Privacy Policy

01 Introduction

This Privacy Policy is issued by Vert Tecnologia Ltda, a company incorporated under Brazilian law, registered under CNPJ 67.869.160/0001-42, with offices at Avenida Gilenilda Alves, 26, Apt 1101, Boa Vista, Vitória da Conquista – Bahia, Brazil (hereinafter "Vert Tecnologia", "we", "us" or "our").

We operate the website vert-us.site and associated digital properties (collectively, the "Site"). This policy governs how we collect, store, use, share and protect personal data that you provide to us or that we gather automatically when you visit our Site or engage with our services.

We are committed to full compliance with Brazil's Lei Geral de Proteção de Dados (LGPD — Law No. 13,709/2018), the European Union's General Data Protection Regulation (GDPR — Regulation (EU) 2016/679), and all other applicable privacy legislation. Our legal bases for processing personal data are identified in each relevant section below.

By accessing or using our Site, you acknowledge that you have read and understood this policy. If you disagree with any part of it, please discontinue use of the Site. For questions at any time, contact us at contato@vert-us.site.

02 Information We Collect

We collect personal data through two main channels: information you actively provide to us, and information gathered automatically through your interaction with the Site.

Information you provide directly

When you reach out to us through our contact channels — including our published email address or any future contact mechanism — you may provide:

• Your full name and job title or company name.
• Your business or personal email address.
• Your telephone number, if included in your communication.
• The content of your message, which may include details about your project requirements, technical questions, or commercial inquiries.
• Any additional information you voluntarily attach or reference in your correspondence.

We do not operate subscription lists, gated content downloads, or account registration on this Site. Contact with us is direct and intentional — you initiate it, and we process only what you share.

Information collected automatically

Like virtually all websites, our Site collects certain data automatically when you visit. This includes:

• Device and browser information — your browser type and version, operating system, screen resolution, and language preferences.
• IP address and approximate geolocation — used to understand the general geographic distribution of our audience and to detect and prevent security threats. We do not derive precise physical location from IP data.
• Referral source — the URL or search engine query that brought you to our Site, so we can understand how visitors discover us.
• Pages visited and navigation path — which pages you viewed, in what order, and for how long, to help us evaluate content relevance and Site performance.
• Interaction events — scroll depth, link clicks, and button interactions, collected in aggregate and pseudonymized form via analytics tools.
• Session timestamps — the date, time, and duration of your visit.

03 How We Use Your Information

We use the personal data we collect exclusively for the purposes described below. Where required by law, we have identified the applicable legal basis under the LGPD and GDPR.

• Responding to inquiries and communications — when you contact us by email, we use your name, email address, and message content to understand your request and provide a timely, relevant response. Legal basis: performance of pre-contractual steps at your request (LGPD Art. 7, II / GDPR Art. 6(1)(b)) and our legitimate interest in maintaining professional correspondence (LGPD Art. 7, IX / GDPR Art. 6(1)(f)).
• Operating and improving the Site — automatically collected analytics data enables us to identify technical errors, optimize page performance, and make informed decisions about content and navigation structure. Legal basis: legitimate interest (LGPD Art. 7, IX / GDPR Art. 6(1)(f)).
• Measuring marketing effectiveness — when we run digital advertising campaigns (such as Google Ads), aggregated, non-identifiable analytics data helps us assess which channels are driving meaningful traffic. We do not build individual advertising profiles on Site visitors. Legal basis: legitimate interest / consent for cookies where applicable.
• Ensuring security and preventing fraud — we process IP addresses and access logs to detect abnormal traffic patterns, protect against bot attacks, and maintain the integrity of our infrastructure. Legal basis: legitimate interest (LGPD Art. 7, IX / GDPR Art. 6(1)(f)).
• Complying with legal obligations — in certain circumstances we may be required to retain or disclose personal data to comply with Brazilian law, a court order, or a lawful regulatory request. Legal basis: compliance with a legal obligation (LGPD Art. 7, II / GDPR Art. 6(1)(c)).

