This policy explains, in plain language, how CloudScript Technology handles personal data from visitors to our site, newsletter subscribers, contact form submitters, and job applicants. It also describes the cookies we use and how you can control them.

Our data handling complies with Brazil's General Data Protection Law (Law 13.709/2018 — LGPD), which operates on principles similar to the EU's GDPR. For questions, a copy of your data, or a deletion request, email privacidade@cloudscript.com.br.

Who is the data controller

CloudScript Technology is the controller of personal data collected through this site. You can reach us via the form at cloudscript.com.br/contact or directly at the emails listed throughout this page.

What data we collect

We only collect what is needed to respond to your interaction or to keep the site running properly. Specifically:

• Email and name: when you subscribe to our newsletter, submit the contact form, sign up for job alerts, or apply for a position.
• Messages and contact reason: the text you write in forms, used exclusively to respond to you.
• Résumé and professional data: only when you apply for a job. We store the uploaded file and the information provided in the application form.
• Technical navigation data: IP address, device type, browser, operating system, pages visited, and time spent. Used for audience measurement and site improvement.
• Preferences and interests: when you interact with specific areas of the site (blog, service pages, job alerts), we record that to offer more relevant content — always honoring the consent you gave via cookies.

How we use your data

We use the collected data for specific, well-defined purposes:

• Newsletter and marketing communications: when you subscribe, we send new articles, product updates, and occasional invitations to webinars, case studies, and content related to CloudScript services. You can unsubscribe anytime via the link in every email.
• Content customization: with your consent, we use navigation data to show you content on-site and in external campaigns that better matches your interests — for example, highlighting DevOps articles if you've already read others on the topic.
• Responding to contact requests: when you write to us, we use your email and messages solely to reply and continue the conversation.
• Recruiting process: when you apply for a role, we use your data for profile review, communication during the process and, if applicable, to maintain a talent pool for future opportunities — the latter only with your authorization.
• Audience analysis and site improvement: we use aggregated navigation data to understand which pages work best, where performance bottlenecks are, and how to improve the experience.
• Security and fraud prevention: some technical data is used to detect abnormal behavior, block abuse attempts, and protect the integrity of our systems.

Legal basis for processing

Each purpose above is supported by a legal basis under LGPD:

• Consent: for newsletter, non-essential cookies, and content customization. You can revoke this at any time.
• Contract performance or pre-contractual steps: for job applications and responses to commercial requests.
• Legitimate interest: for audience analysis, security, and fraud prevention, always respecting your fundamental rights.
• Legal obligation: when a specific rule requires data retention.

Use of cookies

Cookies are small files stored in your browser that remember preferences and measure how you interact with the site. We use three categories, and you choose which to accept when the cookie banner appears on your first visit.

Essential cookies

Needed for the site to work — keeping you logged into restricted areas, remembering your chosen language, storing the cookie consent itself. These cannot be disabled, because the site simply would not function without them.

Analytics cookies

Collect aggregated data on how pages are visited — how many people read an article, where they came from, how long they stayed. We use Google Analytics and Vercel Analytics for this. Data is anonymized whenever possible and never used to identify you individually.

Marketing and customization cookies

Let us show you more relevant content on-site and off-site, including targeted ads on partner platforms. These cookies only activate if you authorize them in the consent banner. You can change your mind anytime by clearing cookies in your browser or returning to this page to manage preferences.

Who we share your data with

We do not sell, rent, or transfer your data. It is shared only with technology providers necessary to deliver the service, all contractually required to protect the information:

• Amazon Web Services (SES): transactional and newsletter email delivery.
• Vercel: site hosting and request processing.
• Directus: content management system that stores articles, applications, and newsletter subscriptions.
• Google (Analytics and Tag Manager): audience measurement and marketing tag management.
• LinkedIn: only for public publication of articles on the company page. We do not send personal data of site users.

We never transfer your data to third parties for marketing purposes other than our own.

International transfer

Some of our providers (AWS, Vercel, Google) operate infrastructure outside Brazil. When that happens, we ensure the transfer follows LGPD standards — appropriate contractual clauses and a level of protection equivalent to the Brazilian one.

How long we keep your data

We retain data strictly for as long as necessary for the purposes described. In practice:

• Newsletter emails are stored while your subscription is active. If you unsubscribe, we remove the address from the base within 30 days.
• Contact messages are kept as long as needed to resolve the interaction, then discarded or anonymized.
• Applications are kept while the recruiting process is active and, with your authorization, for an additional 12 months for new opportunities.
• Technical navigation data has a maximum retention of 24 months.

Your rights

LGPD grants you a set of rights regarding your personal data. You may, at any time:

• Confirm whether we process your data and request a copy of it.
• Request correction of incomplete, inaccurate, or outdated data.
• Request anonymization, blocking, or deletion of unnecessary data or data processed in breach of the law.
• Request data portability to another service or product provider.
• Revoke consent and request deletion of data processed on that basis.
• Object to processing when there is non-compliance with LGPD.
• Obtain information about public and private entities with which we share your data.

To exercise any of these rights, write to privacidade@cloudscript.com.br. We respond within 15 days.

Information security

We adopt appropriate technical and organizational measures to protect your data — encryption in transit (HTTPS), role-based access control, continuous system monitoring, encrypted backups, and periodic reviews of our providers. Even so, no system is 100% immune; if a security incident affects your data, we will notify you and the Brazilian National Data Protection Authority (ANPD) within the timeframes required by law.

Minors

Our site is not directed at anyone under 18, and we do not intentionally collect data from children or teenagers. If you are a guardian and identify that a minor's data was submitted by mistake, contact us so we can remove it.

Changes to this policy

This policy may be updated periodically to reflect legal, product, or provider changes. Whenever there is a material change, we will communicate it on this page and, when appropriate, by email. The last-updated date appears at the top of this text.

How to reach us

For any question, request, or complaint about data processing, use the channels below:

• Data Protection Officer email: privacidade@cloudscript.com.br
• Contact form: cloudscript.com.br/contact

If you are not satisfied with our response, you may report the matter to the Brazilian National Data Protection Authority (ANPD) at gov.br/anpd.