ADS4PROS
§ LGPD

Privacy Policy

Last updated: May 13, 2026

This Policy describes how ADS4PROS collects, uses, shares, stores, and protects personal data collected at ads4pros.com and during the delivery of growth advisory services, in accordance with the Brazilian General Data Protection Law (LGPD — Law 13.709/2018) and, where applicable to clients or prospects abroad, with GDPR (EU) and CCPA (California).

1. Introduction

ADS4PROS takes privacy seriously. We do not sell, rent, or share personal data with third parties for the marketing purposes of other companies. We collect only what is strictly necessary to respond to your commercial contact, conduct the diagnosis, deliver contracted services, and comply with legal obligations. By using our channels (site, WhatsApp, e-mail, video call, digital proposal), you consent to the practices described in this Policy.

2. Data we collect

We collect: (a) data you provide via contact and diagnosis forms (name, e-mail, phone, company, role, approximate revenue, message); (b) data that arises during consulting (information about commercial process, internal metrics, strategy, video-call notes); (c) navigation technical data (IP, user-agent, UTM parameters, fbclid, gclid, referrer); (d) functional cookies required for site operation.

3. How we use your data

We use collected data to: (i) respond to your commercial contact and qualify the opportunity; (ii) conduct the initial diagnosis and generate a priority plan; (iii) issue and manage digital proposals; (iv) deliver contracted services (consulting, media management, CRM implementation); (v) correctly attribute lead origin to acquisition channels; (vi) continuously improve internal operations; (vii) comply with legal and tax obligations. We do not enrich data via brokers, do not buy lists, and do not engage in aggressive behavioral profiling.

4. Data sharing

We share data strictly with: (a) Google (Gmail API to receive your contact message, Google Calendar to schedule video calls); (b) Evolution API / WhatsApp Business (for internal commercial team notification); (c) GoHighLevel (internal CRM, for prospect and client funnel management); (d) Meta CAPI and Google Ads (server-side conversion measurement, only when you consent to marketing cookies). Under no circumstances do we sell data or share it for third-party marketing. Sharing under legal obligation occurs only upon court order or competent authority request.

5. Storage and security

Your data is protected by: (i) infrastructure on a dedicated VPS with DDoS protection and regular backups; (ii) in-transit encryption via TLS/HTTPS through Traefik with Let's Encrypt certificates; (iii) role-based access control (only authorized internal team accesses client data); (iv) passwords stored with bcrypt hashes; (v) periodic access-log review. In case of a security incident affecting your data, we will notify the ANPD and affected data subjects within the legal deadline of 2 (two) business days.

6. Cookies and attribution

Strictly necessary cookies (session, anti-CSRF) are always active for site operation. Analytics and marketing cookies (Meta Pixel, Google Analytics, Google Ads) require your consent. Origin attribution data (UTMs, fbclid, gclid, referrer) is stored in browser localStorage for 90 days, configured in lib/tracking-attribution.ts, with the sole purpose of identifying the lead's acquisition channel. The granular cookie management panel is under development.

7. Data retention

Retention periods: (a) Active prospect and client data: throughout the relationship + 5 (five) years for tax compliance and civil prescription; (b) Prospect data without closing: 24 (twenty-four) months for reactivation; (c) Attribution data (UTMs, fbclid): 90 days in localStorage; (d) Non-converted diagnosis data: 12 months; (e) Technical site access logs: 6 months. After the period, data is anonymized or permanently deleted.

8. Your rights (LGPD)

In accordance with the LGPD, you have the following rights: (i) access to the data we hold about you; (ii) correction of incomplete, inaccurate, or outdated data; (iii) portability of your data to another provider; (iv) anonymization, blocking, or deletion of data; (v) revocation of consent at any time; (vi) information about with whom your data is shared; (vii) review of automated decisions (ADS4PROS does not make fully automated decisions about data subjects). To exercise any of these rights, e-mail privacidade@ads4pros.com with the request. We respond within 15 (fifteen) business days.

9. Data of minors

ADS4PROS services are exclusively B2B, aimed at entrepreneurs, managers, and professionals over 18 years old. We do not intentionally collect data from minors. If we identify that minor data has been inadvertently collected, we will immediately delete it. If you are a legal guardian and identify improper collection, contact us at privacidade@ads4pros.com.

10. Changes to this Policy

This Policy may be updated periodically to reflect regulatory changes, new services, or operational improvements. Material changes will be communicated at least 15 (fifteen) days in advance via e-mail or visible site notice. The date at the top of this page is always updated to reflect the current version. Continued use of the services after the notice period constitutes acceptance of the updates.

11. Data Protection Officer (DPO) and contact

For privacy-specific matters, data protection, LGPD, GDPR, or to exercise rights as a data subject, contact the Data Protection Officer at privacidade@ads4pros.com (dedicated mailbox, monitored once per business day) or WhatsApp +55 (67) 93300-9440. For commercial matters unrelated to privacy, use commercial@ads4pros.com.