Privacy Policy

1. Controller and scope

GUSTA AI Studio ("GUSTA", "we", "us") is responsible for the personal data processing described in this policy. This document explains which information may be processed when you browse gusta.click, schedule a diagnostic meeting, use the virtual assistant or contact us.

We process personal data under Brazil's General Data Protection Law — LGPD (Federal Law No. 13,709/2018). This policy applies to the institutional website and the tools integrated into it. External services reached through their own links may apply separate policies.

2. Data we may process

When you complete the diagnostic form, we may receive your name, email, company, role, WhatsApp number, website, description of the challenge, service of interest, expected outcome, timeline, investment range, and selected meeting date and time. Optional fields are processed only when you choose to complete them.

The scheduling system also stores operational information such as language, time zone, meeting status and a public booking identifier. To protect the service against abuse, the IP address is transformed into a pseudonymous hash used to limit repeated attempts; the original IP is not displayed in the booking record.

While you browse, tools configured through Google Tag Manager may process technical and usage data such as visited pages, interaction events, device, browser and approximate traffic source. This information is not necessarily anonymous and depends on the configuration of the analytics providers active on the website.

When you use the chatbot, we process the content you send, generated replies, products or subjects consulted, and random visitor and conversation identifiers. The widget uses browser local storage to recognize the conversation on a later visit and to keep operational preferences, such as how long the chat window should remain closed.

3. How we use personal data

We may use the data to answer requests, understand the proposed project, prepare and administer meetings, send confirmations and Google Meet links, provide chatbot support, restore conversation context, protect services against abuse and measure website usage.

Depending on the situation, processing may rely on consent, steps taken before entering into a possible contract, compliance with legal or regulatory obligations, and legitimate interests such as security, fraud prevention, service improvement and responding to requests. When consent is the applicable basis, it may be withdrawn.

4. Sharing and service providers

We may use hosting, database, email delivery, monitoring and other technical service providers. Information required for scheduling may be sent to Google Calendar and Google Meet. Google Tag Manager may load measurement services configured for the website.

Chatbot messages and the context required to answer them may be processed by the chatbot infrastructure and artificial intelligence providers. We limit sharing to what is necessary for each purpose. We do not sell or rent personal data, and we do not provide it to third parties for their own marketing without a valid legal basis.

Some providers may process information in other countries. In those cases, we seek to use services with contractual and technical safeguards compatible with the protection required by applicable law.

5. Storage and retention

We retain data for as long as necessary to respond to the contact, administer the meeting or business relationship, maintain security and operational history, and comply with legal obligations. The period may vary according to the purpose and type of record. Data may then be deleted or anonymized unless retention remains permitted or required by law.

Identifiers stored in your browser remain until they are removed through browser settings or replaced by the service. Clearing local storage prevents that device from automatically recovering the identifier, but it does not by itself delete records already stored in GUSTA's systems.

6. Your rights

Under the LGPD, you may request, as applicable, confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary or unlawfully processed data, portability, information about sharing, review of automated decisions and withdrawal of consent.

You may also request deletion of data processed on the basis of consent or object to specific processing. Some information may be retained when required by law, needed for the exercise of legal rights or otherwise authorized under the LGPD. We may request reasonable information to confirm the identity of the person making the request.

7. Security

We use technical and administrative measures intended to reduce the risk of unauthorized access, loss, alteration or improper disclosure. These measures include access controls, secure connections, request validation and operational records. No internet-connected system, however, can provide an absolute guarantee against incidents.

8. Updates and contact

We may update this policy to reflect changes to the website, services or applicable law. The published version will always display its latest update date.

To ask a question or exercise a privacy right, contact GUSTA through our official WhatsApp number at +55 11 99530-0421, publicly identified by the address https://wa.me/5511995300421. Please state that your request concerns personal data so it can be routed appropriately.