Privacy Policy

The controller of personal data processed through this website is Webeworx Tecnologia Ltda, operating under the trade name WebeWorx, registered under CNPJ 62.851.831/ 0001 -24, with registered office at Avenida Pref Osmar Cunha, 416. WebeWorx is headquartered in Florianópolis, Santa Catarina, Brazil.

Privacy requests may be sent to privacy @webeworx.com.

WebeWorx's founder acts as interim Data Protection Officer until a formal appointment is made. The identity and contact information of the Encarregado, as required by LGPD Art. 41, §1º and ANPD Resolution CD/ANPD No. 18 (July 2024), are: M. Alka., dpo @webeworx.com.

We collect only what you submit or what is required to run a booked session:

• Identification data: name, when you choose to provide it on the contact form.
• Contact data: email address (required to reply).
• Message content: the question or notes you type into the form.
• Booking data: name, email, and scheduling details collected by Cal.com when you book the paid audit, together with payment status processed by Stripe inside that booking flow.
• Technical data strictly necessary to operate the form: IP address used for rate limiting, and Origin/Referer for same-site checks. These are not used for advertising.

We do not ask for government ID numbers, payment card numbers, or health data on this website. Card details, if any, are entered inside Cal.com/Stripe and are not stored by WebeWorx.

Each processing activity has a stated purpose and a legal basis under LGPD Art. 7:

• Contact form — purpose: to read and answer your inquiry. Legal basis: consent (Art. 7, I) when you submit the form, and legitimate interest (Art. 7, IX) in operating a written inquiry channel that is not a sales call.
• Paid audit booking — purpose: to schedule, confirm, charge the audit fee, and deliver the session, written blueprint, and cost proposal. Legal basis: performance of a contract or preliminary procedures (Art. 7, V).
• Security of the contact route — purpose: to reject automated abuse. Legal basis: legitimate interest (Art. 7, IX) in keeping the mail path usable.
• Legal compliance — purpose: to respond to data-subject requests and to keep records required by law. Legal basis: compliance with a legal obligation (Art. 7, II).

WebeWorx does not sell personal information and does not share it for cross-context behavioral advertising. We disclose data only to processors needed to run the site and the audit:

• Cal.com — scheduling the paid audit.
• Stripe — processing the audit fee inside the Cal.com booking flow.
• Resend — delivering the email that carries a contact-form message to WebeWorx.
• Railway — hosting this website and the contact API.

Those processors may store data in the United States. See International transfers below.

Under LGPD Art. 18 you may request: confirmation that we process your data; access; correction of incomplete, inaccurate, or outdated data; anonymization, blocking, or deletion of unnecessary or excessive data; portability; deletion of data processed on consent; information about public and private entities with which we shared data; information about the possibility of withholding consent and the consequences; and withdrawal of consent.

Send requests to privacy @webeworx.com. We will respond within the timeframes required by Brazilian law. You may also contact the Encarregado at dpo @webeworx.com.

WebeWorx applies technical and organizational measures appropriate to the nature of the data processed on this site, including access controls, encryption where applicable, origin checks on the public contact route, and rate limiting. No measure guarantees absolute security.

Contact-form submissions are retained for 12 months after the last interaction on that thread, then deleted or anonymized, unless a longer period is required to establish, exercise, or defend a legal claim (LGPD Arts. 15–16).

Booking and payment records follow Cal.com and Stripe retention for the contract and tax records they support. After an implementation engagement is handed off, WebeWorx does not retain access to the client's GitHub repository or Railway environment, except any temporary read-only window agreed in writing in the implementation proposal and then removed.

Personal data submitted on this site may be processed in the United States by Railway, Resend, Cal.com, and Stripe. Transfers from Brazil follow LGPD Arts. 33–36. WebeWorx relies on standard contractual clauses or equivalent contractual safeguards offered by those processors, together with the technical and organizational measures described above.

Visitors in the European Economic Area and the United Kingdom have rights under the GDPR, including access, rectification, erasure, restriction, objection, portability, and the right to lodge a complaint with a supervisory authority in their country of residence.

California residents have the right to know, delete, and opt out of the sale or sharing of personal information. WebeWorx does not sell or share personal information as those terms are used in the CCPA/CPRA. We do not use or disclose sensitive personal information for purposes that require a right to limit.

This website does not set analytics or advertising cookies and does not load a third-party tracking pixel. Theme preference is stored in the browser's localStorage under the key webeworx-theme. It is not used to identify you across sites.

Cal.com may set cookies inside its booking iframe for session and payment. Those cookies are governed by Cal.com's and Stripe's own policies.

The effective date is at the top of this page. Material changes will be posted here. Continued use of the site after a posted change means you have had the opportunity to read the updated text.

Privacy contact: privacy @webeworx.com. Encarregado (DPO): M. Alka., dpo @webeworx.com. Registered address: Avenida Pref Osmar Cunha, 416.

This policy is governed by Brazilian law, specifically the Lei Geral de Proteção de Dados (Lei 13.709/2018), without prejudice to rights you have under the GDPR, the UK GDPR, or the CCPA/CPRA where those laws apply to you.