Privacy Policy

1. Introduction

Licentia ("Licentia", "we", "us"), an environmental licensing management software located at R. Prof. Marcos Cardoso Filho, 575, Santa Mônica, Florianópolis, SC, 88037-040, Brazil, is committed to protecting the personal data of everyone who visits the website www.licentia.digital (the "Website").

This Policy explains what personal data the Website collects, what it is used for, who it is shared with, how long it is kept and how you can exercise your rights. It is based on Brazilian Law No. 13,709/2018, the General Data Protection Law (LGPD), which is the law that applies to our processing. For data processed through the Website, Licentia acts as the controller.

This Policy covers the Website only. Processing of data within the customer platform, at app.licentia.digital, is governed by the agreement or commercial proposal entered into with each customer.

2. Data We Collect

2.1 Demo request and contact forms

When you request a demo or contact us through the Website, we collect the information you provide:

Name;
Email address;
Phone number;
Company and job title;
Company profile and plan of interest;
Your message and any other information you choose to include.

2.2 Newsletter

When you subscribe to our newsletter, we collect your email address, which is used only to send you new articles and related communications.

2.3 Attribution and browsing data

As you browse, the Website stores information in your browser's local storage (localStorage) about how you arrived at the Website and which pages you visited. This data stays in your browser and only reaches us if you choose to submit a form. Details are provided in Section 3, Attribution and Browsing.

2.4 Technical and audience measurement data

Hosting and security: the Website is hosted on Cloudflare (Cloudflare Pages). To deliver pages and protect the Website against abuse, Cloudflare processes technical connection data, such as IP address, browser and device type, and the date and time of access;
Bot protection: our forms use Cloudflare Turnstile, which analyzes technical browser signals to tell people apart from bots;
Audience measurement: the Website may use Google Tag Manager and Google Analytics to measure page usage in aggregate (for example, pages viewed, traffic sources, device type and approximate location). These tools are only loaded after you interact with the page, for example by scrolling, clicking or tapping.

3. Campaign Attribution and Browsing

To understand which channels, campaigns and content bring people to Licentia, the Website stores the following information in your browser's local storage (localStorage), on this device:

Campaign parameters present in the address you used to reach the Website: utm_source, utm_medium, utm_campaign, utm_term and utm_content;
Ad click identifiers: gclid, gbraid and wbraid (Google Ads), fbclid (Meta), msclkid (Microsoft Advertising), ttclid (TikTok), li_fat_id (LinkedIn) and twclid (X);
Referring site (referrer): the address of the page that brought you to the Website, when your browser provides it;
Landing page: the first page of the Website you visited;
Browsing history on the Website: the pages of the Website you visited, with the time of each visit and how long you stayed on each one, limited to 100 entries. We only record pages of this Website; we have no access to your browsing on other websites.

How this data is used:

It is not sent to Licentia or to any third party while you browse;
It is only sent together with a form that you choose to submit (for example, a demo request or contact form), and becomes part of the record of your request;
We use it to assess the results of our marketing and to give our sales team context about your interest, so that we can serve you better;
If you never submit a form, this data remains in your browser only.

You can delete this data at any time by clearing the site data in your browser settings, or prevent it from being kept by browsing in a private or incognito window. Once you have submitted a form, you can ask us to delete the data sent with it through the channel in Section 11.

4. Purposes and Legal Bases

We process personal data collected through the Website for the following purposes, under the corresponding legal bases of the LGPD:

Responding to demo requests and contact messages, presenting Licentia and conducting any commercial negotiation. Legal basis: carrying out preliminary procedures related to a contract, at the data subject's request (art. 7, V);
Sending the newsletter with new articles and content. Legal basis: consent (art. 7, I), which may be withdrawn at any time;
Measuring audience and campaign results, including through attribution and browsing data, to improve the Website and our marketing. Legal basis: legitimate interest (art. 7, IX);
Protecting the Website and its forms against bots, fraud and abuse. Legal basis: legitimate interest (art. 7, IX).

When we rely on legitimate interest, we limit processing to the data strictly necessary and take your expectations and rights into account. You may object to this processing through the channel in Section 11.

Licentia does not sell or rent personal data. Data is shared only with providers that help us operate the Website, acting as processors, and in the cases provided for by law:

Cloudflare: Website hosting (Cloudflare Pages), page delivery, bot protection (Turnstile) and the server-side function that receives form submissions;
Lead management platform (CRM): data submitted through the forms, together with attribution and browsing data, is forwarded by a server-side function to the lead management platform used by our team, which acts as a processor;
Google: audience measurement through Google Tag Manager and Google Analytics, when used;
Public authorities: when required by law, regulation or court order;
Corporate transactions: in the event of a reorganization, merger or acquisition, data may be transferred to the successor, which will remain bound by this Policy.

6. International Transfers

Some of the providers listed above, such as Cloudflare and Google, operate infrastructure in several countries. As a result, personal data may be processed outside Brazil.

