This policy explains how the tatusec.dev website handles personal data, under LGPD (Brazil's data protection law). It does not cover the product: when scanning opens, it will have its own notice.
Who the controller is
The controller is Schwendler Consultoria LTDA, CNPJ 42.693.795/0001-00, which operates TatuSec.
Contact for privacy matters: privacy@tatusec.com.
What data we process
- Access data. When you open the site, your browser sends the network that delivers it your IP address, the date and time, the page requested and technical details about your browser and device. Your browser may also send Cloudflare technical reports about connection failures. Cloudflare, which delivers and protects the site, processes this data as our operator.
- Messages. If you write to one of our email addresses, we process your email address, your name (if given) and the content of your message. The email provider we use acts as an operator.
This site has no forms, uses no analytics or advertising tools and does not build visitor profiles.
Cookies
TatuSec does not set cookies on this site. Cloudflare may set technical security cookies, for example to tell legitimate visitors from automated traffic, if those protection features are active. We do not use analytics, advertising or tracking cookies.
Purposes and legal bases
- Delivering and protecting the site, which includes security, abuse prevention and availability. Legal basis: the controller's legitimate interest (LGPD, art. 7, IX).
- Replying to your messages. Legal basis: legitimate interest (art. 7, IX) and, when you ask for information with a view to a possible contract, preliminary procedures related to a contract, at your request (art. 7, V).
Who we share data with
Data is processed by operators that provide services to TatuSec: Cloudflare (hosting, delivery network and site security) and our email provider. We do not sell personal data.
International data transfer
Cloudflare operates a global network of servers. When you visit the site, access data may be processed in other countries, including outside Brazil. This is an international data transfer under article 33 of LGPD.
The same may apply to our email provider.
How long we keep data
- Access data: TatuSec does not keep these records itself. Cloudflare keeps them under its own retention policies.
- Email messages: for as long as needed to handle your request and, after that, for as long as legal obligations require or to exercise legal rights. After that, they are deleted.
Your rights
You may exercise at any time the rights in article 18 of LGPD: confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary data, portability, information about sharing and objection to processing done without consent. Write to privacy@tatusec.com.
You may also lodge a complaint with Brazil's data protection authority (ANPD).
Changes
If this policy changes, we will update the date at the top of this page.