Privacy Policy

1. Who we are

This policy applies to the website thesail.com.br, operated by SAIL, a design and development studio based in Maringá, Paraná, Brazil.

Data controller: SAIL (Kaique Moreira)
Contact: contato@thesail.com.br

2. What data we collect

We only collect data strictly necessary to respond to your contact and improve the site experience.

Data you provide directly

When filling out the briefing form, we collect:

• Name — to personalize communication
• Email and/or WhatsApp — to reply with a proposal
• Message/briefing — to understand your project
• Origin channel (referral, partnership, etc) — for commercial context

Data collected automatically

With your consent (accepted via the cookie banner), we collect anonymized browsing data via Google Analytics 4 and Google Tag Manager:

• Pages visited, session duration, traffic source
• Device type, browser and operating system
• Button clicks and video engagement
• UTM parameters (when present in the URL)

If you decline optional cookies, only essential cookies are used (no data is sent to Google).

3. Legal basis and purpose

Under Art. 7 of Brazil's LGPD (Law 13.709/2018) and equivalent GDPR provisions, we process your data on the following legal grounds:

• Pre-contractual measures — to respond to inquiries and prepare commercial proposals
• Consent — for analytics cookies and site improvements
• Legitimate interest — for site security and fraud prevention

4. Who we share data with

We do not sell your data. We only share with service providers strictly necessary for site operation:

• Vercel (hosting) — server infrastructure
• Supabase (database) — secure storage of received briefings
• Google Analytics + GTM (analytics) — only with your consent
• Resend (transactional email) — briefing confirmation email

All operate in compliance with LGPD/GDPR and have data processing agreements in place.

5. How long we retain

• Received briefings: 24 months after last contact — for project reference and future contact
• Analytics cookies: up to 14 months (GA4 default)
• Consent cookie (LGPD): 12 months

6. Your rights (Art. 18 LGPD / GDPR)

You have the right at any time to:

• Confirm whether we process your data
• Access the data we hold about you
• Correct incomplete or outdated data
• Request anonymization, blocking or deletion of unnecessary data
• Portability to another service
• Withdraw consent at any time
• Delete your data (right to be forgotten)

7. How to withdraw cookie consent

You can change your cookie preferences at any time by clicking "Cookie preferences" at the footer of any page. This reopens the banner and lets you choose again.

Alternatively, clear your browser cookies — the banner will reappear on your next visit.

8. Security

We adopt technical and organizational measures to protect your data: HTTPS/TLS on all connections, encrypted database, restricted access via strong authentication, and continuous security monitoring.

9. Changes to this policy

We may update this policy to reflect changes in our services or legal requirements. The date at the top indicates the last revision. Material changes will be communicated by email or site notice.

10. Regulatory Authority

If you believe your rights have been violated, you may file a complaint with the ANPD — Brazilian Data Protection Authority: gov.br/anpd.