Privacy Policy

1. Who is responsible

The data controller is Estúdio Reven (trade name of 48.955.522 Davi Jackson Silvestre de Sousa), Brazilian company registration CNPJ 48.955.522/0001-73, based in João Pessoa (PB), Brazil. For any privacy matter, write to contato@estudioreven.com.

2. What data we collect

Contact form: your name, email, brand name, how you found us, industry, how long the brand has existed, and the message you write. Share only what you want to, and avoid including sensitive data (health, religion, politics, etc.).

Technical access data: like any website, our hosting automatically records the IP address, browser type, pages requested and date and time, to keep the site running and secure.

Storage in your browser: we only save your theme preference (light or dark).

We do not use advertising, audience analytics or tracking cookies.

3. Why we use the data and our legal basis

To reply to you and handle the conversation and proposal you asked for (LGPD, art. 7, V; GDPR, art. 6(1)(b)).

To keep the site secure and prevent abuse and spam (LGPD, art. 7, IX; GDPR, art. 6(1)(f), legitimate interest).

To remember the theme you chose, which is needed for a feature you triggered yourself.

To meet legal, tax and accounting obligations when a project is contracted (LGPD, art. 7, II).

4. Who we share it with

We use service providers (processors) that handle data on our behalf: Vercel (site hosting and delivery), Resend (sending the contact form message to our inbox), Sanity (managing the site content, with no access to form data), Bunny.net (video delivery, which receives the IP address of viewers) and Cloudflare (Turnstile anti-spam check, when enabled). We also use the studio's email provider to receive messages.

We do not sell personal data and do not share it for advertising.

5. International transfers

Some of these providers are outside Brazil, in the United States and the European Union. Transfers use the safeguards provided by law (LGPD, art. 33), such as standard contractual clauses and the providers' own data processing agreements.

6. Cookies and local storage

This site does not use cookies. Your browser stores a "theme" key (light or dark) until you clear the site's data. Because it is a preference needed for a feature you chose and does not track you, we do not show a cookie banner. Embedded third-party videos may record technical access data when played.

7. How long we keep it

Contact messages that do not become a project: up to 12 months, then deleted.

When there is a contract: for the duration of the relationship and for the periods required by applicable law.

Technical access logs: for the short period set by the hosting provider.

8. Your rights

You can ask for: confirmation that we process your data, access, correction, anonymization, blocking or deletion, portability, information about who we share it with, and to withdraw consent or object to processing where applicable (LGPD, art. 18). For visitors in Europe, there is also the right to restrict processing.

To exercise any right, write to contato@estudioreven.com. We reply within 15 days.

You may also complain to Brazil's National Data Protection Authority (ANPD, gov.br/anpd) or to the data protection authority in your country.

9. Security

We use a secure connection (HTTPS), access controls and other technical measures to protect data. If a security incident that may cause relevant risk occurs, we will notify the ANPD and affected people as required by law.

10. Children

This site is not directed at people under 18 and we do not knowingly collect data from children.

11. California (CCPA/CPRA)

We do not sell or share personal information for behavioral advertising.

12. Changes

We may update this policy. The date of the last update is at the top of this page.