Privacy policy

01Who is responsible

The data controller is ELF ROSSETO ME (Erick Rosseto Consultoria), Brazilian company registration (CNPJ) No. 28.736.430/0001-95, represented by Erick Rosseto, SEO and GEO consultant, and responsible for the erickrosseto.com website and the GEO assessment. For any matter related to personal data, write to contato@erickrosseto.com.

02What data is collected

We only collect what you provide and the minimum needed for the site to work:

• Contact form: name, email, company, website, role, selected goals, company size, message and the page language.
• GEO assessment: the addresses of the pages analyzed, your answers to the questions about your operation and the resulting scores. To unlock the full report, we ask for name, email, company and role.
• Technical data: your IP address is used in transformed (hashed), temporary form to prevent abuse and is discarded within 48 hours. The hosting provider also keeps technical access logs.

The site does not use tracking cookies, advertising pixels or remarketing tools.

03How the data is used

• To reply to your message and carry on the business conversation you requested.
• To generate the assessment report and contact you about the results, when you authorize it.
• To protect the site and the tool against spam, abuse and excessive automated use.

04Legal bases

• Consent (LGPD art. 7, I), given when you submit the contact form or the assessment sign-up.
• Legitimate interest (art. 7, IX), for security and abuse prevention.
• Compliance with a legal obligation (art. 7, II), when the law requires a record to be kept.

05Who the data is shared with

Data is not sold or shared for advertising. We rely on providers acting as processors, only to run the service:

• Cloudflare: hosting for the site and the tool, network and storage of form submissions.
• Google: business email (Google Workspace). The site fonts are also loaded from Google Fonts, which sends your browser's IP address to Google.
• Anthropic, through Cloudflare AI Gateway: the assessment sends the public text of the analyzed pages for AI review. Your name, email and other sign-up data are not sent.

06International transfers

Some providers keep servers outside Brazil, mainly in the United States. In those cases, transfers follow LGPD art. 33 and the contractual data protection safeguards offered by those providers.

07How long data is kept

Contact and sign-up data is kept for as long as needed to reply and follow up on the conversation, for up to 24 months after the last contact, unless the law requires longer retention. Technical data used to prevent abuse is discarded within 48 hours. You can request deletion at any time.

08Your rights

Under LGPD art. 18, you can request at any time:

• confirmation that we process your data and access to it;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary data or data processed in breach of the law;
• data portability;
• information about who the data has been shared with;
• withdrawal of consent and deletion of data processed on that basis;
• objection to processing carried out on another legal basis.

To exercise any of these rights, write to contato@erickrosseto.com. You will receive a reply within 15 days. You may also file a complaint with Brazil's National Data Protection Authority (ANPD).

09Security

Data travels encrypted (HTTPS) and is stored on Cloudflare infrastructure, with access restricted by an administrator key. No system is entirely immune to failures, and any relevant incident will be handled and reported as required by the LGPD.

10Contact channel

The channel for data subjects and for the ANPD is contato@erickrosseto.com.

11Changes to this policy

This policy may be updated when the site or the way data is handled changes. The date of the last update is shown at the top of the page.