Privacy Policy.

1. Who we are

MD SOLUTIONS LTDA, CNPJ (Brazilian company tax ID) 49.717.667/0001-07, registered at Av. São Miguel dos Caribes, 4470 — Neópolis, Natal/RN, postcode 59.088-500, Brazil.

For anything related to personal data, the contact channel is manoeldias@mdsolutions.net.br.

2. What data we collect

From the contact form: name, company name, industry, team size, a description of the problem, WhatsApp number and email address.

From the free website request: company name, city, a description of what the company does, WhatsApp number and, if you choose to give it, your name. Photos and text you send afterwards on WhatsApp are used only to build your website.

For the free website, if you choose to share it in advance: the company's Instagram or Facebook, websites you use as a reference and how you picture your site. After payment, to publish it: the logo, photos, texts and contact details that will appear on the site and, if you purchase domain registration, the holder's name, CPF or CNPJ (Brazilian tax ID) and email, which Registro.br requires.

Payment for the free website and for the ebook Dominando o Claude is processed by Stripe: card or boleto details are entered on Stripe's page and never pass through our site. From Stripe we only receive the name, email, phone number and company name provided at checkout. For the ebook, the email is used to send the download link.

From scheduling: the data you provide when booking the meeting, including name, email and your answers to the qualifying questions.

From browsing: IP address, browser type, pages visited, campaign parameters (utm_source, utm_medium, utm_campaign, utm_content), the Meta ad click identifier (fbclid) and the referring page. On the free website and scheduling pages, with your analytics consent, also how you use the page: scrolling, taps and clicks (section 9).

We do not collect sensitive data and we do not ask for banking or health information through this site. The only document we ask for is the domain holder's CPF or CNPJ, when you purchase domain registration with the free website.

3. Why we collect it and on what legal basis

Name, contact details and company information: to respond to your enquiry and qualify the conversation. Legal basis: your consent, given by ticking the box on the form.

Free website request data: to build the preview of your website and talk to you on WhatsApp. Legal basis: your consent, given by ticking the box on the request or by continuing the request conversation.

Data to publish the website and payment data: to perform the free website contract, which includes publishing the site, registering the domain and billing the plan. Legal basis: performance of a contract.

Scheduling data: to hold the meeting. Legal basis: consent.

Measurement of our ads on Meta (Instagram and Facebook): when you submit the free website request, answer the booking questions, book the meeting, tap the buy button of the Dominando o Claude guide or complete its purchase, our server tells Meta that this happened. Along with it go your name, phone number and email in hashed form (Meta receives only the code that results from hashing, not the text itself; for the guide purchase, the ones you gave at checkout, and for the tap on the buy button, none of them), the ad click identifier (fbclid, which for the guide purchase passes through Stripe with the payment), the identifier the Meta Pixel stores in your browser when you accept marketing cookies, your IP address, your browser, the page of the request and, for the guide purchase, the amount paid. This happens regardless of the cookie banner and serves only to let Meta know which ads generate requests and sales. Legal basis: steps prior to the contract you requested and performance of the purchase contract (Article 7, V, of the LGPD; Article 6(1)(b) of the GDPR) and our legitimate interest in measuring our own advertising (Article 7, IX, of the LGPD; Article 6(1)(f) of the GDPR). You may object to this transmission at any time, before or after the request or purchase, by writing to manoeldias@mdsolutions.net.br; your request or purchase stands regardless.

IP address, browser and pages visited: to measure use of the site. Legal basis: consent, collected through the cookie banner. Without your acceptance, these tools do not load.

Campaign parameters and referring page: to know which route brought you here. Legal basis: legitimate interest in understanding how well our own communication works — low-impact processing that does not identify you on its own.

4. Who we share it with

We use providers that process data on our behalf, each for a specific purpose: Vercel (website hosting), Supabase (contacts database and free website files), Resend (email delivery), Stripe (payments for the free website and the Dominando o Claude guide), Cal.com (scheduling), Cloudflare (protecting the form against automated submissions), Google Analytics (usage measurement, only with your acceptance), Microsoft Clarity (recording of how the free website and scheduling pages are used, only with your acceptance), Google Ads (measurement of our ads, only with your acceptance) and Meta (measurement of our Instagram and Facebook ads: through the Pixel, only with your acceptance, and through our server when you submit a request or buy the guide, with your data in hashed form — section 3).

No data is sold, rented or transferred for third-party advertising purposes.

5. International data transfers

Some of these providers process and store data outside Brazil and outside the European Union, mainly in the United States and in Europe.

For data subjects in the European Union: the transfer relies on the standard contractual clauses adopted by those providers, under Article 46 of the GDPR. For data subjects in Brazil, the transfer relies on your consent and on the contractual safeguards agreed with each provider, under Article 33 of the LGPD.

6. How long we keep it

Business contact data is kept for 24 months from the last interaction. After that period with no contact, the data is deleted or anonymized.

If you ask for deletion before then, we act within the timeframe stated in the next section.

7. Your rights

You may request, at any time: confirmation that we process your data, access to that data, correction of incomplete or outdated data, anonymization or erasure, portability, information about who we share it with, and withdrawal of consent.

Data subjects in the European Union additionally have the right to restriction of processing, the right to object, and the right to lodge a complaint with the supervisory authority in their country.

To exercise any of these, write to manoeldias@mdsolutions.net.br. We respond within 15 days — the shorter of the two regimes, applied to everyone.

Withdrawing consent does not make unlawful the processing carried out before the withdrawal.

8. Security

The entire site runs over HTTPS. Access to the database is restricted and happens only from the server, never from the browser. Access keys are kept out of the source code and out of the repository.

No system is immune to incidents. Should a breach occur that may create a relevant risk, we notify the affected data subjects and the competent authority within the deadlines set by the applicable law.

9. Cookies

Necessary cookies keep the site working, storing your language choice and your decision about this very banner. They do not depend on consent because the site does not work without them.

Analytics cookies measure how pages are used. On the free website and scheduling pages, they include Microsoft Clarity, which records how the page is used — scrolling, taps, clicks and where people stop — so we can find what gets in the way of a request. What you type into the fields and your answers shown on screen are left out of the recording. They are only stored after you accept, and you can decline without losing any functionality.

Marketing cookies (Google Ads and the Meta Pixel) measure whether someone who arrived through one of our ads — on Google, Instagram or Facebook — got in touch via WhatsApp or the form, or booked the assessment. The Meta Pixel only loads on the pages our ads link to (the booking page, the free website page and the Dominando o Claude guide page), where it also records whether the person reached the form and started filling it in, or tapped the buy button of the guide. Meta also processes this data under its own privacy policy. They are only stored after you accept, and we do not use them to build remarketing audiences. Declining cookies does not stop the request notice our server sends to Meta, described in section 3 — that notice uses no cookie, and you can object to it through the email given there.

You can change your choice at any time through the link in the footer, and delete cookies already stored through your browser settings.

10. Data protection officer

The data protection officer (DPO) is Manoel Dias, partner at MD Solutions, who can be reached at manoeldias@mdsolutions.net.br.

11. Changes to this policy

We may update this policy. When we do, the last-updated date at the top of the page changes. Material changes are announced through a notice on the site.