Privacy notice

Who is responsible for your data

The controller of the personal data described in this notice is CXM Estratégias Digitais (CNPJ 66.682.558/0001-02), based in Ribeirão Preto, SP, Brazil.

The contact for our data protection officer is [email protected].

What data we collect

When you chat with CXM on the page and ask for a diagnostic, we collect what you type: your name, company, email and WhatsApp number.

Before the WhatsApp question, the chat asks whether you agree that we use your contact details to show you CXM ads. We store your answer, yes or no, with the date of this notice.

The chat then asks some optional questions: your company website, your monthly revenue range, your ad spend range and your biggest challenge. You can skip each one. If you skip a question, it stays unanswered.

We also record which ad or link you came from: the utm parameters and the ad click identifiers (gclid and fbclid) in the address of the page, and the site you came from, when it is another site. We read these from the page address at the moment you submit, and we do not store them in your browser.

We use this information to know which campaign brought the contact. We only store the ad click identifiers (gclid and fbclid) if you agree to the use of your contact details for ads.

A random code generated in your browser links the two steps of the same request and is stored together with your data.

The chat does not ask for sensitive data. Please avoid typing it into the free-text fields.

What we use the data for

We use the data for two purposes.

The first is to answer your request for a diagnostic: to contact you by email or WhatsApp, to set up the conversation and to see whether our work fits your business.

The second is to target CXM ads on advertising platforms, if you agree in the chat.

We do not sell your personal data.

Legal basis

To answer your request for a diagnostic, we process the data to carry out preliminary steps at your request (Brazilian General Data Protection Law, Law 13,709/2018, art. 7, item V).

To target CXM ads, we only use your contact if you agree in the chat (consent, art. 7, item I). You can withdraw your consent at any time by writing to [email protected].

Who we share the data with

These providers process or receive the data on our behalf:

Hostinger, for website hosting and for sending the reply email.

Our own automation and visit statistics server, kept by CXM on a VPS (virtual private server).

Cloudflare, for delivering and protecting the website.

Google, for reCAPTCHA and for the Inter font from Google Fonts.

Advertising platforms, to target CXM ads.

International transfer

The website, the automation server and the visit statistics are in Brazil. If you are in the United States, your data is processed in Brazil.

Cloudflare delivers the website content through a global network of servers.

Google processes reCAPTCHA and the fonts under its own policies.

How long we keep the data

We keep the data for 24 months, or longer if the law requires it.

Your rights and how to use them

Brazilian law gives you, among other rights, the right to confirm that we process your data, to access it, to correct it, to ask for anonymization, blocking or deletion of unnecessary data, to ask for portability, to know who we share the data with, and to object to certain processing.

To use any of these rights, write to [email protected]. You can also file a complaint with the Brazilian data protection authority (ANPD).

You can withdraw your consent to ads at any time by writing to [email protected].

reCAPTCHA, from Google

We use reCAPTCHA, a Google service, to stop automated submissions and abuse of the form. It loads only when you start the chat, not when you open the page.

When it loads, reCAPTCHA may use cookies and collect data from your browser and device. Google processes that data under the Google Privacy Policy and Terms of Service.

Visit statistics and fonts

We measure visits with Plausible, a statistics tool that we host ourselves, on our own server. The script and the events go through an address on cxm.com.br itself. To count visitors, your IP address is forwarded to that server. Event properties carry no personal data.

The measurement script does not store cookies in your browser.

The Inter text font comes from Google Fonts. When it loads, your browser connects to Google servers, which receive your IP address.

Privacy laws elsewhere

Depending on where you live, other privacy laws may give you rights beyond those described in this notice. To use any right, write to [email protected].

Changes to this notice

We may update this notice. The update date is at the top of the page.