Privacy Policy

1. Data controller

Atomic Solutions is the controller of personal data processed through this site.

• Legal name: Atomic Solutions
• Brazilian Tax ID (CNPJ): 17.836.749/0001-76
• Address: Av. Dr. Chucri Zaidan, 1550 - Suite 2112 - Vila Cordeiro, São Paulo - SP, 04583-110

3. Personal data we collect

We collect only the data strictly necessary for the purposes described in this Policy:

Via contact form:

• Full name
• Corporate email
• Phone / mobile
• Company
• Company website (optional)
• Role / job title
• Number of employees
• Message describing the challenge or goal (optional)
• Navigation language

Via cookies and tracking technologies (subject to your consent in the cookie banner):

• IP address (anonymized by Google Analytics)
• Device and browser identifiers
• Pages visited, time on site, and navigation flow
• Traffic source (referrer) and campaign parameters (UTM)

Via Google reCAPTCHA v3 (for spam protection):

• Validation token and risk score assigned by Google
• Technical data collected by Google for behavioral analysis

4. Purposes of processing

• Respond to commercial contact requests and customer prospecting
• Send communications about our services (software quality, automation, tech staffing)
• Analyze aggregated traffic and behavior on the site for continuous improvement
• Prevent fraud, abuse, and automated attacks
• Comply with legal and regulatory obligations

5. Legal bases (LGPD art. 7)

• Consent (art. 7, I): checkbox on the contact form and acceptance in the cookie banner for analytics and marketing.
• Pre-contractual procedures (art. 7, V): handling your request for a quote or commercial contact.
• Legitimate interest (art. 7, IX): fraud prevention via reCAPTCHA and site security measures.
• Legal obligation (art. 7, II): minimum retention for tax purposes and responding to authority requests.

6. Sharing with third parties (processors)

We share your data only with the following processors, all under contract and adequate security measures:

• RD Station (RD Station Tecnologia da Informação Ltda., Brazil) — CRM and marketing automation. Receives contact form data for lead management.
• Google LLC (United States) — Google Analytics 4, Google Ads, and reCAPTCHA. International transfer supported by standard contractual clauses and applicable adequacy decisions.
• Hosting provider — technical storage for site delivery (does not read form data, which is sent directly to RD Station via API).

7. Retention period

Lead data is retained for a maximum of 24 months without interaction or while the commercial relationship continues, whichever comes first. After that period, data is anonymized or deleted. You may request deletion at any time via the DPO.

8. Your rights as a data subject (LGPD art. 18)

The LGPD grants you the following rights over your personal data:

• Confirmation that processing exists
• Access to your data
• Correction of incomplete, inaccurate, or outdated data
• Anonymization, blocking, or deletion of unnecessary data
• Portability of data to another provider
• Deletion of data processed based on consent
• Information about entities with which we share your data
• Information about the option not to consent and its consequences
• Withdrawal of consent at any time

9. Cookies and similar technologies

We use essential cookies (necessary for site functionality) and, with your consent via the banner, analytics cookies (Google Analytics 4) and marketing cookies (Google Ads). You may accept or decline at any time using the banner. By default, before any action, all non-essential cookies are disabled (Google Consent Mode v2).

10. Security

We adopt appropriate technical and organizational measures to protect your data: HTTPS on every page, secrets stored in an encrypted vault, role-based access control, and no local storage of personal data on our server (form data is forwarded directly to RD Station via secure API).

11. Children's data

This site is intended for a professional adult audience (B2B). We do not intentionally collect data from anyone under 18. If you identify such a case, please contact our DPO for immediate deletion.

12. Changes to this Policy

This Policy may be updated to reflect changes in our practices or in legislation. The date of the last update is shown at the top of this page. Relevant changes will be communicated with additional prominence.

13. Jurisdiction and applicable law

This Policy is governed by Brazilian law. The courts of São Paulo/SP, Brazil, are elected to resolve any disputes.