Privacy
Policy.

1. Who is responsible for the data

Botilink is the controller of personal data processed through this site and determines the purposes and essential means of this processing.

Considering the current nature and scale of Botilink's activities as a small-scale processing agent, there is no formally appointed data protection officer. The email contato@botilink.com acts as a direct channel for data subjects and privacy-related matters.

2. Data processed and purposes

The message field is free text. We do not request sensitive personal data, documents, passwords, or financial information through this form. We ask that you do not include this type of data in your message.

3. Legal bases

Depending on the purpose and context, Botilink carries out processing based on the following LGPD hypotheses:

• preliminary procedures related to a potential contract, carried out at the request of the data subject;
• legitimate interest in responding to requests, maintaining business relationships, and protecting the site against abuse, always respecting the rights and expectations of the data subject;
• compliance with legal or regulatory obligations; and
• regular exercise of rights in judicial, administrative, or arbitration proceedings, when necessary.

Submitting the form is not treated as consent for advertising. Botilink does not use the submitted data to automatically add the data subject to marketing lists.

4. Sharing and processors

Botilink does not sell personal data. Sharing is limited to what is necessary to operate the site and fulfill the purposes described in this policy.

• Hostinger: provides hosting, infrastructure, security, and email services, acting as a processor according to Botilink's instructions and its own legal duties;
• professional providers: accounting, legal advice, or technical support, when access is necessary and subject to confidentiality duties; and
• public authorities: when there is a legal obligation, valid order, or need for regular exercise of rights.

5. International transfers

Some infrastructure providers may process or store data in other countries. When this characterizes an international data transfer, Botilink will adopt the mechanisms and safeguards provided for in Articles 33 to 36 of the LGPD and in the regulations of the National Data Protection Authority (ANPD), including adequate contractual and security measures.

The visual fonts used by the site are hosted on Botilink's own domain and are not loaded directly from external services.

6. Cookies and similar technologies

In this version, the site does not use its own advertising, behavior analysis, or personalization cookies, does not employ marketing tracking tools, and does not store tracking preferences in the browser.

For this reason, the site does not display a consent banner: there are currently no non-essential technologies that depend on this authorization.

If non-essential technologies are added in the future, this policy will be updated and, when required, they will remain disabled until there is a free and informed choice from the visitor.

7. Retention and deletion

• Contacts and emails: generally, during support and for up to 24 months after the last interaction, unless there is a contract, legal obligation, or need for retention to exercise rights;
• anti-abuse control: the pseudonymous identifier is considered over a 15-minute operational window. Expired logs are deleted during the form's processing and maintenance cycles;
• infrastructure logs: kept according to the technical, contractual, and legal timeframes applicable to the hosting service.

Once the purpose has ended, the data is deleted or anonymized, except in the retention cases authorized by Articles 15 and 16 of the LGPD.

8. Security

Botilink adopts technical and administrative measures proportional to the risk, including HTTPS connection, input validation, submission limiting, storage of technical controls outside the public folder, and access restrictions. No system is completely immune to incidents, but any occurrences will be evaluated and communicated in accordance with LGPD and ANPD regulations.

9. Data subject rights

Under the terms of the LGPD, you can request, when applicable:

• confirmation of the existence of processing and access to the data;
• correction of incomplete, inaccurate, or outdated data;
• anonymization, blocking, or deletion of unnecessary or excessive data, or data processed in non-compliance;
• portability, observing regulations and commercial and industrial secrets;
• information about public and private entities with which data was shared;
• deletion and revocation of consent, when this is the applicable legal basis;
• opposition to processing carried out in non-compliance with the LGPD; and
• petitioning before the ANPD and consumer protection bodies.

Requests are free and can be sent to contato@botilink.com. To protect the data subject themselves, we may request reasonable information to confirm their identity before fulfilling the request.

10. Children and adolescents

The site is aimed at presenting services to companies and professionals and is not specifically intended for children. If inappropriate processing of a child's or adolescent's data is identified, the guardian may request its analysis and deletion through the privacy channel.

11. Changes to this policy

This policy may be updated to reflect changes to the site, services, or legislation. The current version will always be available on this page, indicating the date of the last update. Relevant changes will be highlighted when necessary.