Privacy policy.

Apex Dev Studio is a web development, SEO and GEO studio based in Brazil. We are the controller of the personal data processed through this site under the Brazilian General Data Protection Law (Law No. 13,709/2018, LGPD) and, for visitors from the European Union and the United Kingdom, the General Data Protection Regulation (GDPR and UK GDPR).

For anything about your data, contact us at apexdevstudiobr@gmail.com.

We only collect what we need to reply to you and keep the site running securely:

• Contact form: name, email, company (optional), services of interest, message, page language, and the date and time you agreed to be contacted.
• Technical data: when you visit the site, our hosting provider processes your IP address, browser type and request data to deliver the pages and protect the site against attacks.
• Spam check: Cloudflare Turnstile analyses browser signals to confirm that a person, not a bot, sent the form.

This site does not use advertising cookies, audience analytics tools or cross-site tracking. If this changes, we will update this policy and ask for your consent where the law requires it.

We do not sell or rent your data, and we do not use it to send you marketing without your permission.

• To reply to your message and discuss your project.
• To prepare and send proposals you have asked for.
• To protect the site and the form against spam, fraud and abuse.

• Consent (LGPD art. 7, I; GDPR art. 6(1)(a)): by ticking the box on the form, you agree to be contacted about your request.
• Steps prior to a contract, at your request (LGPD art. 7, V; GDPR art. 6(1)(b)): to prepare a proposal.
• Legitimate interests (LGPD art. 7, IX; GDPR art. 6(1)(f)): to keep the site secure and prevent abuse.

We use providers that process data only on our behalf and under our instructions:

• Cloudflare: website hosting, the database where messages are stored, and spam checks.
• Resend: sending the internal email that tells our team about a new message.

These providers may process data on servers outside Brazil and the European Economic Area, including in the United States. These transfers rely on contractual clauses and safeguards under article 33 of the LGPD and chapter V of the GDPR.

We keep form messages while we are in conversation or doing business with you, and for up to 24 months after our last contact. After that, the data is deleted unless the law requires us to keep it longer. Technical access data is kept by our hosting provider for short periods, for security only.

At any time and free of charge, you can:

• Confirm whether we process your data and access it.
• Correct incomplete, inaccurate or outdated data.
• Ask for your data to be anonymised, restricted or erased.
• Ask for your data to be transferred to another provider.
• Find out who we share your data with.
• Withdraw your consent and object to processing based on legitimate interests.
• Complain to Brazil's National Data Protection Authority (ANPD) or, in Europe and the UK, to your local data protection authority (in the UK, the ICO).

Send your request to apexdevstudiobr@gmail.com, including the email address you used to contact us. We may ask you to confirm your identity to protect your data. We reply within 15 days.

The site uses an encrypted connection (HTTPS), access to messages is restricted to the Apex team, and the form is protected against automated submissions. No system is completely immune to failure; if an incident may affect you, we will notify you as the law requires.

The site and our services are aimed at businesses and professionals. We do not knowingly collect data from anyone under 18.

We may update this policy when the site or the law changes. The date of the latest update is always shown at the top of this page.