Privacy Policy
This page explains what data Supersônica collects, why, who we share it with, and how you exercise your rights under Brazil's LGPD.
Last updated:
Who the controller is
Supersônica — registered name and CNPJ to be confirmed. (draft copy — placeholder, pending client approval)
What we collect
When you use the contact form, we collect only what we need in order to reply:
- Name
- Project type
- Message
- Budget range (optional)
On our behalf, our hosting provider records technical access data — IP address, browser and timestamp — to run and protect the site.
What we use it for
To answer your enquiry or quote request. We do not use your data for marketing, and we neither sell nor rent data to anyone.
Legal basis: LGPD Art. 7(V) — preliminary procedures of a contract, at the data subject's request. You write to us, we reply.
Your rights
The LGPD (Art. 18) guarantees the rights below. To exercise any of them, use the channel at the end of this page.
Confirmation and access
You can ask whether we hold data about you, and request a copy of it.
Correction
If any data is wrong, incomplete or out of date, you can ask us to correct it.
Anonymisation, blocking or deletion
You can ask us to delete your data, or to stop using it, where it is unnecessary or processed unlawfully.
Portability
You can ask for your data in a format you can take to another provider.
Information about sharing
You can ask for the list of who we share your data with. It is also on this page.
Withdrawal of consent
We do not use consent as the legal basis — we reply because you contacted us (Art. 7(V)). There is no consent to withdraw. If you do not give us a name and email, we cannot reply: that is the only consequence.
Petitioning the ANPD
If you believe we have handled your data improperly, you can complain directly to Brazil's National Data Protection Authority.
Who we share it with
Only those needed for the site to work and for your message to arrive:
- Resend — email delivery
- Vercel — site hosting and audience metrics
- Upstash — temporary counters that curb form abuse
Resend, Vercel and Upstash run servers outside Brazil, so your data may be processed abroad.
To curb form abuse, we temporarily count submissions per IP address. Those counters expire on their own and build no history.
Your message stays in our email for as long as we need it to reply and keep the thread — exact period to be confirmed. (draft copy — placeholder, pending client approval)
How to exercise your rights
Write to the address below telling us what you want. We reply on the same channel. The law exempts companies our size from appointing a data protection officer — the channel exists all the same.
Cookies
We use no advertising or tracking cookies, which is why there is no cookie banner here. The only cookie is the one remembering the language you chose. Our audience metrics use no cookies, are aggregated, and build no profiles.