Contact: privacy@aplexio.com.

2. What we collect

  • Contact-form submissions: name, work email, company, message.
  • LinkedIn-profile data you share when you engage with us.
  • Website analytics (page views, referrer) via Vercel Analytics — cookieless, aggregated, no individual tracking.

3. Why we collect it

  • Respond to your inquiry — Art. 6(1)(b) GDPR (pre-contract).
  • Send relevant follow-ups — Art. 6(1)(f) GDPR (legitimate interest). Opt out anytime by replying STOP.
  • Improve the site — Art. 6(1)(f) GDPR (legitimate interest), cookieless aggregate analytics only.

4. How long we keep it

18 months for leads. For customers: duration of active engagement plus 6 years for tax/legal retention.

5. Who we share it with

HubSpot (CRM), Resend (transactional email), Vercel (hosting + analytics). No third-party marketing platforms. No data sold.

6. Data transfers

Data may be processed in the EU and US by the processors above. Standard Contractual Clauses apply where required.

7. Your rights (GDPR Art. 15–22)

Access, rectification, erasure, restriction, portability, objection, withdrawal of consent. Email privacy@aplexio.com. You may lodge a complaint with your national supervisory authority — for Germany, BfDI; for Brazil, ANPD.

8. LGPD addendum (Brazil)

aplexio Ltda. is a Brazilian legal entity. Data subjects in Brazil have equivalent rights under LGPD: access, correction, deletion, portability.