Get in touch

Privacy Policy

Last updated: August 2026

Quick summary: We only collect what you give us (contact form, automation X-ray, Radar digest, affiliate program, call scheduling). We do not sell data. Analytics and advertising cookies only load if you accept them in the consent banner, and you can request access, correction, or deletion of your data at any time.

1. Who we are

Chiarelli Labs, registered under CNPJ 62.822.123/0001-65, is the controller of the personal data collected on this website. We are a software house specializing in digital products and AI automations, based in Brazil.

2. Data we collect

We exclusively collect data you provide voluntarily while using the website:

  • Contact form: name, email, company, and a summary of the problem; optionally LinkedIn, project details, budget range, timeline, and decision profile
  • Briefing file attached to the contact form (optional, stored on Vercel Blob)
  • Automation X-ray: a screen recording you start yourself, submitted for analysis (optional)
  • Radar (weekly digest): email and segment of interest, with double opt-in confirmation
  • Affiliate program: registration data and PIX key for commission payouts
  • Call scheduling: chosen date and time, plus your timezone
  • Tools we operate for clients: technical usage events and error reports, as agreed in each client's contract

3. Purpose of processing

Data is used to assess the fit between the project and our work, establish commercial contact, generate the X-ray result, send the Radar digest to subscribers, operate the affiliate program, and schedule calls. We do not sell or rent personal data.

4. Legal basis (LGPD, art. 7)

Processing is carried out based on legitimate interest in commercial evaluation (art. 7, IX), on the consent of the data subject when filling in forms and accepting cookies (art. 7, I), and on contract performance for the affiliate program and service delivery (art. 7, V).

5. Sub-processors

We share data only with the service providers strictly necessary for operations:

  • Vercel: website hosting, file storage, and anonymized metrics
  • Neon: database (serverless PostgreSQL)
  • Resend: transactional and Radar email delivery
  • Anthropic: AI-based lead classification and X-ray analysis
  • Google: call scheduling (Calendar) and internal tracking spreadsheet
  • Stripe: project payment processing

6. Cookies and analytics

We use strictly functional first-party cookies: chosen language, your consent decision, affiliate referral code and campaign source (valid for 60 days), and sessions for authenticated areas. Vercel Analytics metrics are anonymized and cookieless.

Google Analytics, the Google Ads tag, and the Meta Pixel only load after you accept them in the consent banner (default: denied). If you decline, no analytics or advertising cookies are created. To withdraw acceptance, clear this site's cookies in your browser.

7. Data retention

Data is retained as long as there is active commercial interest or a legal obligation. In case of non-conversion, we delete data within 24 months of the last contact. X-ray screen recordings are automatically deleted within 30 days.

8. Your rights (LGPD, art. 18)

You have the right, at any time, to:

  • Access the data we hold about you
  • Correct incomplete or outdated data
  • Request deletion of your data
  • Receive your data in a portable format
  • Withdraw consent at any time

We will respond within 15 days from receipt of the request.

9. Security

The website operates exclusively over HTTPS. Data is stored in a managed serverless database with restricted access. Sensitive data, such as PIX keys and integration credentials, is encrypted with AES-256-GCM. No data is transmitted in plain text.

10. Contact

To exercise your rights or ask questions about this policy, send an email to contato@chiarelli.dev.