Privacy Policy

Last updated: November 8, 2026

This policy explains what personal data DI INOVA WEB collects through diinovaweb.com, why we collect it, who we share it with and what rights you have. We keep it short and plain on purpose.

Who we are

DI INOVA WEB ("we", "us") is a web design and software development business based in Brazil that works fully remote. The legal entity is 50.118.287 DANIEL JONATAS DE SOUZA (Brazilian CNPJ 50.118.287/0001-27), trading as DI INOVA WEB, in Ribeirão das Neves, Minas Gerais, Brazil. We are the controller of the personal data described here.

Our data protection officer (in Brazil, the "encarregado") is Daniel Jonatas de Souza. For any privacy question or request, write to hello@diinovaweb.com.

What we collect

We only collect what you choose to send us or what is needed to run the website securely.

• Contact form: your name, email, optional phone or WhatsApp, the subject and your message.
• Service request (sign-up) form: company name and address, country, optional business tax ID, the name, job title, work email and optional phone of the contact person, the services you are interested in, optional notes and how you heard about us.
• Client account: your email address and a password (stored only in protected, hashed form) and the activity needed to keep the account secure.
• Security data: your IP address and basic request information, used to prevent spam and abuse (including a Cloudflare Turnstile check on our forms).
• Website statistics: we use Umami, a privacy-friendly analytics service that does not use cookies and does not follow you across websites. It records pages visited, referring website, browser, operating system, device type and approximate country. It is not used on login, sign-up or account pages.

Is providing data required?

Fields marked as required in our forms are needed to answer you or to process your request; without them we cannot do it. Everything else is optional. We do not make decisions about you based solely on automated processing.

How we use your data

• To reply to your message and to evaluate and prepare a proposal for your project.
• To provide the services you hire, to create and manage your client account and to communicate about your project, invoices and support.
• To issue invoices, receive payments and keep the accounting and tax records the law requires.
• To protect the website and our clients against spam, fraud and abuse.
• To understand, in aggregate, how the website is used and improve it.

Legal bases

Where the GDPR, the UK GDPR or Brazil's LGPD apply, we process personal data because you asked us to (contract or steps before a contract), because we have a legitimate interest in running and securing a business website, because the law requires it (for example tax records) or, when we say so, because you consented. You can withdraw consent at any time.

Who we share data with

We do not sell personal information and we do not share it for advertising. We use trusted providers that process data on our behalf, only for the purposes above:

• Supabase: database and sign-in (our database is hosted in São Paulo, Brazil).
• Vercel: website hosting.
• Cloudflare: DNS and the Turnstile anti-spam check.
• Resend and Zoho Mail: sending and receiving email.
• Umami Cloud: website statistics.
• Payment providers such as Stripe, Wise or PayPal, only if you pay us through them (they have their own privacy policies).
• Accountants, legal advisers or authorities, when the law requires or to defend our rights.

International transfers

We are in Brazil and our database is in Brazil. Some providers above may process data in other countries, including the United States. When we transfer data we rely on the safeguards available to us, such as provider commitments to protect personal data. Where available we also use standard contractual clauses or similar safeguards.

How long we keep it

We keep personal data only as long as needed for the purposes above and then delete or anonymize it. Contact messages that do not lead to a project are deleted after a reasonable period. Invoices and tax records are kept for the period required by law.

Security

We use technical and organizational measures such as encrypted connections (HTTPS), access controls, protected storage of passwords and restricted access to personal data. No system is perfectly secure, but we work to protect your information and will notify you and the authorities when the law requires.

Cookies

We do not use advertising or tracking cookies. Our client login uses only the storage that is strictly necessary to keep you signed in, and the anti-spam check may set technical cookies needed for it to work.

Your rights

Depending on where you live (for example the EU, the UK, California or Brazil), you may have the right to access your data, correct it, delete it, receive a copy, object to or limit some uses, withdraw consent and not be discriminated against for exercising these rights. To use any of them, email hello@diinovaweb.com. We may need to confirm your identity, and we will reply within the time the law requires.

If you are in the EU or the UK, you also have the right to withdraw consent at any time and to lodge a complaint with your local supervisory authority. If you are a California resident, you can ask what personal information we collected about you (identifiers such as name and email, commercial information about the services you request, and internet activity such as pages visited), ask us to delete or correct it, and we will not discriminate against you for doing so. We do not sell personal information and do not share it for cross-context behavioral advertising.

If you are not satisfied with our answer, you can contact your local data protection authority (in Brazil, the ANPD).

Children

Our website and services are for businesses and are not directed to children. We do not knowingly collect personal data from anyone under 16.

Changes to this policy

We may update this policy. The date at the top shows the latest version. For material changes we will make a clear notice on the website.