Privacy Policy

1. What this policy covers

This document applies to the website www.outboxgroup.com.br and to the data that reaches us through it. If you hire us for a project, the relationship is also governed by the contract signed between the parties.

2. What data we collect

We only collect what you type into the contact form:

• Name and email, so we can reply to you;
• Type of service you are interested in, so we understand your request;
• Message, if you choose to write one (optional field);
• Video call preference, when you check that option.

We also temporarily record the IP address of whoever submits the form, only to limit automated submissions and prevent spam. This record stays in the server's memory and is not stored in a database.

We do not ask for your CPF (Brazilian taxpayer ID), bank details, card details or any sensitive data. If you choose to write this kind of information in the message field on your own, please avoid it.

3. What we use it for

• Replying to your inquiry and talking about the project;
• Preparing a quote and proposal, when applicable;
• Scheduling a video call, if you asked for one.

We do not use your data for advertising, we do not build behavioral profiles and we do not sell or rent your data to anyone.

4. Legal basis

We process the form data on the legal basis of preliminary procedures related to a contract, set out in Article 7, item V, of Brazil's General Data Protection Law (LGPD, Law 13.709/2018). In other words: you reached out to us about a possible service, and we need your data to reply.

5. Where the data is stored

Messages sent through the form are stored in a database hosted on Supabase and also forwarded by email to felipe@outboxgroup.com.br. The website is hosted on a server of our own, managed by OutBox Group.

These providers may process data outside Brazil. The transfer is protected by an encrypted connection and limited to what is necessary for the service to work.

6. Who has access

Only the OutBox Group team, through a dashboard protected by login and password. We do not share your data with third parties, except when required by law or court order.

7. How long we keep it

• Inquiries that did not become a project: up to 24 months, in case you want to pick the conversation back up;
• Inquiries that became a project: for the term of the contract and for the period required by tax law;
• At any time: if you ask us to delete your data, we delete it before these periods end, except for what the law requires us to keep.

8. Security

The website runs on HTTPS with a valid certificate. Access to the admin dashboard requires authentication, and the database uses security rules that prevent public reading of the inquiries. No system is infallible, but we work to keep risks to a minimum.

9. Your rights

You can request confirmation, access, correction, anonymization, portability or deletion of your data, and you can also withdraw consent. We explain how to exercise each of these rights on the LGPD and your rights page.

10. Cookies

Our use of cookies and local storage is described in detail in the Cookie Policy.

11. Changes to this policy

If we change anything relevant, we update the date at the top of this page. The version published here is always the one in effect.

12. Contact us

Questions, requests or complaints about personal data: felipe@outboxgroup.com.br. We reply within 15 days.