Privacy Policy
Last updated: 21 September 2026
This policy explains what data Esdras Tech Solutions receives through the public site, through the solution briefings and, once an account is activated, through the Client Area — what it is used for and how to exercise your rights.
1. Who controls the data
The controller is Esdras Tech Solutions LTDA, company number (CNPJ) 49.439.881/0001-30, operating remotely from João Pessoa, Brazil. The data protection officer is Guilherme Esdras, and the privacy channel — including for exercising the rights described below — is contato@esdras.tech.
2. Data we receive
We receive what you send through the contact form, through the briefings on the solution pages, by email and on WhatsApp; technical information needed for site security and diagnostics; and, in the Client Area, your account identification and linked projects. No form on this site asks for banking details, identity documents or passwords — if a page asks for that in our name, do not fill it in and let us know.
3. How the solution briefings work
The briefing forms on the solution pages send nothing to our servers. Your answers stay in your browser and assemble a text message that opens in your own WhatsApp. You read it, edit it if you want, and decide whether to send. Only once you send it do we receive the content — and from then on it is handled like any other WhatsApp message.
4. What the data is used for
We use data to reply to your contact, prepare proposals, deliver contracted services, protect the site, investigate failures and comply with applicable obligations. We do not resell contacts, do not feed third-party lists and do not send automated campaigns without permission.
5. Material you send us
Some services require you to send material: family photos for restoration, portraits for the AI photo session, career history for a résumé, business data for automations. We use that material only to deliver the contracted service. We do not publish it as portfolio, example or social proof without your written permission, and you may request its deletion at any point after delivery.
6. Services that process data
Vercel provides hosting and cookieless audience measurement; Resend delivers form messages; Sentry records application errors; and Supabase holds authentication and Client Area data. When you choose to talk on WhatsApp, the conversation runs through Meta’s infrastructure and is subject to Meta’s privacy policy. Some providers may process data outside Brazil, under the transfer mechanisms set out in the Brazilian data protection law (LGPD).
7. Cookies and measurement
The public site uses no advertising or profiling cookies. Audience measurement is cookieless and does not identify you individually. Google Tag Manager, Microsoft Clarity and Meta Pixel remain disabled while there is no valid consent. The Client Area uses only essential session cookies. The full detail is in the Cookie Policy on this site.
8. Children and teenagers
This site is not intended for people under 18 and we do not knowingly collect data from children or teenagers. Services that generate images from photographs only accept material featuring a minor with the express, documented authorisation of their legal guardian, obtained before work begins.
9. Retention and security
We keep data for as long as needed to answer your contact, perform the contract and meet legal and tax obligations. We apply HTTPS, invite-based authentication, per-project isolation and periodic permission reviews. No system is infallible: if an incident with relevant risk occurs, we notify you and the Brazilian data protection authority as the law requires.
10. Your rights
Under the LGPD you may request confirmation of processing, access, correction, anonymisation, blocking, deletion, portability, information about sharing, and withdrawal of consent where applicable, at contato@esdras.tech. We respond within fifteen days. You may also petition the Brazilian data protection authority or consumer protection bodies.
11. Updates to this policy
This page is updated whenever actual practice changes. The date at the top identifies the current version, and relevant changes are communicated to anyone with an active contract.