Privacy policy
Last updated: November 5, 2026
This policy explains how HarpyLabs handles the personal data collected on this website, in accordance with Brazil’s General Data Protection Law (Law No. 13,709/2018, LGPD).
Who is responsible for the data
The data controller is G F CYRINO DESENVOLVIMENTO DE SISTEMAS LTDA, trading as HarpyLabs Tecnologias Interativas, CNPJ 64.797.743/0001-17, headquartered at Av. João Naves de Ávila, 1331, Andar 6, Tibery, Uberlândia/MG, Brazil, postal code 38405-140.
For any matter related to personal data, write to contato@harpylabs.com.br.
What data we collect
- Contact form: name, email, company (optional), subject and message, as you provide them.
- Email and WhatsApp: the data you choose to send us when you use these channels.
- Usage metrics: aggregated data about visits, such as pages accessed, referrer, country, device type and page performance. These metrics do not use cookies and are not intended to identify you.
- Technical logs: the hosting service may log data such as IP address, date and time of access, to keep the website running and secure.
How we use the data
- Replying to you: we use the data from the form and other channels to reply to your message and follow up on your request. The legal bases are preliminary procedures related to a contract, when that is the purpose, and legitimate interest (LGPD, art. 7, items V and IX).
- Improving the website: we use aggregated metrics to understand how the website is used and to fix problems, based on legitimate interest (LGPD, art. 7, item IX).
- Complying with legal obligations: we may keep data when the law requires it (LGPD, art. 7, item II).
We do not sell personal data and we do not use form data for advertising.
Who we share data with
We share data only with suppliers needed to operate the website:
- Web3Forms: receives the form data and forwards it by email to HarpyLabs.
- Cloudflare (Cloudflare Web Analytics): generates the aggregated usage metrics.
- Hostinger: hosts the website and may log technical access data.
These suppliers may process data outside Brazil. We may also share data when required by law or by order of a competent authority.
How long we keep data
We keep the messages we receive for up to 24 months after the last contact. After that period, the data is deleted, unless there is a legal obligation, a contract in progress or a need to exercise legal rights.
Cookies
This website does not use its own cookies or advertising cookies.
Your rights
Under article 18 of the LGPD, you may request:
- confirmation that your data is being processed, and access to it;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary or excessive data, or of data processed in breach of the law;
- data portability, under the applicable regulations;
- information about the entities your data has been shared with;
- objection to processing that is in breach of the law.
To exercise these rights, write to contato@harpylabs.com.br. You may also file a complaint with Brazil’s National Data Protection Authority (ANPD).
Changes to this policy
We may update this policy to reflect changes to the website or to the law. The date of the last update appears at the top of this page.