Privacy and Cookie Policy
Last updated: October 17, 2026
This Privacy and Cookie Policy ("Policy") sets out the rules on the collection, use, storage, sharing and protection of personal data processed by TECH FOR US UNIPESSOAL LIMITADA, a private legal entity registered under CNPJ No. 42.572.620/0001-45 ("Tech For Us" or "Controller"), on the institutional and product sites of the group it operates, including Tech For Us, Response Now and Oi Cliente (the "Sites").
1. Definitions
For the purposes of this Policy, the following definitions apply: "LGPD" means Law No. 13.709/2018 (the Brazilian General Data Protection Law); "Personal Data" means information relating to an identified or identifiable natural person; "Data Subject" means the natural person to whom the Personal Data relates; "Controller" means Tech For Us, responsible for the decisions on the processing of Personal Data; "Processor" means the legal entity that processes Personal Data on behalf of the Controller; "Data Officer" or "DPO" means the person appointed by the Controller to act as the communication channel between the Controller, the Data Subjects and the National Data Protection Authority (ANPD); and "Processing" means any operation carried out with Personal Data, such as collection, use, storage, sharing and deletion.
2. Controller and Data Officer
The Controller of the Personal Data processed on the Sites is TECH FOR US UNIPESSOAL LIMITADA, CNPJ 42.572.620/0001-45, identified in the preamble of this Policy.
The Data Protection Officer (DPO) is Felipe Blujos, and the contact channel is the email dpo@techforus.com.br.
3. Personal Data collected
When the Data Subject fills in the contact form on the Sites, we collect the data provided, such as name, email and any other information the Data Subject includes in the message. When the Data Subject registers in the Tech For Us talent pool, we collect the data provided, such as name, email, area of work, a portfolio or professional profile link and the message the Data Subject chooses to send. The Sites may contain a button or link that directs the Data Subject to a conversation with our team on WhatsApp; in that case, we process the information shared in the conversation, such as name, phone number and message content, noting that the use of WhatsApp is subject to the privacy policy of Meta Platforms, Inc. Subject to consent, we use Google Tag Manager and Google Analytics 4 to collect browsing data, such as pages visited, time spent, access source, device type and cookie identifiers. Our servers automatically log access data, such as IP address, date and time and requested pages, for operational security and to comply with legal obligations.
4. Purposes and legal bases for processing
Personal Data is processed for the following purposes, with the respective legal bases set out in article 7 of the LGPD: to respond to contact requests from Data Subjects (item V, performance of a contract or preliminary procedures at the Data Subject’s request); to assess interest in future opportunities and build the talent pool (item I, consent); to maintain the institutional relationship with the Data Subject or their company (item IX, legitimate interest); to measure Site audience and improve content and navigation (item I, consent); and to maintain the security of the Sites and comply with legal and regulatory obligations (items II and IX). The processing map summarizes the processing activities, with their purposes, legal bases, retention periods and main recipients, covering the contact form (performance of a contract or preliminary procedures, art. 7, V; consent where applicable, art. 7, I; retained for 12 months after the last contact; recipient FormSubmit), the talent pool (consent, art. 7, I; retained for 24 months or until consent is withdrawn; recipient FormSubmit), access logs and server records (compliance with a legal obligation, art. 7, II, or legitimate interest, art. 7, IX; retained from 6 months to 2 years), GA4 analytics and measurement (consent, art. 7, I; retained up to 14 months; processor Google LLC) and strictly necessary cookies (legitimate interest or technical necessity; retained for the session).
5. Sharing with processors
We do not sell or rent Personal Data. Sharing occurs only with the processors required to operate the Sites, namely FormSubmit, which forwards the messages from the contact form and the talent pool registrations to our email, and Google LLC, which hosts the Sites (Google Cloud) and provides Google Tag Manager and Google Analytics 4. These processors handle Personal Data under their own contracts and policies and within the limits of the Controller’s instructions.
6. International data transfer
The processors indicated in item 5 may store and process Personal Data on servers located outside Brazil, in particular in the United States, in the case of Google LLC and FormSubmit. In such cases, the transfer complies with article 33 of the LGPD and relies on the following safeguards: for Google LLC, the standard contractual clauses approved by ANPD Resolution CD/ANPD No. 19/2024 and the Data Processing Terms that Google makes available to its customers; and for FormSubmit, contractual safeguards under formalization. Information about the destination countries and the mechanisms used may be requested from the Data Officer at dpo@techforus.com.br.
7. Data retention
Personal Data is retained for the periods indicated in the processing map (item 4), in particular: contact form data for 12 months after the last contact; talent pool data for 24 months or until consent is withdrawn; browsing statistics (analytics) for up to 14 months, as configured in Google Analytics 4; and access logs from 6 months to 2 years, as applicable, observing the minimum period of 6 months set out in article 15 of Law No. 12.965/2014 (the Brazilian Internet Civil Framework). The Data Subject may request deletion before these periods, as provided in item 9, subject to the legal grounds for retention.
9. Rights of data subjects
Under article 18 of the LGPD, the Data Subject may request, at any time and free of charge: confirmation of the existence of processing; access to the data; correction of incomplete, inaccurate or outdated data; anonymization, blocking or deletion of unnecessary or excessive data or data processed in breach of the LGPD; data portability, as regulated by the ANPD; deletion of data processed with consent, subject to the legal grounds for retention; information about the entities with which the data has been shared; information about the possibility of not providing consent and the consequences of refusal; and withdrawal of consent. Requests must be sent to the Data Officer at the email below. To protect the Data Subject’s data, the Controller may request additional information to confirm identity before fulfilling the request. The Data Subject may also lodge a complaint with the National Data Protection Authority (ANPD). Requests can be sent to dpo@techforus.com.br.
10. Security
We adopt technical and organizational measures suited to protecting Personal Data, such as an encrypted connection (HTTPS), access control and activity logging. No system is entirely free of risk; in the event of a relevant security incident, the Controller will notify the Data Subjects and the ANPD, as provided in article 48 of the LGPD.
11. Audience of the Sites
The Sites are aimed at companies and professionals and are not directed at children and adolescents. We do not intentionally collect Personal Data from persons under 18 years of age.
12. Changes to this Policy
This Policy may be updated at any time to reflect changes to the Sites or to the law. The current version will always be available on the Sites, with the date of the last update, and relevant changes may be communicated by a prominent notice.
13. Contact
Controller: TECH FOR US UNIPESSOAL LIMITADA, CNPJ 42.572.620/0001-45.
Data Protection Officer (DPO): Felipe Blujos, dpo@techforus.com.br.
Other matters: suporte@techforus.com.br.