Website Privacy Notice

This Notice is for anyone who visits ingestia.io without being a Platform user: someone reading the pages, requesting a demonstration, using the simulator or filling in a contact form.

It is separate because the Privacy Policy describes processing inside the Platform — environments, data sources, queries, dashboards — and someone who is just looking around has none of that. The Privacy Policy still applies to anything not covered here; for the use of cookies, the specific document is the Cookie Policy.

Here, UDISOFTBOX CONSULTORIA E TECNOLOGIA LTDA ("INGESTIA", company registration 40.737.902/0001-20) acts as controller: the decisions about this processing are ours.

1. What you give us on purpose

When you fill in a contact, demonstration, simulation or sign-up form:

We do not ask for a national ID number, identity document, financial data or anything of a sensitive nature (art. 5, II of the LGPD) in any form on the website. If you write one of those into the free-text message field, it will be handled as part of your enquiry — so we ask that you do not write it.

When you use the simulator, we keep the answers you chose (number of sources, tools in use, desired frequency, governance needs) and the calculated result, including the suggested plan and the estimated cost range.

Purpose: to reply to you, prepare the commercial conversation and follow up on the enquiry. Legal basis: performance of a contract or preliminary procedures at the data subject's request (art. 7, V) and legitimate interest in prospecting (art. 7, IX). Where the form carries a communications opt-in box, the basis is consent (art. 7, I).

2. What is collected automatically — and only with your consent

Nothing in this section happens before you decide in the cookie banner. With no recorded decision, it counts as no.

With analytics consent:

• an anonymous identifier and a session identifier, stored in our own cookies (ig_aid, ig_sid), which carry no name, e-mail or phone number;
• the journey across pages: which pages, in what order, active reading time (only while the tab is visible), scroll depth, number of clicks and which page ended the visit;
• funnel events (page viewed, form opened, simulation completed);
• audience measurement through a third-party tool and session recording with heatmaps — replay of mouse movement, clicks and scrolling on the public pages. It is the most invasive item on this list and it is named for what it does.

With advertising consent:

• the source of the visit: campaign, creative, ad and the ad platforms' click identifiers (gclid, fbclid, msclkid), stored in our own cookie (ig_attr) for one year;
• conversion measurement with the advertising platforms, including sending from our server your e-mail turned into a hash — never in readable form — in order to measure the campaign. Without advertising consent none of this is sent, and neither are your IP address or your browser.

Your IP address is used at request time to limit abuse and automated repetition of forms. It is not stored in the journey or funnel records.

Your decision in the banner is recorded on our side — date and time, what you chose, the version of the Cookie Policy in force, the page where you decided and the anonymous identifier where one exists. It is the proof of consent the law places on us (art. 8, §1), and it does not include your IP address or your browser. A refusal is recorded in the same way, and in that case with no identifier at all.

Withdrawal deletes: withdrawing analytics removes ig_aid and ig_sid; withdrawing advertising removes ig_attr. The details and the full list are in the Cookie Policy.

3. Who we share with

• Vendors that operate the website and the enquiry handling — hosting, database, e-mail and WhatsApp delivery, measurement and advertising. The role, purpose, data and country of each are set out in the Subprocessor List, which is public.
• Advertising platforms, only with advertising consent and within the limits of section 2.
• Authorities, where there is a legal obligation or a competent order.

We do not sell personal data and we do not hand it over for third parties to use for their own purposes.

Some of those vendors process data in the United States, under the hypotheses of art. 33 of the LGPD — performance of a contract as regards infrastructure, and consent as regards audience measurement, session recording and advertising. The Subprocessor List states each vendor's country.

4. How long we keep it

The deadlines are enforced by a daily automatic routine, not by case-by-case decision. The full table is in the Data Retention Policy.

5. Automated decisions

The simulator calculates a suggested plan and a cost range from your answers. It is a suggestion, not a decision: nothing is contracted, refused or priced automatically from it, and any proposal passes through a person on our team before it reaches you.

Even so, you may request review and explanation of the criteria used (art. 20 of the LGPD) through the channel in section 7.

6. Your rights

At any time and free of charge, you may request: confirmation that we process data about you; access; correction; anonymisation, blocking or erasure; portability; information about sharing; and withdrawal of consent.

To make a request, write to the Data Protection Officer (section 7) from the e-mail or WhatsApp number you used in the form — we need one of them to locate the record, and we will not ask for an identity document without need. We reply within the LGPD's deadline.

If your decision is simply "stop contacting me", just say so: we close the enquiry and record the refusal so that it does not start again.

7. Contact

Data Protection Officer: Encarregado de Dados (DPO) — encarregado@ingestia.io Privacy channel: privacidade@ingestia.io Security: seguranca@ingestia.io

You may also complain to the Brazilian National Data Protection Authority (ANPD).

8. Age

The website and the Platform are not intended for people under 18, and we do not knowingly collect data from children or adolescents. Where such processing is identified, it is deleted.

9. Changes to this Notice

A material change is published here with a new update date and recorded in the Version History. Where the change affects the legal basis or purpose of something that depends on your consent, we will ask for the decision again.