Privacy policy

This policy explains how personal data is processed on megaleios.com, operated by Megaleios to present its services and serve businesses in Brazil and the United States. For privacy questions or to exercise your rights, email Get in touch.

Data you provide

When you contact us, you may provide your name, email, phone number or WhatsApp, company, project type, investment range, and a message. In the AI assessment, you may also provide answers about your business processes and needs. Optional fields are identified on the forms.

Do not include passwords, banking details, identification documents, or sensitive personal information in messages. Confidential project information can be handled later through an appropriate channel and under the conditions applicable to the engagement.

Browsing data

Operating the site may generate technical records, such as IP address, date and time, requested page, and browser information. Campaign parameters in the URL, such as UTM parameters, may accompany a request to identify its source.

We use Google Tag Manager to manage existing measurement tags, including Google Analytics and Google Ads. These tools may use cookies and identifiers to measure visits, interactions, and conversions. Names, email addresses, phone numbers, and message text must not be sent as Analytics event parameters.

To measure ad conversions, the existing Google Ads configuration uses enhanced conversions: email addresses and phone numbers you provide may be processed as hashed identifiers before being sent to Google. This mechanism may store these details in the browser’s local storage between completing and confirming a form. Hashing does not make this data anonymous. You can delete local data for this site in your browser settings. See also how Google uses enhanced conversions.

You can control cookies in your browser settings and review Google’s privacy controls. Blockers and cookie restrictions may limit measurement. Providers’ policies explain their own data processing: Google and Cloudflare.

How we use data

We process the information needed to respond to contact requests, understand your needs, prepare a proposal, take preliminary steps you request, provide contracted services, protect the site, and evaluate its operation and the source of inquiries.

Processing takes account of the purpose and legal basis applicable in each case, including preliminary steps and performance of a contract, legal obligations, consent where required, and legitimate interests where applicable, while respecting your rights. Sending a contact request is not blanket authorization for other purposes.

Providers and data sharing

Services used in our operations include Cloudflare for site delivery and protection, Hostinger for WordPress and file hosting, and Google Workspace for email communication. Google Analytics and Google Ads may receive browsing and measurement data. Access must be limited to what is necessary for each activity.

When you choose to chat on WhatsApp or visit a social network, you also use an external service subject to that provider’s policies. We may share information when necessary to address your request, comply with legal obligations, or protect rights. We do not sell data submitted through forms.

International processing

Megaleios serves Brazil and the United States, and its providers may operate infrastructure in other countries. This may involve international data processing. Where applicable, the relevant legal requirements and safeguards for international transfers must be observed.

Retention and security

Data is retained for the period necessary for handling inquiries, the contractual relationship, and applicable legal obligations. There is no single retention period for all records. Deletion requests are assessed in light of data subjects’ rights and legal grounds for retention.

We adopt technical and administrative measures appropriate to the processing and restrict access to information. No system offers absolute protection; suspected misuse can be reported to the privacy email address above.

Your rights

Under applicable law, you may request confirmation of processing, access, correction, information about sharing, deletion, or other applicable measures. You may also request withdrawal of consent and raise objections or questions where provided by law.

Send your request to Get in touch. We may request proportionate information to confirm your identity and prevent disclosure of data to third parties. Requests will be handled under the applicable legal requirements and deadlines.

Updates

This policy may be updated to reflect changes to the site and its operation. The update date is shown on this page.