Who the controller is

The controller of the data collected on celiocrisologo.com.br is the legal entity below. The site is the professional portfolio of Célio Crisólogo, and the contacts it receives support that company's business.

Legal name

INCLUDTECH INTELIGENCIA ARTIFICIAL E INOVACAO - INOVA SIMPLES (I.S.)

CNPJ (Brazilian company registration number)

66.813.170/0001-01

Legal nature

234-8 — Empresa Simples de Inovação (Brazilian simplified innovation company)

Address

R. Bocaiuva, 434 — Morada da Colina — Uberlândia/MG — ZIP 38411-126 — Brazil

Channel for exercising your rights

celio@includlab.com.br — the official address, and the only one needed for access, correction, deletion or any question about this policy.

Phone

+55 (34) 9795-7602

What data is collected

There are two moments of collection, and they are very different in nature. The first happens on every visit, to measure audience and performance, without cookies and without identifying you. The second happens only when you submit the contact form, and that one does involve data you provide yourself.

What browsing records:

Browsing data

On every visit, audience and performance measurement records the page accessed, where the visit came from, the approximate country, region and city, the browser, the operating system and the device type, plus page-load speed indicators. There are no cookies and no cross-site tracking. Visitors are distinguished by a code derived from the request itself, and the operator's documentation states that the visitor session is not stored permanently and is discarded within 24 hours. Through this means it is not possible to link visits to an identified person. The legal basis is legitimate interest (LGPD, art. 7, IX), and you may object to this processing through the channel in the rights section.

Language preference

If you choose a language in the selector at the top of the page, the site stores a cookie named NEXT_LOCALE containing only that choice (en or pt-br), for up to one year, so that the home page opens in the language you picked. It holds no identifier, is not shared and is not used for measurement or tracking. Without that choice, no cookie is set.

What data the form collects

This data only exists if you submit the form, and it is limited to the following:

Name

Provided by you. It lets the reply be personal rather than generic.

Email

Provided by you. It is how the reply reaches you and where the confirmation copy of what you sent goes.

Phone

Optional in general and required only if you ask for a call back — without a number there is no way to use precisely the channel you chose. Stored as digits only, used exclusively for that call back, and kept for the same 24 months. It is not repeated in the confirmation copy: you already know your own number.

Company

Optional. It helps to understand the context before the conversation. Leaving it blank does not prevent submission.

Type of request

Your choice among the form's options. It frames the reply.

Description of the challenge

The text you write. Since it is a free-text field, it may contain information about your business — write only what is needed to start the conversation.

Preferred contact method

Your choice among email, call or LinkedIn.

Scrambled version of your IP address (stored as ip_hash)

The IP address is not stored. What is recorded is a cryptographic digest of it, combined with a server secret, which does not allow the original address to be recovered. It is used exclusively to prevent abuse: limiting how many submissions come from the same origin within a time window. Without it, the form would be an easy target for automated submissions.

Browser identification (stored as user_agent)

The text your browser sends to identify itself, limited to 255 characters. It is used exclusively to prevent abuse: telling human traffic apart from automated traffic when there is suspicion. It is not used to track you across visits or across sites.

What it is used for, and on what legal basis

Form data

Used exclusively to reply to your contact and to carry on the business conversation you started. The legal basis is the performance of preliminary procedures related to a contract, at the data subject's request — article 7, item V, of the LGPD (Brazil's General Data Protection Law). There is no use for advertising, no profiling and no sale or transfer to third parties.

Security data (scrambled IP and user agent)

Used exclusively to prevent abuse of the form. The legal basis is legitimate interest — article 7, item IX, of the LGPD: keeping the contact channel working is a condition for it to exist, and the processing is the minimum able to sustain that.

How long the data is kept

Submissions are kept for up to 24 months from the date they are sent, and then deleted.

The period exists so that a conversation resumed months later does not start from scratch. If you ask for deletion earlier, it is done — the period is a ceiling, not a retention commitment.

Who the data is shared with

The data is not sold, transferred or used for advertising. There are, however, service providers that run the site's infrastructure and therefore process the data on the controller's behalf — processors, as the LGPD defines them:

Vercel

Hosts the site, runs the code that processes the form and measures page audience and performance.

Supabase

Provides the database where the submission is stored.

Hostinger

Provides the email service that sends the notification and your copy.

Your rights and how to exercise them

The LGPD guarantees you the rights below, at any time and free of charge. All of them are exercised through the same channel.

Confirmation and access

Find out whether any of your data is stored and obtain a copy of it.

Correction

Ask for incomplete, inaccurate or outdated data to be corrected.

Deletion

Ask for your data to be deleted, including before the 24-month period ends.

Portability

Receive the data in a machine-readable format.

Information about sharing

Find out which processors handle the data.

Objection

Object to processing based on legitimate interest, when you believe it is not justified.

How the data is protected

The database is closed by default: no public key has read or write access to the submissions table, and access happens only through the server, with a credential that is never exposed to the browser.

As described above, the IP address is never stored in its original form, and the phone number, when provided, is not repeated in the confirmation copy.