Privacy Policy

1. Who the controller is

The data controller is DEXPERT TECNOLOGIA LTDA, registered under CNPJ No. 50.764.914/0001-05. The channel of the data protection officer (DPO) is contato@dexpert.com.br, for any matter about privacy and personal data.

2. Who this applies to

This policy applies to anyone who visits the Dexpert website, sends the contact form, asks for a quote, takes the free assessment or applies for a job. Client data processed in the systems Dexpert builds follows each project's contract, in which the client is, as a rule, the controller and Dexpert the processor.

3. Terms used

• Data subject: the natural person the personal data refers to.
• Personal data: information related to an identified or identifiable natural person.
• Processing: any operation with personal data, such as collection, use, storage, sharing and deletion.
• Controller: whoever makes the decisions about the processing of personal data.
• Processor: whoever processes personal data on the controller's behalf.

4. Data we collect

We only collect the data you enter in the forms and the technical data the website needs to run securely:

• Contact form: name, email, company, phone, the topics of interest and the message.
• Quote: the project details you describe (hiring model, services, industry, stage, platforms, features, team, technologies, integrations, audience, timeline and budget range) and name, job title, email, phone, company, number of employees, revenue range, country, state and city.
• Free assessment: name, role, email, phone, company, industry, number of employees, revenue range, country, state, city, the answers to the questions and the calculated score.
• Careers: name, email, phone, city, state, LinkedIn profile, GitHub or portfolio (optional), area of interest, seniority, preferred work model, the message and the résumé you send.
• Contact source: along with the forms, the page where you entered the site, the referring site and the campaign (UTM) parameters of the link.
• Technical data: IP address and browser, used by the bot check and in the servers' security logs.
• Browsing data: pages visited, referring site, country, device type and browser, recorded without cookies and without identifying you, for aggregate visit statistics.

5. Why we use it and on what legal basis

• Answering your message and preparing the quote: steps prior to a contract, at your request (art. 7, V, LGPD).
• Calculating the assessment result and contacting you about it: consent, given in the form's authorization box (art. 7, I).
• Reviewing job applications for Dexpert's hiring processes: steps prior to a contract, at your request (art. 7, V).
• Protecting the site against bots, spam and abuse: legitimate interest (art. 7, IX).
• Measuring visits and which channels contacts come from, in aggregate numbers: legitimate interest (art. 7, IX).
• Remembering the language and theme you chose: legitimate interest (art. 7, IX).

6. Assessment result

The assessment score is calculated automatically from your answers. It is indicative, only guides the conversation about your company's digital maturity and leads to no decision affecting your rights.

7. Cookies and browser storage

The site uses no advertising or audience-measurement cookies. In your browser we only keep the language and theme (light or dark) you chose and, until the end of the visit, the contact source described above. Google's bot check (reCAPTCHA) may use its own cookies to tell people from bots.

8. Who we share it with

We do not sell or rent personal data, and we do not use your data for targeted advertising. It is processed on our behalf by providers the website needs to run:

• Amazon Web Services (AWS): website hosting, emailing the forms to the team, the contacts database and résumé storage.
• Google: bot check (reCAPTCHA).
• Cloudflare: cookieless visit statistics (Web Analytics).
• Microsoft: the Dexpert team's mailbox.

9. Other cases of sharing

We may also share data to comply with a legal obligation or an order from a competent authority, to exercise rights in judicial, administrative or arbitration proceedings, and in a corporate reorganization such as a merger or acquisition, in which case the successor company remains bound by this policy.

10. International transfer

These providers may process data outside Brazil, including in the United States. The transfer follows the safeguards of art. 33 of the LGPD, such as data protection contractual clauses.

11. How long we keep it

We keep data while it is needed for the purposes above and for up to 2 years after the last contact, unless the law requires a longer period, there is an ongoing business relationship or the data is needed to exercise rights in judicial, administrative or arbitration proceedings. After that, the data is deleted or anonymized.

12. Your rights

You may, at any time and free of charge, ask for:

• confirmation that we process your data and access to it;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary data or data processed in breach of the LGPD;
• data portability;
• deletion of data processed based on your consent and withdrawal of that consent;
• information about who we share your data with;
• information about the option of not giving consent and its consequences;
• review of decisions made solely by automated processing.

13. How to exercise your rights

Send your request to contato@dexpert.com.br. We may ask for information to confirm your identity and will answer within 15 days. You may also file a complaint with Brazil's National Data Protection Authority (ANPD).

14. Security

We use encrypted connections (HTTPS), a bot check, encrypted storage and access restricted, with authentication, to the authorized team. No system is fully immune to incidents; if an incident may cause relevant risk or harm, we will notify you and the ANPD, as the law requires.

15. Children and teenagers

The site is meant for companies and professionals. We do not knowingly collect data from anyone under 18.

16. External links

The site links to other services, such as Instagram. They have their own privacy policies, which we recommend reading.

17. Changes to this policy

We may update this policy. The date of the last update is at the top of the page.

18. Governing law and venue

This policy is governed by Brazilian law. The courts of Americana, SP, Brazil, are chosen to settle any matter related to it, without prejudice to consumer rights provided by law.