Privacy Policy

1. Who we are

MOVAX Solutions is an engineering studio based in Brazil. For the purposes of the Lei Geral de Proteção de Dados (LGPD) and the GDPR, we are the controller of the personal data described below. You can reach us at contact@movaxsolutions.com.

2. What we collect

• Contact form: your name, email address, optional company name, the project type you select, and your message.
• Newsletter: your email address only.
• Analytics (with consent): pseudonymised usage data such as pages viewed, approximate region, referrer, and device type. We do not use analytics to identify you.
• Chat assistant: the messages you send it and the answers it gives, your browser's time zone (so it can tell you the current local date and time), and your IP address, which we use to limit how many messages one visitor can send. The assistant never asks for your name, email address, or other contact details; please keep anything confidential out of the conversation itself.
• Contact form in the chat: if you tell the assistant about a project, it may ask about it, including, when the conversation allows, which company it is for and roughly how many people work there (you are free not to answer), and then offer you a contact form in the chat, prefilled from the conversation. If you send it, we receive your name and email address (which you type into the form), the optional company name and company size, the project type, the timeline, and the message, together with the assistant's notes on your project taken from the conversation. Nothing is sent until you press Send.

We do not collect special categories of personal data, and this site is not directed at children.

3. Why we use it

• To reply to you. Contact form submissions, including the form sent from the chat, are used to respond to your enquiry and, if it becomes a project, to carry out pre-contractual steps at your request.
• To send the newsletter you asked for, on the basis of your consent, which you can withdraw at any time.
• To improve the site, using analytics, on the basis of your consent.
• To answer your questions in the chat, on the basis of our legitimate interest in responding to enquiries about our services, and to keep the assistant from being abused at our expense.

4. Cookies

The site uses local storage to remember your consent choice. Analytics cookies are set only after you accept them, and nothing is loaded if you decline or ignore the banner. You can clear this site’s stored data in your browser at any time to reset the choice.

Opening the chat stores a conversation identifier in your browser's session storage, so the assistant keeps the thread if you reload the page, together with a copy of the conversation's messages, so the page shows them again at once. Both are discarded when you close the tab, and the identifier identifies the conversation, not you.

5. Who we share it with

We do not sell personal data. We share it only with the processors that operate this site on our behalf: our hosting provider, our email delivery provider (Resend, used to deliver contact-form messages, including the form sent from the chat, and newsletter signups), and, if you consented, Google Analytics. Each processes data under its own agreement and only on our instructions.

The chat assistant adds two more. Google reCAPTCHA v3 checks that a request comes from a person rather than a bot before the assistant answers, and receives browser and interaction signals from this page in order to score it; it loads only when you open the chat, never with the page. OpenAI provides the model that writes the answers, so the text of your messages is sent to its API, including a company name or company size you give the assistant in the conversation; the name and email address you type into the chat's contact form are not. Your messages are not used to train our own models — we do not build or train language models.

6. International transfers

Some of these providers operate outside Brazil. Where personal data is transferred internationally, it is protected by the standard contractual safeguards those providers offer.

7. How long we keep it

• Contact enquiries, including those sent from the chat: up to 24 months, then deleted, unless they become a client record.
• Newsletter subscriptions: until you unsubscribe.
• Analytics data: retained according to the provider's default retention window.
• Chat conversations: stored with the conversation identifier so the assistant can follow the thread, and deleted automatically about an hour after the last message. Email us to have a conversation deleted sooner.

8. Your rights

Under the LGPD and the GDPR you may request confirmation of processing, access to your data, correction of inaccurate data, anonymisation or deletion, portability, information about with whom it has been shared, and withdrawal of consent. Every newsletter email includes a one-click unsubscribe link.

To exercise any of these rights, email contact@movaxsolutions.com. We respond within 15 days. You also have the right to lodge a complaint with the ANPD in Brazil, or your local supervisory authority in the EU.

9. Security

The site is served over HTTPS with a Content Security Policy and standard security headers. Access to submitted data is limited to the people who need it to answer you.

10. Client project data

Data we process while delivering a client project is governed by that project's agreement and its data processing terms, not by this policy. In those engagements we act as a processor on the client's instructions.

11. Changes

We may update this policy. Material changes will be reflected in the “last updated” date at the top of this page.

12. Specialist Network (Rede de Especialistas)

This section covers independent specialists who apply to our Specialist Network. It is written in Portuguese, the language of the application. Version 2026-10-04.