Wyber Privacy Policy

Who is responsible for your data

The data controller is Wyber, the custom software company that runs this site. To talk about your data, use the channel listed under "Your rights".

Which data we collect

We only collect what we need to answer your message:

What you type in the form: name, email, company (optional), message and, if you want, how you found Wyber.
What the site records with your submission: the page language, the page you came from, the campaign parameters in the URL (utm_source, utm_medium and utm_campaign, when present), the date of your consent and the version of this policy in force at that moment.
A code derived from your IP address (hash): we do not store your IP address in readable form. We keep only an irreversible code, used to curb spam and abuse of the form.
Server access logs: the hosting server may record technical data about each visit (such as IP, date and page) for security.

We do not ask for a phone number, tax ID or job title in the first message. If you write to us by email or WhatsApp, we keep what you send so we can continue the conversation.

What we use it for

To answer your request and assess the proposal you asked for.
To keep a record of that conversation, so we do not ask for the same thing twice.
To protect the form against spam and abuse.

We do not use your data for advertising and we do not pass it on for that purpose. If we ever want to send news, we will ask for your consent separately, with a clear way to say no.

Why we may process this data (legal basis)

Consent (Brazilian LGPD, art. 7, I): for the form data. You tick a checkbox that starts unticked, and we record the date and the version of this policy. You can withdraw consent at any time.
Legitimate interest (LGPD, art. 7, IX): for the IP-derived code and for site security, only to curb spam and abuse.

Cookies

We only use one essential cookie: the session cookie, which holds the protection against forged forms (CSRF). The form needs it to work and it is not used to track you. We use no advertising or audience-analytics cookies, so there is no cookie banner.

We do not use an audience-analytics tool today. If we start, it will be one that sets no cookies, and we will describe it here first.

Who we share it with

We do not sell data. A few service providers process data on our behalf, only to keep the site running:

Hosting: stores the site, the database and the access logs.
Email delivery: delivers the form message to us and the confirmation to you.

We may also share data when the law or an authority requires it.

Data outside Brazil

Some of the providers above may process data on servers outside Brazil. When that happens, we look for protection equivalent to the LGPD (art. 33).

How long we keep it

We keep form data for up to 24 months after our last contact. After that, we delete or anonymize it. If you ask for deletion sooner, we delete it sooner, unless the law requires us to keep it.

Your rights

Under the LGPD (art. 18), you can ask at any time for:

confirmation that we process your data, and access to it;
correction of incomplete, wrong or outdated data;
anonymization, blocking or deletion of unnecessary data or data processed without a legal basis;
data portability, under the regulations;
information about who we share your data with;
withdrawal of consent and deletion of the data processed on that basis.

Use our contact form and say the subject is privacy. We answer within 15 days. Open the contact form

If you think we did not solve it well, you can also complain to the Brazilian data protection authority (ANPD).

Children and teenagers

This site is aimed at businesses and is not meant for anyone under 18.

Changes to this policy

When something changes in a relevant way, we update this page and the version shown at the top. Each message you send keeps the version that applied that day.