These transfers rely on the mechanisms provided for in article 33 of the LGPD, such as contractual clauses with our providers and the data protection commitments they have undertaken, in order to ensure a level of protection consistent with Brazilian law.

7. Security

We adopt technical and organizational measures to protect personal data, including:

Encrypted connections (HTTPS/TLS) on every page and form of the Website;
Bot protection on our forms, with Cloudflare Turnstile;
Server-side submission: forms are processed by a server-side function that forwards the data to the lead management platform, with no direct connection between your browser and that platform;
Data minimization: we only ask for the data needed to handle your request;
Restricted access: lead data is accessed only by the team members who need it to respond to you.

No system is completely immune to incidents. If a security incident occurs that may pose a relevant risk or harm to data subjects, we will take the measures required by the LGPD, including notifying the Brazilian National Data Protection Authority (ANPD) and the affected data subjects.

8. Data Retention

Demo request and contact forms: kept for as long as needed to respond to your request and to conduct any resulting commercial relationship, or until you ask for deletion, unless the law requires us to keep it;
Newsletter: kept until you unsubscribe or withdraw your consent;
Attribution and browsing data in your browser: kept in your device's local storage, under your control, until you clear the site data. Once sent with a form, it follows the retention period of the form data;
Audience measurement: kept according to the retention period configured in the measurement tool;
Technical hosting and security data: kept by Cloudflare for as long as needed to operate and protect the Website.

Once the purposes have been fulfilled, data is deleted or anonymized. Anonymized data, which cannot identify you, may be kept for statistical purposes.

9. Cookies and Local Storage

Cookies are small files stored by your browser. Local storage (localStorage) is a similar technology that keeps information in the browser itself. The Website uses the following technologies:

9.1 Local storage for attribution and browsing

The Website stores in your browser's localStorage the campaign parameters (utm_source, utm_medium, utm_campaign, utm_term and utm_content), ad click identifiers (gclid, gbraid, wbraid, fbclid, msclkid, ttclid, li_fat_id and twclid), the referring site (referrer), the landing page and the history of pages visited on the Website, with the time of each visit and the time spent on each page (up to 100 entries).

This data is only sent to Licentia together with a form that you choose to submit. See Section 3 for details.

9.2 Audience measurement

When used, Google Tag Manager and Google Analytics may set cookies (such as the "_ga" cookies) to distinguish visitors and sessions and to produce aggregate usage statistics. These tools are only loaded after you interact with the page. You can block them through your browser settings or with the Google Analytics opt-out browser add-on.

9.3 Security and operation

Cloudflare, which hosts the Website and provides bot protection for our forms, may use cookies or technical signals that are strictly necessary for security and performance. Without them, form submission may not work.

9.4 How to manage them

You can delete cookies and local storage data at any time in your browser settings (the option to clear site data);
You can set your browser to block third-party cookies or all cookies;
In private or incognito mode, cookies and local storage are discarded when you close the window;
Blocking strictly necessary technologies may prevent the forms from working.

10. Your Rights

Under article 18 of the LGPD, you may at any time:

Confirm whether we process your data and access it;
Correct incomplete, inaccurate or outdated data;
Request the anonymization, blocking or deletion of unnecessary or excessive data, or data processed in breach of the LGPD;
Request the portability of your data to another provider, in accordance with ANPD regulations;
Request the deletion of data processed on the basis of consent;
Obtain information about the entities with which we share your data;
Be informed about the possibility of refusing consent and the consequences of doing so;
Withdraw consent, for example by unsubscribing from the newsletter;
Object to processing based on legitimate interest, in case of non-compliance with the LGPD.

Requests are free of charge, and we respond within 15 days, as provided for in article 19, II, of the LGPD. We may ask for additional information to confirm your identity before fulfilling a request. A detailed explanation of each right is available on our LGPD page (in Portuguese).

Visitors from the European Union: Licentia is based in Brazil and this Policy is grounded in the LGPD. For reference, the rights listed above broadly correspond to those granted by the EU General Data Protection Regulation (GDPR), and you can exercise them through the same channel described in Section 11.

11. Data Protection Contact

Data subject requests, questions about this Policy and any communication about data protection should be sent to atendimento@licentia.digital, which is Licentia's data subject service channel.

Address: R. Prof. Marcos Cardoso Filho, 575, Santa Mônica, Florianópolis, SC, 88037-040, Brazil.

If you believe that the processing of your data violates the LGPD, you may also file a complaint with the Brazilian National Data Protection Authority (ANPD) at www.gov.br/anpd.

12. Changes to This Policy

We may update this Policy to reflect changes to the Website, the tools we use, our practices or the law. The current version will always be published on this page, with the date of the last update shown at the top.

When changes are significant, we will highlight them on the Website and, if we have your email address, we may notify you by email. This English version is provided for convenience; in case of any discrepancy, the Portuguese version prevails.