We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you, and we do not sell, rent, or trade your data to third parties for their own marketing purposes.

04 Cookies & Tracking Technologies

Cookies are small text files placed on your device by a website. We use cookies and similar technologies (such as web beacons and browser local storage) to make our Site function correctly and to gather anonymized usage analytics.

Types of cookies we use

• Strictly necessary cookies — These are required for basic Site functionality, such as maintaining your session state and enabling navigation. They cannot be disabled without rendering parts of the Site non-functional, and no consent is required for their placement.
• Analytics cookies — We use Google Analytics (or equivalent tools) to collect pseudonymized data about Site traffic and visitor behavior. These cookies do not identify you personally — they assign a random identifier to your browser session and track aggregate patterns. IP addresses are anonymized prior to storage. Google Analytics cookies typically include _ga, _ga_*, and _gid, with a retention period of up to 26 months.
• Advertising and conversion cookies — When we run Google Ads campaigns, Google may set conversion-tracking cookies to help us understand whether a click on an ad led to a meaningful Site interaction. These cookies operate under Google's own privacy policy. We do not use retargeting or behavioral advertising cookies that track you across unrelated third-party websites for profiling purposes.

Your choices

You may control or disable cookies at any time through your browser's settings. Most modern browsers allow you to view, delete, and block cookies on a per-domain or global basis. Disabling analytics cookies will not affect your ability to browse our Site, though it may limit our ability to improve it. Guidance on managing cookies is available from your browser's help pages and from resources such as aboutcookies.org.

To opt out of Google Analytics specifically across all websites, you may install the Google Analytics Opt-out Browser Add-on.

05 Sharing With Third Parties

We do not sell, rent, exchange, or otherwise disclose your personal data to third parties for commercial gain. However, in the ordinary operation of our business and Site, certain trusted service providers process data on our behalf. All such providers are contractually bound to handle data only on our instructions and in compliance with applicable privacy law.

Service providers and sub-processors we may engage include:

• Cloud infrastructure and web hosting providers — to host and deliver the Site globally. Our hosting arrangements may involve servers located in the United States, European Union, or Brazil. Where data is transferred outside Brazil or the EEA, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses or adequacy decisions recognized by the relevant data protection authorities.
• Google LLC — for Google Analytics (audience measurement and Site performance analysis) and Google Ads (advertising campaign tracking). Google's processing is governed by the Google Privacy Policy.
• Email infrastructure providers — to deliver and receive electronic communications. These providers access only the data required to transmit and store messages.
• Security and CDN services — to protect the Site from distributed denial-of-service attacks and to cache content for faster delivery.

Beyond the above, we may disclose personal data if required to do so by a Brazilian court, the Autoridade Nacional de Proteção de Dados (ANPD), a law enforcement agency with lawful authority, or if disclosure is necessary to protect the rights, property, or safety of Vert Tecnologia, our clients, or the public. In such cases, we will disclose only the minimum data required and, where legally permitted, will notify the affected individual.

In the event of a corporate restructuring, merger, or acquisition, personal data may be transferred to a successor entity, provided that entity agrees to treat your data in a manner consistent with this policy.

06 Data Retention

We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with applicable legal obligations, or to resolve disputes and enforce our agreements. Specific retention periods are as follows:

• Correspondence and contact records — Messages and associated contact details are retained for a maximum of 5 (five) years from the date of the last interaction. This period reflects the general limitation period for contractual claims under Brazilian civil law and ensures we can demonstrate the basis for any business relationship that developed.
• Analytics data — Pseudonymized session and behavior data collected by Google Analytics is retained for up to 26 months, consistent with Google's data retention settings. Aggregate, non-identifiable statistical reports derived from this data may be kept indefinitely.
• Server and access logs — IP addresses and server access logs are retained for up to 12 months for security and diagnostic purposes, after which they are automatically deleted or fully anonymized.
• Legal compliance records — Where we are required by law to retain data for a specified period (for example, financial transaction records under Brazilian tax law), we will retain it for the legally mandated duration and no longer.

