1. Introduction

Registra UP ("we", "us", or "our") operates the website launch.registraup.com and related digital services. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, submit a contact form, or otherwise interact with our services.

By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access our website or submit any personal information.

2. Data Controller

The data controller responsible for your personal data is:

Registra UP
Email: launch@send.registraup.com

If you have any questions or concerns about this Privacy Policy or our data practices, you may contact us at the email address above.

3. Information We Collect

We collect information that you voluntarily provide to us and information that is automatically gathered when you use our website.

3.1 Information You Provide

Contact Information: Full name, email address, and business name submitted through our contact form.
Project Details: Messages, descriptions of your business needs, and any additional information you choose to share.
Google Maps / Google Places URL: An optional link you may provide so we can review your business profile and customer reviews to better tailor our proposals.

3.2 Information Collected Automatically

Usage Data: Pages visited, time spent on pages, click patterns, referring URLs, and browser/device type.
IP Address: Collected for rate-limiting purposes and security. IP addresses are not stored persistently and are only held in server memory for the duration of the rate-limiting window (up to 10 minutes).
Cookies and Similar Technologies: See Section 10 for details.

4. How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery: To respond to your inquiries, prepare project proposals, and deliver the web development services you request.
Communication: To send you project-related emails, including proposals, progress updates, and invoices.
Security and Abuse Prevention: To enforce rate limits on form submissions, detect fraudulent activity, and protect the integrity of our platform.
Analytics and Improvement: To understand how visitors use our website and to improve its design, content, and performance.
Legal Compliance: To comply with applicable laws, regulations, and legal processes.

5. Legal Basis for Processing

We process your personal data under the following legal bases, as applicable under the LGPD (Brazil) and the GDPR (EU/EEA):

Consent: When you submit the contact form, you consent to the processing of your data for the purpose of receiving a response or proposal.
Legitimate Interest: We have a legitimate interest in processing data for website analytics, fraud prevention, and improving our services, provided these interests are not overridden by your fundamental rights.
Contractual Necessity: When processing is necessary for the performance of a contract to which you are a party, or to take pre-contractual steps at your request.
Legal Obligation: When processing is required to comply with a legal obligation to which we are subject.

6. Third-Party Service Providers

We rely on trusted third-party service providers to operate our platform. Each provider processes data only as necessary to perform their designated function and is bound by their own privacy policies and data processing agreements:

Vercel (Vercel Inc., USA) — Hosting, deployment, and edge network infrastructure. Vercel may process request metadata (IP addresses, user-agent strings) as part of its service. Vercel Privacy Policy.
Vercel Analytics — Privacy-focused, cookie-less web analytics used to understand aggregated usage patterns. No personally identifiable information is collected by this service.
Resend (Resend Inc., USA) — Transactional email delivery. When you submit the contact form, your name, email, business name, message, and optional Google Maps link are transmitted to Resend to deliver a notification email to our team. Resend Privacy Policy.
Supabase (Supabase Inc., USA) — Database and backend infrastructure for secure storage of lead and user data. Supabase Privacy Policy.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:

Contact form submissions: Retained for up to 24 months from the date of submission, or until you request deletion, whichever comes first.
IP addresses (rate limiting): Held in server memory only and automatically discarded after the rate-limiting window expires (maximum 10 minutes). They are not written to any persistent storage.
Analytics data: Aggregated and anonymized; retained in accordance with Vercel Analytics' own retention schedule.

8. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal data, including:

Encryption in transit (TLS/HTTPS) for all communications between your browser and our servers.
Rate limiting on form submissions to prevent abuse and automated attacks.
Server-side input validation using schema validation (Zod) to reject malformed or malicious data before processing.
Access controls that restrict data access to authorized personnel only.

Despite our efforts, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee the absolute security of your data.

9. International Data Transfers

Our service providers (Vercel, Resend, Supabase) are based in the United States. If you are accessing our website from outside the United States — including from Brazil or the European Economic Area — your personal data may be transferred to, stored, and processed in the United States or other jurisdictions where our service providers operate.

These transfers are carried out in compliance with applicable data protection laws, including through the use of Standard Contractual Clauses (SCCs) approved by the European Commission where required by the GDPR, and in accordance with the international transfer provisions of the LGPD.

10. Cookies and Tracking Technologies

Our website uses a minimal set of cookies and tracking technologies:

Strictly Necessary Cookies: Required for core site functionality, such as locale preference and session management. These cannot be disabled.
Analytics: Vercel Analytics operates without setting cookies and does not track individual users across sessions. It collects only anonymized, aggregated data.

We do not use advertising cookies, social media tracking pixels, or any third-party marketing trackers.

11. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Under the LGPD (Brazil)

Confirmation of the existence of processing.
Access to your data.
Correction of incomplete, inaccurate, or outdated data.
Anonymization, blocking, or deletion of unnecessary or excessive data.
Data portability to another service provider.
Deletion of data processed with your consent.
Information about public and private entities with which your data has been shared.
Information about the possibility of denying consent and the consequences thereof.
Revocation of consent.

Under the GDPR (EU/EEA)

Right of Access: You may request a copy of the personal data we hold about you.
Right to Rectification: You may request correction of inaccurate or incomplete data.
Right to Erasure: You may request the deletion of your personal data ("right to be forgotten").
Right to Restrict Processing: You may request that we limit how we use your data.
Right to Data Portability: You may request to receive your data in a structured, machine-readable format.
Right to Object: You may object to processing based on legitimate interest.
Right to Lodge a Complaint: You have the right to file a complaint with a supervisory authority in your country of residence.

To exercise any of these rights, please contact us at launch@send.registraup.com. We will respond to your request within 15 business days (LGPD) or 30 calendar days (GDPR).

12. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

Registra UP
Email: launch@send.registraup.com
Website: registraup.com

15. Cookies and Tracking (LGPD Compliance)

In compliance with the Brazilian General Data Protection Law (LGPD) and international standards, our website utilizes strictly necessary cookies to ensure proper functionality and analytical cookies to understand how you interact with our platform. We do not use these cookies for advertising purposes or sell your data. You can manage your cookie preferences at any time through our cookie consent banner. For requests regarding your data, please contact our Data Protection Officer at dpo@send.registraup.com.