Privacy policy

Last updated:

This Privacy policy explains how Lucas Genesses Dias Bittencourt (trade name Lucas Bittencourt), a sole proprietorship registered in Brazil under CNPJ 42.564.890/0001-04, processes personal data on the website lucasbittencourt.dev, in the professional services and in the digital products, under the Brazilian General Data Protection Law (Law No. 13,709/2018, "LGPD").

This is a translation. In case of any difference, the Portuguese version prevails.

1. Controller and data protection officer

The data controller is Lucas Genesses Dias Bittencourt (CNPJ 42.564.890/0001-04), who also acts as the data protection officer. Contact:

2. Data we process

Browsing the website

  • Usage and performance metrics: the website uses Vercel Web Analytics and Vercel Speed Insights, which record, in aggregate, the pages visited, the referring website, the country, the device and browser type and performance metrics. These tools don't use cookies and don't identify you individually.
  • Access logs: the hosting provider records technical data about requests, such as IP address, date and time, page accessed and browser, for the website's security and operation.
  • Theme preference: your choice between the light and dark theme is stored only in your browser (local storage) and isn't sent to the website.

Contact

When you get in touch by email or WhatsApp, we process the data you send, such as your name, email, phone number and the content of the message.

Purchases of digital products

Payments are processed by AbacatePay, which collects the data needed for the charge, such as name, email, phone number and CPF or CNPJ (Brazilian tax IDs). We receive the information needed to identify the purchase, grant access to the product, provide support and meet tax obligations. We don't store card or bank account data.

Use of products and services

  • Digital products: the content you send to a product for processing (for example, a text to summarize in the AI Summarizer) is used only to perform the requested feature and may be processed by artificial intelligence model providers hired for that purpose.
  • Professional services: we process the data needed for the proposal, the contract and the performance of the service. Third-party data we access in the client's systems is processed only according to the client's instructions and the contract.

MCP server

Requests to the website's MCP server (/api/mcp) only generate the same technical access logs described above.

The legal bases are those of article 7 of the LGPD:

  • Operation, security and improvement of the website: legitimate interest.
  • Replying to contacts and quote requests: preliminary procedures for a contract and legitimate interest.
  • Processing purchases, granting access and providing support: performance of a contract.
  • Issuing tax documents and keeping records: compliance with a legal obligation.
  • Providing professional services: performance of a contract.

4. Cookies

The website doesn't use cookies for tracking, advertising or third parties to identify visitors.

5. Sharing

We don't sell personal data. Data is shared only with service providers needed for the purposes above:

  • Vercel: website hosting and usage metrics.
  • AbacatePay: payment processing.
  • Google (Gmail) and WhatsApp: email and message communication.
  • AI model providers: performing the digital products' features.
  • Public authorities: when required by law or court order.

6. International transfer

Some of these providers, such as Vercel and AI providers, store or process data outside Brazil, mainly in the United States. These transfers follow article 33 of the LGPD, with providers that adopt security and data protection measures.

7. How long we keep data

  • Access logs: for the 6 months required by article 15 of the Brazilian Internet Civil Framework (Marco Civil da Internet).
  • Purchase data and tax documents: for the periods required by tax law.
  • Contact messages and service data: while needed for the conversation or the contract, and then for the period needed to exercise rights.

After that, the data is deleted or anonymized.

8. Your rights

Under article 18 of the LGPD, you may request:

  • confirmation that we process your data, and access to it;
  • correction of incomplete, inaccurate or outdated data;
  • anonymization, blocking or deletion of unnecessary data or data processed in breach of the law;
  • data portability;
  • information about who the data is shared with;
  • withdrawal of consent, when the processing is based on it;
  • objection to processing based on legitimate interest.

To exercise your rights, contact us at the email above. You may also file a complaint with the Brazilian Data Protection Authority (ANPD).

9. Security

We adopt technical and organizational measures to protect data, such as encrypted connections (HTTPS) across the website and restricted access to information. No system is completely immune to incidents; if a relevant incident occurs, the affected data subjects and the ANPD will be notified, as required by law.

10. Children and teenagers

The website, services and products aren't intended for people under 18, and we don't knowingly collect data from children or teenagers.

11. Changes

This policy may be updated. The date of the last update is shown at the top of the page. See also the Terms of use.