When data has served its purpose and no legal retention obligation applies, it is securely deleted or irreversibly anonymized. Upon a verified deletion request from a data subject (see Section 08), we will act within the timeframes required by applicable law.

07 Data Security

The protection of your personal data is a professional and legal obligation we take seriously. We implement a layered set of technical and organizational measures designed to prevent unauthorized access, accidental loss, alteration, or disclosure of data under our control.

Our security measures include:

• Encryption in transit — All data exchanged between your browser and our Site is transmitted over TLS 1.2 or higher (HTTPS), ensuring that network-level interception is computationally infeasible.
• Encryption at rest — Personal data stored on our servers and with our sub-processors is protected by encryption at the storage layer.
• Access control — Access to systems holding personal data is restricted to authorized Vert Tecnologia personnel who have a legitimate operational need. We enforce the principle of least privilege and use multi-factor authentication for administrative system access.
• Vendor security assessments — Third-party providers handling personal data on our behalf are evaluated for security posture and are required to maintain appropriate technical safeguards as a condition of engagement.
• Incident response — We maintain internal procedures for detecting, assessing, and responding to personal data breaches. In the event of a breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority (ANPD and/or applicable EU supervisory authority) and, where required, affected individuals within the timeframes established by law.

08 Your Rights

Depending on your country of residence, you have legally enforceable rights regarding the personal data we hold about you. Residents of Brazil are protected by the LGPD; residents of the European Economic Area are protected by the GDPR. Both frameworks grant substantially equivalent rights, which we honor regardless of your location.

How to exercise your rights: Submit a written request to contato@vert-us.site with the subject line "Data Subject Request." Include your full name and, where possible, the email address associated with your communication with us, so that we can locate the relevant records. We will respond within 15 business days for LGPD requests and within 30 calendar days for GDPR requests. In complex cases, we may extend this period by a further 30 days, provided we notify you of the extension and the reasons for it.

We may need to verify your identity before acting on a request in order to protect your privacy and prevent fraudulent access to another person's data. We will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive.

09 Children's Privacy

Our Site and services are directed exclusively at businesses and professionals. We do not knowingly solicit, collect, or process personal data from individuals under the age of 18 (eighteen) years. The LGPD imposes heightened protections for children and adolescents, and we take those obligations seriously.

If you are a parent or guardian and you believe that a minor has communicated personal data to us, please notify us immediately at contato@vert-us.site. Upon verification, we will take prompt steps to delete such data from our records. We do not build user profiles, serve targeted advertising, or use data from minors for any commercial purpose whatsoever.

10 Changes to This Policy

Privacy law evolves, and so does our business. We may update this Privacy Policy periodically to reflect changes in our practices, the services we offer, or applicable legal requirements. When we make material changes — meaning changes that meaningfully affect your rights or our obligations — we will update the "Last updated" date at the top of this page and, where the change is significant, we may bring it to your attention through a prominent notice on our Site.

We encourage you to review this policy periodically. Your continued use of the Site following the publication of an updated policy constitutes your acknowledgment of the revised terms. If any update substantially alters the way we handle data that was collected under a prior version of this policy, we will, where legally required, seek fresh consent or provide you with an opportunity to object before the new terms take effect.

Prior versions of this policy may be requested by contacting us directly at contato@vert-us.site.

11 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we process your personal data, we welcome you to reach out directly. We are committed to addressing all privacy-related inquiries promptly and transparently.

Under the LGPD, we have designated a responsible contact for data protection matters. All formal data subject requests, privacy complaints, and inquiries regarding our processing activities should be directed to:

If you are dissatisfied with our response, you have the right to escalate your complaint to the Autoridade Nacional de Proteção de Dados (ANPD) in Brazil (gov.br/anpd), or to the data protection supervisory authority in your country of residence if you are based in the European Economic Area.