This policy explains which personal data VTIS collects on vtis.com.br, why, who we share it with and how you can exercise your rights under the Brazilian General Data Protection Law (LGPD, Law 13,709/2018).
Controller
VTIS is the controller of the data collected on this site. For any privacy matter, email contato@vtis.com.br.
Data we collect and why
Contact form: what you fill in (such as name, email, phone and message), to reply and, if applicable, prepare a proposal. Legal basis: pre-contractual steps at your request and legitimate interest.
Free website assessment: the site address, your name, email and, optionally, company, site goal and main concern, to run the assessment, email the report and, if you ask, discuss fixes. Legal basis: performance of the service you requested. Only the public page you enter is assessed, without login and without changing anything. Your name and email are not sent to the measurement tools or AI services; they receive only the site address, technical measurements and, if provided, the goal and concern from the form.
Marketing: if you opt in, we may email VTIS content and news. Legal basis: consent, which you can withdraw at any time by replying to any email.
Abuse protection: we temporarily keep a one-way hashed version of your IP address and email to count attempts per hour and per day. Legal basis: legitimate interest.
Analytics: Google Analytics and Google Ads (via Google’s Site Kit plugin) to understand site usage and measure campaigns. They may use cookies and browser identifiers. Legal basis: legitimate interest and, where required, consent.
Google ad clicks: when you reach the site through a Google ad, we keep that click’s identifier (created by Google itself) in the vtis_click_id cookie for up to 90 days, to know which ad led to the contact. If you submit an assessment request, this identifier is saved with the request and may be sent to Google Ads only to record the conversion. Your name and email are not sent to Google. The identifier is not used for any other purpose. Legal basis: legitimate interest in measuring campaign results and, where required, consent.
Cookies
- vtis_lang: remembers your language for up to 1 year (necessary).
- vtis_report: gives access to your report page after you open the emailed link, while the link is valid (necessary).
- vtis_click_id: when you arrive through a Google ad, keeps the click identifier for up to 90 days to know which ad led to the contact (campaign measurement).
- Google cookies (Analytics and Ads): audience and campaign measurement, under Google’s privacy policy.
You can delete or block cookies in your browser settings; blocking necessary cookies may prevent access to the report.
Sharing
We do not sell personal data. We share it only as needed with providers that help us run the site and the assessment: HostGator (hosting), Titan (email delivery), Google (PageSpeed Insights, Gemini without personal data, Analytics and Ads) and Groq (backup AI service, without personal data). Some providers process data outside Brazil, mainly in the United States, under appropriate contractual safeguards (LGPD article 33). We may also disclose data when required by law.
Retention
Contact and assessment requests, including the report: up to 12 months after the last contact, unless there is an ongoing business relationship or a legal obligation. Online report links: valid for 90 days and may be revoked earlier. Abuse protection records: 1 hour to 1 day.
Security
We use HTTPS, restricted admin access and secret, time-limited report links, and we never ask for passwords or access to your site. If an incident may cause relevant risk, we will notify those affected and the Brazilian Data Protection Authority (ANPD).
Your rights
You may request confirmation, access, correction, anonymization, blocking or deletion, portability, information about sharing and withdrawal of consent. Email contato@vtis.com.br; we reply within 15 days. You may also file a complaint with the ANPD.
Changes
We may update this policy; the date at the top shows the latest version.