Privacy Policy

1. Who the controller is

Diglion, registered under CNPJ No. 64.003.131/0001-05, headquartered in Recreio dos Bandeirantes, Rio de Janeiro/RJ, Brazil, is the controller of the personal data processed through this website. For privacy questions or to exercise your rights, contact us at the email address listed at the end of this policy.

2. What data we collect

We collect only the data needed for the purposes described below:

• Contact form: your name, email, and the content of the message you send.
• Career applications: your name, email, and any information you include in your application (such as portfolio or résumé links).
• Anti-spam protection: when you submit a form, Cloudflare Turnstile processes technical signals from your browser, including your IP address, to tell people apart from bots.
• Analytics data: if you consent to cookies, Google Analytics collects site-usage data such as pages visited, time on page, and pseudonymous identifiers.

3. Why we use the data and on what legal basis

• To reply to messages and hold commercial conversations — legal basis: pre-contract steps and legitimate interest (art. 7, V and IX, LGPD).
• To evaluate job applications — legal basis: pre-contract steps (art. 7, V).
• To prevent spam, fraud, and abuse of the forms — legal basis: legitimate interest (art. 7, IX).
• To measure and improve site performance with analytics — legal basis: your consent (art. 7, I), which you may withdraw at any time.

4. Cookies and consent

The first time you visit, we show a cookie notice. No analytics cookie is activated before your consent: Google Analytics only loads after you click “Accept.” If you decline, no analytics script runs.

Your choice is stored in your browser so we don’t repeat the notice. You can change your mind at any time by clearing this site’s data in your browser, which brings the notice back.

5. Who we share data with

We do not sell personal data. We share data only with service providers that make the site work:

• Resend — delivery of the emails generated by the contact and careers forms.
• Cloudflare — anti-spam protection of the forms (Turnstile).
• Google — audience measurement via Google Analytics, when consent is given.

6. International transfer

Some of these providers process data on servers outside Brazil, including in the United States. In such cases, processing relies on the safeguards set out by the LGPD for international data transfers.

7. How long we keep it

We keep data only as long as needed for the purposes of this policy or to comply with legal obligations. Messages and applications are retained for as long as the relationship or the corresponding legitimate interest lasts, and are then deleted or anonymized.

8. Your rights

Under art. 18 of the LGPD, you may at any time request:

• Confirmation that processing exists and access to your data.
• Correction of incomplete, inaccurate, or outdated data.
• Anonymization, blocking, or deletion of unnecessary data or data processed unlawfully.
• Data portability and information about who we share it with.
• Deletion of data processed based on your consent, and withdrawal of that consent.

9. How to exercise your rights

To exercise any of these rights, write to privacidade@diglion.com.br. We will respond within the timeframes set by applicable law.

10. Changes to this policy

We may update this policy to reflect changes to the site or the law. When we do, we will revise the “last updated” date at the top of this page.