Privacy Policy

Inbrace ("we", "our", or "the company"), registered under CNPJ No. 57.032.675/0001-30, headquartered in Campinas, SP, Brazil, is responsible for processing your personal data as described in this Privacy Policy.

This Policy explains how we collect, use, store, and protect the personal data of visitors to our website (inbrace.com.br), in accordance with Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018) and other applicable legislation.

By accessing our website, you acknowledge the practices described in this document.

For the purposes of this Policy, we adopt the definitions set out in Art. 5 of the LGPD:

• Personal data: information relating to an identified or identifiable natural person.
• Data subject: the natural person to whom the personal data relates.
• Controller: the natural or legal person responsible for decisions concerning the processing of personal data.
• Processing: any operation performed on personal data (including collection, storage, use, sharing, and deletion).
• Consent: a freely given, informed, and unambiguous statement by which the data subject agrees to the processing of their personal data for a specific purpose.
• Cookies: small text files stored in the visitor's browser to record preferences and browsing data.
• ANPD: Brazil's National Data Protection Authority, the body responsible for overseeing compliance with the LGPD.

The controller of personal data processed through this website is:

4.1. Data provided voluntarily by the visitor:

• Name, email, phone number, and message, submitted through contact forms or WhatsApp integration
• Name, email, job title, company, and other business information, collected through native lead generation forms (Google, LinkedIn, and Meta), where applicable

4.2. Data collected automatically:

• IP address (anonymized where possible)
• Browser type and operating system
• Pages visited, time spent, and traffic source
• Conversion event data, cookies, and tracking technologies (detailed in Section 10)

4.3. Sensitive data:

We do not collect sensitive personal data (racial origin, religious beliefs, health data, etc.).

• Website forms: when the visitor voluntarily fills them in and submits them
• WhatsApp/Email: when the visitor contacts us directly
• Social media forms: when the visitor interacts with our ads on Google, LinkedIn, Instagram, or Facebook (data prefilled by the platforms with the data subject's consent)
• Cookies and pixels: automatically, through analytics and marketing scripts, as detailed in Section 10

We use the personal data we collect for the following purposes:

• Responding to requests: handling messages sent through forms, email, or WhatsApp
• Business communications: sending proposals, information about services, and relevant content (only with consent)
• Website improvement: analyzing browsing metrics to improve the visitor experience
• Marketing campaigns: targeting audiences, conducting remarketing, and measuring campaign performance through Google, LinkedIn, and Meta (only with consent for marketing cookies)
• Compliance with legal obligations: meeting applicable regulatory and legal requirements

Inbrace processes personal data on the following legal bases under the LGPD (Art. 7):

• Consent (Art. 7, I): for non-essential cookies, marketing communications, and completion of Lead Ads forms
• Legitimate interest (Art. 7, IX): for analytics and website improvement, provided the data subject's rights are respected
• Performance of a contract or preliminary procedures (Art. 7, V): to respond to service requests
• Compliance with a legal obligation (Art. 7, II): when required by law or regulation

Personal data may be shared with the following third parties, exclusively for the purposes described:

• Vercel (Vercel (Hosting & CDN)): website delivery, edge network, edge security, and server access logs (IP, User-Agent, timestamp)
• Vercel (Vercel Speed Insights): real-time monitoring of Core Web Vitals and technical performance
• Vercel (Vercel Analytics): basic traffic analysis and audience insights
• Google (Google Analytics 4): advanced analysis of traffic and browsing behavior
• Google (Google Ads): audience targeting and measurement of campaigns and conversions
• LinkedIn (LinkedIn Insight Tag & Ads): audience targeting, measurement of business campaigns, and B2B retargeting
• Meta (Meta Pixel & Conversions API): audience targeting, campaign measurement, and remarketing
• Email/CRM services: tools used to manage contacts and respond to requests

We do not sell, rent, or trade personal data to third parties. All listed partners have their own privacy policies and are responsible for processing in accordance with their respective terms.

Some of the services used (Vercel, Google, LinkedIn, and Meta) have servers located outside Brazil, including in the United States. International data transfers take place in accordance with Art. 33 of the LGPD, based on appropriate contractual clauses and the respective providers' privacy policies.

10.1. What cookies are

Cookies are small text files, and pixels are small blocks of code, stored or executed in your browser when you visit a website. They are used to remember preferences, analyze traffic, and support marketing features.

10.2. Categories of trackers used

10.3. Managing cookies

When you first visit the website, you will see a consent banner. Non-essential cookies and marketing pixels are activated only after your explicit consent. You can change your preferences at any time by clicking the cookie icon on the page.

Under Art. 18 of the LGPD, you have the following rights:

• Confirmation and access: to know whether we process your data and to access it
• Correction: to request correction of incomplete, inaccurate, or outdated data
• Anonymization, blocking, or deletion: of unnecessary or excessive data
• Portability: to request transfer of your data to another provider
• Deletion: of data processed on the basis of consent
• Information: about whom your data has been shared with
• Withdrawal of consent: at any time, at no cost

To exercise any of these rights, contact us by email: contato@inbrace.com.br

We will respond to your request within 15 business days, as provided for in the LGPD.

Inbrace adopts technical and administrative measures to protect personal data against unauthorized access, loss, alteration, or destruction. These practices include:

• Hosting on infrastructure with security certification (Vercel)
• Encrypted communication through HTTPS/TLS
• Restricted access to personal data
• Periodic review of security practices

No system is 100% secure. If a security incident may pose a risk to data subjects, we will notify the ANPD and affected data subjects as provided for in the LGPD.

Personal data is stored for as long as necessary to fulfill the purposes described in this Policy or as required by a legal obligation. Contact data submitted through forms is retained while an active business relationship exists or for up to 5 years after the last contact, whichever comes first.

Cookies follow the expiration periods defined by each tool (see Section 10).

This Policy may be updated periodically to reflect changes in data processing practices or applicable legislation. The date of the latest update will always appear at the top of this page.

We recommend that you check this page periodically.

For questions, requests, or complaints about the processing of your personal data:

If you believe that the processing of your data violates the LGPD, you can also file a complaint with Brazil's National Data Protection Authority (ANPD):

Website: www.gov.br/anpd

This Policy is governed by Brazilian law. Any dispute will be resolved in the courts of the Judicial District of Campinas, State of São Paulo.