Privacy Policy

Last updated · 26 September 2026

This policy explains how Nova ("Nova", "we") handles personal data on novaconsulting.digital. Nova is the controller of the personal data described here, under Brazil's General Data Protection Law (Lei nº 13.709/2018, "LGPD").

What we collect

When you write to us. The contact form asks for your name, email and message, and optionally your company. We receive exactly what you type.
When you accept analytics. Google Analytics records how the site is used: pages viewed, approximate location, device and browser type, and how you arrived. Nothing is collected for analytics unless you accept.
When you visit. Our hosting providers process technical data, such as your IP address and browser details, to deliver the pages and keep the service secure.

Please don't include sensitive personal data, such as health or financial details, in your message. This site is not meant for children, and we do not knowingly collect their data.

Why we use it

To reply to your message and discuss the work you ask about. Legal basis: steps you request before a possible contract, and our legitimate interest in answering (LGPD, art. 7, V and IX).
To understand how the site is used, only with your consent (art. 7, I). You can withdraw it at any time.
To operate the site securely. Legal basis: legitimate interest (art. 7, IX).

We do not sell personal data, and we do not use it to make automated decisions about you.

Who processes it for us

These service providers process data on our instructions:

GitHub Pages hosts the site.
Vercel runs the function that receives the contact form.
Resend delivers the form to our inbox as an email.
Google Analytics measures site use, only if you accept.

These providers may process data outside Brazil, including in the United States. Those transfers rely on the data protection terms each provider offers its customers (LGPD, art. 33).

Cookies and storage

By default this site sets no cookies. Its fonts are served from our own domain, so loading a page does not contact a third party for them.

If you accept analytics, Google Analytics sets cookies named _ga and _ga_* to tell visits apart. If you decline, none are set. Your choice is kept in your browser's local storage, not in a cookie.

Analytics is not active on this site at the moment.

How long we keep it

Contact messages: as long as we need them to handle your request and any work that follows. We delete them when you ask, unless the law requires us to keep them.
Analytics data: no longer than 14 months.
Technical logs: for the periods set by our hosting providers.

Your rights

Under the LGPD (art. 18) you can ask us to:

confirm whether we process your data, and give you access to it;
correct incomplete, inaccurate or outdated data;
anonymize, block or delete data that is unnecessary or processed unlawfully;
delete data processed with your consent, and withdraw that consent;
tell you who we share it with;
port it to another provider.

To make a request, write to us through the and start your message with "Privacy request". We answer within 15 days. You can also complain to Brazil's data protection authority, the ANPD, at gov.br/anpd.

Security

The contact form is sent over an encrypted connection (HTTPS), and messages reach a limited number of people at Nova.

Changes

If we change this policy, we will update this page and the date at the top.