PRIVACY

Privacy Policy

How we collect, use, and protect your data — written to be readable, not lawyered.

Last updated: May 10, 2026

Who we are

Balsa Tech (“we”, “us”, or “our”) is a digital studio building AI agents, intelligent automations, web platforms, and mobile apps. We are headquartered in Brazil and operate internationally.

This policy explains what personal data we collect through www.balsatech.dev, why we collect it, how we use it, and the rights you have over it. It applies to visitors of our website and people who contact us through it. Engagements with clients are governed by separate written agreements that may include additional data terms.

What we collect

Information you give us directly. When you submit our contact form we collect the name, email address, company, budget range, and message content you provide. If you email us, we receive whatever you choose to put in that message.

Information collected automatically. When you visit the site we receive standard log data (IP address, user agent, referrer, pages viewed, timestamps) and aggregate analytics through Vercel Analytics, which is privacy-friendly and does not use cookies or fingerprinting to identify individuals.

We do not collect special categories of personal data (race, religion, health, biometrics, etc.) and we do not knowingly collect data from children under 13.

How we use your data

We use the information you provide to respond to your inquiry, scope a potential engagement, and follow up on the conversation you started. We use automatic log and analytics data to understand site performance, debug issues, and improve content.

We do not sell your personal data. We do not use it to train machine-learning models. We do not buy contact lists or send unsolicited marketing.

Legal bases (LGPD and GDPR)

Under Brazil’s LGPD and the EU GDPR, we rely on the following legal bases: (a) execution of pre-contractual steps at your request — when you contact us about a potential project; (b) legitimate interests — to operate, secure, and improve the website; and (c) compliance with legal obligations — when applicable.

Where consent is required, we ask for it explicitly and you may withdraw it at any time.

Service providers we use

We rely on a small set of trusted processors to operate the site and respond to you. Each is contractually bound to handle your data only on our instructions and to apply appropriate security measures.

Vercel (hosting and analytics, United States and EU regions). Resend (transactional email delivery). These providers may transfer data internationally; transfers are protected by Standard Contractual Clauses or equivalent safeguards.

How long we keep it

Contact form submissions and email correspondence are retained for as long as necessary to respond to your inquiry and to maintain a record of our communications, typically up to 24 months from your last interaction. Server logs are retained for up to 90 days. Aggregate analytics data is retained for up to 24 months.

You can ask us to delete your data sooner — see your rights below.

Your rights

You have the right to access, correct, delete, restrict, and port your personal data, and to object to certain processing. EU residents may also lodge a complaint with their local data protection authority. Brazilian residents may contact the ANPD.

To exercise any of these rights, email leonardo@balsatech.dev with the subject line “Privacy request”. We will respond within 15 days (LGPD) or one month (GDPR), whichever applies.

Cookies and tracking

We do not use advertising cookies or third-party tracking pixels. We use Vercel Analytics, which counts visits without using cookies or fingerprinting. Essential cookies may be set by our hosting layer for security and load-balancing only.

Security

We use HTTPS everywhere, restrict internal access on a need-to-know basis, and choose service providers with strong security postures. No system is perfectly secure, but we work to keep your data safe and to notify you promptly if a material incident affects you.

Changes to this policy

If we change this policy, we will update the “last updated” date at the top and, for material changes, post a notice on the site. Continued use of the site after changes constitutes acceptance of the revised policy.

Contact

Questions, requests, or concerns? Email leonardo@balsatech.dev. The data controller is Leonardo Oliveira Balsalobre, Founder of Balsa Tech.