Legal

Privacy policy

Last updated: November 11, 2026

This page explains what personal data bi19 receives through this site, what we do with it and what rights you have. It follows Brazil's General Data Protection Law (LGPD, Law 13,709/2018) and, for visitors in the European Union, the General Data Protection Regulation (GDPR).

In short

We only receive what you choose to send us — through the contact form, email, phone or WhatsApp — and we use it to reply to you.
No advertising and no tracking across sites. Visits are counted in aggregate without cookies; Google Analytics cookies only if you accept them.
We don't sell your data or share it for marketing.
You can ask to see, correct or delete your data at any time: bi19.andre@gmail.com.

1. Who is responsible

This site belongs to bi19 — Business Intelligence, the controller of the personal data described here: we decide what is collected and why.

For any privacy question or request, write to bi19.andre@gmail.com or call +55 11 96072-6419. This is our channel for all data protection matters.

2. What we collect and why

We only collect data in the situations below. We don't ask for sensitive data (such as health, religion or political opinion) — please don't include it in your message.

Contact form

What: name, email and message; company, phone and the topics you tick, if you fill them in. Along with the message we record the page you sent it from and the site language.
Why: to reply, understand your project and, if you want, prepare a proposal.
Legal basis: steps taken at your request before a possible contract (LGPD art. 7, V; GDPR art. 6(1)(b)).

Email, phone and WhatsApp

What: whatever you send us, plus your email address or phone number. The floating "Let's talk" button sends the form and then opens WhatsApp with your message ready; it only reaches us there if you send it.
Why: the same as the form: to reply and talk about your project.
Legal basis: the same as the form.

Language choice

What: the language you pick with the flags (English or Portuguese), saved in your own browser (localStorage). It is never sent to us.
Why: to keep showing the site in the language you chose.
Legal basis: strictly necessary for a feature you asked for (and it doesn't reach us). To remove it, clear this site's data in your browser.

Technical access records

What: the company that hosts the site automatically records technical data on each visit — IP address, browser, page requested, date and time. It also counts visits in aggregate (pages viewed, where the visit came from, load time), without cookies and without identifying you (Cloudflare Web Analytics).
Why: to deliver the pages, keep the site secure, investigate problems and know which pages are visited, in aggregate numbers. We don't use these records to identify you or build a profile of you.
Legal basis: legitimate interest in keeping the site working and secure (LGPD art. 7, IX; GDPR art. 6(1)(f)).

Visit analytics (Google Analytics), only if you accept

What: pages viewed, how you got to the site (search, link or campaign), approximate location (city and country, estimated from the IP address, which Google Analytics doesn't store), device, browser and language, time on the page, clicks on external links and whether you sent the contact form, linked to a random identifier kept in a cookie. Never your name or email: what you type in the form doesn't go to Google Analytics.
Why: to know which pages and channels bring visits and contacts, and to improve the site.
Legal basis: your consent, given in the notice at the bottom of the page (LGPD art. 7, I; GDPR art. 6(1)(a)). You can withdraw it at any time in "Cookie preferences", at the bottom of every page.

3. Cookies

We only use cookies if you accept them in the notice at the bottom of the page. Until you do, no cookie is stored and nothing is sent to Google. We don't use advertising cookies.

If you accept, Google Analytics stores two cookies, both for up to 2 years:

_ga: a random identifier that tells one visitor from another;
_ga_ followed by the code of our Google Analytics property: keeps the state of the current visit.

Your choice (accept or reject) is saved in your own browser (localStorage), so we don't ask again on every page. You can change it at any time in "Cookie preferences", at the bottom of every page; rejecting after accepting stops the measurement and deletes these cookies.

Only bi19 reads what you send. To run the site and receive messages, we rely on providers that process data on our behalf:

Google — email (Gmail), where form messages and emails arrive, and Google Analytics, which counts visits, only if you accept cookies;
Meta — WhatsApp, if you choose to contact us there;
Cloudflare — the site's hosting company, which serves the pages, keeps the technical records and counts visits in aggregate.

We may also disclose data when required by law or by an order from a court or authority. We don't sell, rent or share your data for marketing.

5. International transfers

Some of these providers store data on servers outside Brazil, including in the United States. In those cases the transfer relies on the safeguards those providers offer, such as standard contractual clauses (LGPD art. 33; GDPR chapter V).

6. How long we keep it

Messages and contact details: while we are talking and for up to 2 years after the last contact, so we can pick up the conversation if you come back. If we sign a contract, the data it needs is kept for the periods the law requires (tax and accounting rules, for example). After that, we delete it.

Technical records stay with the hosting company for the period it sets.

Google Analytics data: 14 months from the visit; after that, Google deletes it automatically.

7. Your rights

Under the LGPD you can ask us, at any time and free of charge, to:

confirm whether we process data about you and give you access to it;
correct incomplete, inaccurate or outdated data;
anonymize, block or delete data that is unnecessary, excessive or processed in breach of the law;
delete data processed with your consent, and let you withdraw that consent;
transfer your data to another provider;
tell you who we have shared your data with;
stop processing based on legitimate interest, if you object to it.

If you are in the European Union, the GDPR also gives you the rights of access, rectification, erasure, restriction, portability and objection.

To exercise any of them, write to bi19.andre@gmail.com. We may ask you to confirm your identity, and we reply within 15 days.

You can also complain to Brazil's data protection authority, the ANPD (gov.br/anpd), or, in the European Union, to the authority of the country where you live.

8. Security

We use encrypted connections (HTTPS) and keep access to messages restricted to bi19. No system is completely secure; if an incident could put you at risk, we will notify you and the ANPD, as the law requires.

9. Children and teenagers

This site is meant for businesses and is not directed at anyone under 18. If a minor has sent us data, let us know and we will delete it.

10. Changes to this policy

We may update this policy when the site or the law changes. The date at the top shows the current version; if a change affects how we use data you have already sent, we will let you know.

This policy is available in English and Portuguese; if the two differ, the Portuguese version prevails.