Privacy policy
Who we are (data controller)
The data controller for altivlabs.com is Altiv Labs Technology Services Ltda., Rua Mostardeiro 777 CJ 1401, Porto Alegre, RS, Brazil, CNPJ 59.041.654/0001-06. You can reach us about any privacy matter at privacy@altivlabs.com.
Our data protection officer (encarregado, LGPD Art. 41) is Rodrigo Mazzilli, reachable at privacy@altivlabs.com.
This policy covers altivlabs.com and the services reachable from it. Our blog, dispatch.altivlabs.com, is operated on Ghost and has its own hosting, separate from this site.
What we collect and why
We collect only what each feature on the site needs to work, and nothing runs in the background beyond what is listed below.
| When you… | What we process |
|---|---|
| Use the contact form | Your first and last name, email, company URL, and message, stored as a lead in our CRM (Zoho); an internal Slack notification is sent to our team. |
| Subscribe to the newsletter | Your email address, stored as a lead in our CRM (Zoho) flagged as a newsletter subscriber; we use it to send you the newsletter when we publish one. |
| Book a call | The details you enter with Calendly (name, email, chosen time); the booking is recorded in our CRM (Zoho) and an internal Slack notification is sent. |
| Run the AI Opportunity Scan | Your email, the company URL you submit, and the publicly available content of that website, which our automated agent reads to produce the report; the report is emailed to you and a lead is stored in our CRM (Zoho). Starting a scan also runs an automated bot-protection check by Cloudflare Turnstile. |
| Visit the site (first page view of a session) | Approximate location (city/country derived from your IP address by our CDN), the page path, referrer, and browser language, sent as a one-time internal Slack notification so we know someone visited; we do not store your IP address and no persistent identifier is attached. |
| Visit the site (analytics) | Google Analytics 4 usage data (pages viewed, approximate location, device/browser info). Google's analytics tag loads on every visit, but until you click Accept on the consent banner it runs in a restricted mode that sets no cookies and no advertising identifiers: it sends only aggregate, cookieless measurement signals that cannot identify you or follow you across sites. After you accept, GA cookies are set and full analytics apply. This also covers how you interact with the site: which links and calls-to-action you click, and — if you use the AI Opportunity Scan — which steps you reach, how long each step takes, the options you select, and whether you leave before submitting your email. These are aggregate usage measurements; the scan analytics never include your email address or the report content. |
| Make any request | Our hosting provider (AWS CloudFront/S3) produces standard technical server logs (IP address, user agent, timestamps) for security and operations. |
Legal bases (GDPR and LGPD)
- Consent (GDPR Art. 6(1)(a) / LGPD Art. 7(I)) — for the newsletter, for GA cookies and full analytics, and for advertising measurement.
- Legitimate interests (GDPR Art. 6(1)(f) / LGPD Art. 7(IX)) — for the cookieless, aggregate measurement signals sent before you make a consent choice, and for recording which campaign or link brought you to the site so we can tell which of our own marketing efforts work. Neither sets cookies, and neither is used to build a profile of you or track you across other websites.
- Steps prior to entering into a contract at your request (GDPR Art. 6(1)(b) / LGPD Art. 7(V)) — for the contact form, the AI Opportunity Scan, and call booking.
- Legitimate interests (GDPR Art. 6(1)(f) / LGPD Art. 7(IX)) — for the first-visit notification, security/server logs, and bot/abuse protection (Cloudflare Turnstile on the AI Opportunity Scan), where our interest is knowing our site is being used and keeping it secure against automated abuse, in a way that does not track individuals over time.
Where we rely on consent, you can withdraw it at any time with effect for the future.
Who receives your data (processors and recipients)
- Amazon Web Services — hosting and infrastructure (USA / global).
- Zoho — CRM and transactional email.
- Google — website analytics and advertising measurement (Google Analytics and Google Ads). Before you consent, Google receives only aggregate, cookieless measurement signals; after you consent, it also receives cookie-based analytics and advertising-measurement data.
- Cloudflare — Turnstile bot protection on the AI Opportunity Scan (security/abuse prevention).
- Calendly — call scheduling.
- Slack — internal notifications.
We never sell personal data and share it only with the processors above under data-processing agreements.
International data transfers
We are a Brazilian company and our processors operate in the United States and other countries. Where data of EU/EEA residents is transferred outside the EEA, we rely on the European Commission's Standard Contractual Clauses and, where applicable, adequacy decisions (for example, the EU–US Data Privacy Framework for certified providers). Brazilian data is transferred abroad under LGPD Arts. 33–36.
Advertising
We run advertisements on Google Ads. When you arrive from one of our advertisements, the advertisement's identifier is recorded so we can tell which campaign or wording brought you here and whether it led to a genuine enquiry. If you submit the contact form, the newsletter form or the AI Opportunity Scan, that identifier is stored alongside your enquiry in our CRM.
Advertising cookies and advertising identifiers are set only if you accept on the consent banner. We do not sell personal data and we do not share it for cross-context behavioural advertising.
How long we keep data
- CRM leads and contact-form messages — as long as a business relationship or prospect interest exists, reviewed at latest every 3 years.
- Newsletter data — until you unsubscribe.
- Scan reports and inputs — up to 12 months.
- Slack notifications — subject to workspace retention.
- Server logs — up to 90 days.
- GA4 — 14-month retention configured in Google Analytics.
Your rights
If the GDPR applies to you, you have the right to access, rectify, erase, restrict, or port your data, to object to processing, and to withdraw consent at any time, in addition to the right to lodge a complaint with the supervisory authority of your EU member state.
- Access — confirmation of whether we process your data and a copy of it.
- Rectification — correction of inaccurate or incomplete data.
- Erasure — deletion of your data where the law allows.
- Restriction — limiting how we use your data in certain circumstances.
- Portability — receiving your data in a structured, commonly used format.
- Objection — objecting to processing based on our legitimate interests.
- Withdrawal of consent — with effect for the future, at any time.
If the LGPD applies to you, you have the corresponding Brazilian rights, in addition to the right to lodge a complaint with the ANPD (Autoridade Nacional de Proteção de Dados).
- Confirmation of the existence of processing.
- Access to your data.
- Correction of incomplete, inaccurate, or outdated data.
- Anonymization, blocking, or deletion of unnecessary or excessive data.
- Portability of your data to another provider.
- Information about the public and private entities with which we have shared your data.
- Revocation of consent.
If you are visiting from a US state with its own privacy law, you have the rights to know what personal data we hold about you, to have it deleted, and to have it corrected; we do not sell or share personal data for cross-context behavioral advertising.
You can exercise any of these rights by emailing privacy@altivlabs.com; we answer within the legally required period.
Children
The site addresses businesses and is not directed at children under 16; we do not knowingly collect their data.
Changes to this policy
We may update this policy from time to time. When we do, the effective date above changes, and material changes are announced on the site. Continued use of the site after changes constitutes acceptance only where the law allows it.
Contact
Altiv Labs Technology Services Ltda.
Rua Mostardeiro 777 CJ 1401, Porto Alegre, RS, Brazil
Email: privacy@altivlabs.com
Phone: +55 51 3017-1269