1. Who handles your data
- Controller
- Bruno Coelho da Silva Fotografia, a sole proprietorship registered in Brazil (CNPJ 35.427.966/0001-94).
- Address
- Rua Henrique Novaes, 88, Ed. Chamboard, Suite 605, Centro, Vitória, ES 29010-490, Brazil.
- [email protected]
- Website
- devtwo.company
Privacy contact: Bruno Coelho da Silva, at the same email.
2. What this policy covers
This policy applies to anyone who visits devtwo.company, emails us for a quote, receives a proposal or hires DevTwo. The sites we build for clients have their own privacy policies; there, the site owner decides about the data, and section 5 explains our role. For clients, the Terms complete this policy.
3. What data, why, and for how long
| Data | Why | How long |
|---|---|---|
| Quote request: name, email, business name, current site or Google profile and what you need | To reply and prepare the proposal | 12 months if it does not become a project |
| Order: name, email, phone, business name, billing address, the items chosen and the record of your acceptance | To do the project, bill you and register the domain in your name | While the contract lasts and 5 years after it ends |
| Project material and account access you give us | To build the site and keep it online | While the service is active, plus 90 days |
| Payment status from Stripe (paid, failed, refunded), amount and date | To confirm the order and charge the monthly fee | Same as the order |
| Emails and support requests | To help you and keep a record of what was agreed | Same as the order; 12 months if no project |
| Technical logs: IP address, date and time, page and browser | Security: blocking bots and attacks, finding errors | 6 months |
Your card number stays with Stripe. We never see it. Stripe also processes payment data on its own, for example to prevent fraud, under its own privacy policy.
For account access, invite DevTwo as a user rather than sending a password. You can remove the access when the task is done.
5. Forms on our clients' sites
When someone sends a message through a form on a client's site, the site owner decides about that data and DevTwo processes it on their behalf, only to make the site work.
- Each message is stored and emailed to the site owner.
- Messages are kept for 12 months.
- DevTwo does not use this data for anything else and does not share it.
- If the site owner adds a Meta pixel, Google Ads tag or other third-party code, the owner decides and informs visitors in their own privacy policy.
Visited a client's site and have a question about your data? Contact the site owner first. If you write to us, we forward it and help them reply.
7. Where the data is
DevTwo is operated from Brazil. The servers are in Canada and the United States, and our providers may process data in other countries under their own safeguards.
8. How we protect data
- HTTPS on every page, an attack filter in front of the server and every site isolated from the others.
- Daily backups in two places off the server.
- Access to client data limited to what each task needs.
9. Your rights
You can ask to see the data we hold about you, correct it, delete it, or get a copy. Depending on where you live, such as California, you may have additional rights under state law. We do not sell personal information and do not treat you differently for using your rights.
10. How to ask
Email [email protected] with what you want. We confirm we received it and reply within 30 days, usually much sooner. We may ask you to confirm your identity first.
11. Changes to this policy
The new version is posted on this page with its date. If a change affects how we use the data of current clients, we email them 30 days in advance.