Who we are
360 Brave ("we") is a software engineering studio operating in São Paulo, Miami, Lisbon and Tel Aviv. We are the controller of the personal data processed on 360brave.com. For anything privacy-related, write to [email protected].
What we collect and why
| When | What data | Why, and the legal basis |
|---|---|---|
| You send the contact form | Name, email, WhatsApp (optional), company (optional), message, the service or product you picked, language and page. Automatically: IP address, approximate location (country, region and city, estimated from the IP) and device type. | To answer your request and send you scope, timeline and price. Basis: steps taken at your request before a contract (LGPD art. 7, V; GDPR art. 6(1)(b)). The IP also helps prevent abuse (a send limit), under legitimate interest. |
| You browse the site (our own measurement) | Pages viewed, where you came from (previous site and UTM parameters), clicks and where they happen on the page, language, browser, operating system, screen type and size, connection type, performance metrics, IP address, approximate location and internet provider. | To understand which services interest people, fix problems and make the site faster. Basis: legitimate interest (LGPD art. 7, IX; GDPR art. 6(1)(f)). |
| You browse the site (Google Analytics) | Browsing data collected by Google through cookies. | Audience statistics. Basis: your consent. Google Analytics only loads if you click "Accept" on the cookie notice, and you can change your choice anytime under "Cookie preferences" in the footer. |
| Business outreach by email (B2B) | Name, work email, company and website, from public sources or previous professional contact, and the technology the company's public website reports (for example, its PHP version). | To offer services relevant to your company. Basis: legitimate interest. Every email has a link to stop receiving them, and anyone who opts out is never emailed again. |
We don't use your data for automated decisions and we don't sell personal data.
Cookies and browser storage
- Our own measurement uses no cookies. It keeps a random session identifier in
sessionStorage, which is gone when you close the tab. - Google Analytics uses Google's own cookies (such as
_ga) to count visits, only after you accept. If you decline or change your mind, those cookies are deleted. - Preferences: the light or dark theme and your cookie choice are kept in your browser's
localStorage, only to remember what you chose.
Who we share it with
Only with providers that run the site for us, and only what each of them needs:
- Cloudflare: hosting, database and site protection.
- Resend: sending emails (contact notifications and business emails).
- Google: Google Analytics.
We may also share data when the law or an authority requires it.
International transfers
These providers process data on servers outside Brazil, including in the United States and the European Union. Transfers follow the safeguards set by the LGPD (art. 33) and the GDPR, such as the standard contractual clauses the providers offer.
How long we keep it
- Contact form requests: up to 2 years after the last contact. If you become a client, for as long as the relationship lasts and for as long as the law requires.
- Site measurement: up to 13 months.
- Business contacts who never replied: up to 12 months after the last email.
- Requests to stop receiving emails: we keep only the address, on a block list, to make sure we never write again.
After that, the data is deleted automatically.
Your rights
Under the LGPD (art. 18) and the GDPR you can ask, at any time and free of charge, for:
- confirmation that we process your data, and access to it;
- correction of incomplete or outdated data;
- anonymization, blocking or deletion of data that is unnecessary or processed against the law;
- portability, and information about who we share it with;
- objection to processing based on legitimate interest, including business emails.
Write to [email protected]. We reply within 15 days. If you're not satisfied, you can complain to ANPD in Brazil or to the data protection authority of your country in the European Union (in Portugal, CNPD).
Security
The site only runs over HTTPS. Access to the data is limited to our team, with a password and a protected session, and the forms and the login have limits against abuse. No system is infallible: if an incident puts you at risk, we'll tell you and the authorities as the law requires.
Children
The site is meant for businesses and is not directed at anyone under 18.
Changes to this policy
When the site starts collecting something new, we update this page and the date at the top. Important changes are also highlighted on the site.
