Privacy Policy

1. Who we are

Razzo is the controller responsible for the processing of your personal data. For any privacy matter you can reach us at privacy@razzo.tech or by post at Atlanta, GA, United States.

If your request relates to data protection rights, please write to us at the same address so we can route it to the person responsible for privacy.

2. Personal data we collect

We only collect data that is necessary for the purposes described below:

• Contact data you provide: name, email address, phone number, company and the content of the messages you send us through forms, email or calls.
• Commercial data: information exchanged while scoping, quoting or delivering a project.
• Technical and usage data collected automatically: IP address, device and browser type, pages viewed, referring URLs and interaction data, generally through cookies and similar technologies.
• Preference data: settings you choose on the site, such as your preferred language, stored locally in your browser.

We do not intentionally collect sensitive personal data (such as data on health, ethnicity, religion or political opinions). Please do not send us such data unless strictly necessary and lawful.

3. How we collect your data

• Directly from you, when you fill in a form, email us, call us or book a meeting.
• Automatically, through cookies and similar technologies when you browse the site (see our Cookie Policy).
• From third parties, such as analytics providers, scheduling tools and referrals, where permitted by law.

4. Why we use your data and our legal bases

Under the GDPR and the LGPD we must have a legal basis for each processing purpose:

• Respond to your enquiries and provide our services — performance of a contract or steps taken at your request (GDPR Art. 6(1)(b); LGPD Art. 7, V).
• Manage the client relationship, invoicing and support — performance of a contract and compliance with legal obligations (GDPR Art. 6(1)(b)(c); LGPD Art. 7, II and V).
• Improve and secure our website and services, and analyse usage — our legitimate interests, balanced against your rights (GDPR Art. 6(1)(f); LGPD Art. 7, IX).
• Send you commercial communications you have opted into — your consent, which you may withdraw at any time (GDPR Art. 6(1)(a); LGPD Art. 7, I).
• Comply with legal and regulatory obligations — legal obligation (GDPR Art. 6(1)(c); LGPD Art. 7, II).

5. Cookies and similar technologies

We use cookies and local storage to operate the site, remember your preferences and understand how the site is used. You can control non-essential cookies through our consent tools and your browser settings. For details, see our Cookie Policy.

6. Sharing your data

We never sell your personal data. We share it only when necessary, with:

• Service providers (processors) that host our infrastructure, send email, schedule meetings or provide analytics, under contracts that require them to protect your data.
• Professional advisers, such as accountants and lawyers, where relevant.
• Public authorities, when required to comply with a legal obligation or to defend our rights.

7. International data transfers

Because we operate internationally, your data may be processed outside your country, including outside the European Economic Area or Brazil. When we transfer data, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, adequacy decisions or the equivalent mechanisms recognised by the ANPD.

8. How long we keep your data

We retain personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting or reporting obligations. Contact and commercial records are generally kept for the duration of our relationship and for the statutory period afterwards; after that they are deleted or anonymised.

9. How we protect your data

We apply technical and organisational measures appropriate to the risk, including access controls, encryption in transit and least-privilege practices, to protect your data against unauthorised access, loss or misuse.

10. Your rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you and obtain confirmation of processing.
• Rectify inaccurate or incomplete data.
• Request erasure of your data (right to be forgotten), where applicable.
• Restrict or object to certain processing, including direct marketing.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time, without affecting processing already carried out.
• Obtain information about the entities with which we have shared your data.
• Lodge a complaint with a supervisory authority (in the EU/EEA) or with the ANPD (in Brazil).

To exercise any of these rights, contact us at privacy@razzo.tech. We will respond within the timeframes required by law.

11. Children's privacy

Our website and services are directed to businesses and are not intended for children. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us so we can delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. The version in force is always the one published on this page, with its "Last updated" date. Material changes will be highlighted where appropriate.

13. Contact

If you have any questions about this policy or how we handle your data, contact us at privacy@razzo.tech or Atlanta, GA, United States.