Privacy policy.

Notkode is a technology company that develops custom systems, automations, and visual identity. We act as the controller of the personal data you send through this site.

For anything related to this document or your rights as a data subject, reach us at camila@notkode.com.br.

When you fill out a form on the site, we collect:

• Name
• Email
• Phone / WhatsApp
• Messages, notes, and answers you add freely
• Source page of the submission
• Campaign parameters (UTMs) if you came from an ad link

We don't collect sensitive data (race, religion, political opinion, health, etc.) and we don't store card data. If you're under 18, don't fill out the forms without parental consent.

Data is used strictly to:

• Reply to your inquiry and validate the project scope
• Send the detailed proposal by email and WhatsApp
• Track the lead until project close (or drop)
• Occasionally share relevant news about our work, always with a clear opt-out in every message

We don't sell, rent, or use your data to build advertising profiles.

To run the site and the customer journey, we use third-party services that process data on our behalf:

• Supabase, database where leads are stored (server in São Paulo, Brazil).
• Resend, sending email notifications.
• Vercel, site hosting.
• WhatsApp (Meta), when you choose to continue the conversation there.

All are subject to contracts requiring the same level of protection we apply. We never pass your data to companies that aren't directly involved in serving your project.

• Active leads: while the project is being discussed or in progress.
• Dropped leads: up to 24 months after the last contact, for commercial history.
• Active clients: for the legally required period (minimum 5 years from the end of the contract, for tax and civil purposes).

After these periods, data is deleted or anonymized.

Under the Brazilian LGPD (Law 13.709/2018), at any time you can:

• Confirm whether we hold data about you
• Access the data we hold
• Correct outdated or incomplete data
• Request anonymization, blocking, or deletion
• Request portability to another provider
• Withdraw the consent you gave us
• Know with whom we share your data

To exercise any of these rights, write to camila@notkode.com.br with the subject LGPD. We reply within 15 days.

The site uses HTTPS on every page. Database access is restricted by server keys never exposed in the browser. Only Camila has access to the admin panel.

Even so, no system is 100% immune. If we identify an incident affecting your data, we'll notify you and ANPD within the required timeframes.

Today the site doesn't use analytics cookies or advertising pixels. When we start (for example, GA4 or Plausible), we'll update this policy and show a cookie notice in the footer.

We may update this document as the site or legislation change. The date of the last revision sits at the top of this page. Material changes are announced by email to active clients.