Privacy
Privacy policy
How EvoluxLab handles your personal data and cookies on the EvoluxLab and EvoWatch sites, in accordance with Brazil's General Data Protection Law (Law No. 13,709/2018, the LGPD).
version 1.0 · updated on October 16, 2026
01Who we are
EvoluxLab is a software house based in Maringá (PR, Brazil) that develops custom software and EvoWatch, a work-hours monitoring software. In this policy, "EvoluxLab", "we" and "us" refer to EvoluxLab, the controller of the personal data processed on these sites, that is, the party that decides how and why they are used.
This policy applies to the EvoluxLab site and to the EvoWatch page, which share the same address.
02What data we process and why
We only ask for what we need to reply to your contact and to understand how the site is used.
| Situation | Data | Purpose | Legal basis (LGPD) |
|---|---|---|---|
| You fill in the contact form | Name, email, company, WhatsApp or phone (optional), number of people who clock in (on EvoWatch) and the description of your challenge | Reply to your contact, send an email confirming we received your message, understand your needs and prepare a proposal or the free measurement | Preliminary procedures related to a contract, at your request (art. 7, V) |
| You message us on WhatsApp or send an email | Name and number or email that appear in the conversation and whatever you write | Reply and continue the conversation | Preliminary procedures related to a contract, at your request (art. 7, V) |
| You accept the analytics cookies | Pages visited, button clicks, device and browser type, approximate region and a cookie identifier | Measure the audience and learn which parts of the site work best | Consent (art. 7, I), which you can withdraw at any time |
| You accept the marketing cookies (when we use Google Ads) | Whether you arrived through an ad, whether you later got in touch, and that you visited the site, so we can show EvoluxLab ads | Measure whether an ad led to a contact and show ads to people who have already visited the site | Consent (art. 7, I), which you can withdraw at any time |
| Any visit to the site | IP address, date and time of access and technical browser data, recorded by the hosting provider | Keep the site online, secure and protected against abuse | Legitimate interest (art. 7, IX) and compliance with a legal obligation (art. 7, II) |
We do not ask for sensitive data (such as health, religion or political opinion) and ask that you do not send it through the form or WhatsApp. We do not make automated decisions about you based on this data and we do not send marketing email.
04Who we share it with
We do not sell or rent personal data. We share it only with the services that make the site and our support work, and only what is needed for that:
- Cloudflare, which hosts the site, receives the contact form and protects it against attacks. When you fill in the form, Cloudflare Turnstile checks whether the sender is a person by analyzing technical browser signals, without asking you for any data.
- Google, through Google Analytics and Google Ads (only if you accept the analytics or marketing cookies) and through Gmail, which delivers the form messages to us, sends the confirmation to your email and is used to reply to contacts.
- WhatsApp (Meta), when you choose to talk to us there. The conversation also follows WhatsApp's privacy policy.
- Public authorities, when there is a legal obligation or a court order.
05International transfer
Google, Cloudflare and Meta may store or process data on servers outside Brazil. These transfers follow what the LGPD allows (art. 33), with companies that adopt contractual clauses and security measures consistent with the protection required here.
06How long we keep it
- Contacts that do not become a contract: up to 12 months after the last conversation. After that, we delete them.
- Clients: during the contract and, afterwards, for the time required by law (for example, tax obligations) or to defend against a possible lawsuit.
- Analytics data: for the period set in Google Analytics, up to 14 months.
- Access logs: for the hosting provider's retention period and, where applicable, for the 6 months set by Brazil's Internet Civil Framework (Law No. 12,965/2014, art. 15).
07Your rights
Under the LGPD (art. 18), you may request at any time:
- Confirmation that we process your data
- Access to the data
- Correction of incomplete or inaccurate data
- Anonymization, blocking or deletion of unnecessary data or data processed in violation of the law
- Portability to another provider
- Deletion of data processed with your consent
- Information about who we share data with
- Information about the possibility of refusing consent and what happens in that case
- Withdrawal of consent
- Objection to processing you consider unlawful
To do so, write to the email at the end of this page. We reply within 15 days. If we cannot fulfill a request, we explain why. You can also file a complaint with Brazil's National Data Protection Authority (ANPD) at gov.br/anpd.
08Security
The site uses an encrypted connection (HTTPS), and access to contact data is restricted to those who need it to serve you. No system is completely immune to failures. If a security incident occurs that may put you at risk, we will notify you and the ANPD, as the law requires.
09Other information
- Minors: the sites are aimed at companies and are not intended for people under 18.
- Links to other sites: when you leave here (for example, to Instagram or WhatsApp), that service's privacy policy applies.
- Changes to this policy: when there are changes, we update the version and the date at the top of this page.
10Contact us
EvoluxLab's contact point for personal data protection (data protection officer) is the email below. Use it for questions about this policy or to exercise your rights.