1. Who is responsible for your data
The brandlocal.ai site, including the English (/en/) and Spanish (/es/) versions and the private demos at /deck/, is operated by ZUPTECH SOFTWARE LTDA., registered under CNPJ (Brazilian company registry) 54.362.858/0001-25, with its head office at Rua Joaquim Floriano, 100, conj. 121, sala 3, Itaim Bibi, São Paulo, SP, Brazil, CEP 04534-000. BrandLocal and Unite are ZupTech brands.
For the processing described here, ZupTech is the controller of the personal data under the LGPD (Brazil's General Data Protection Law, Law No. 13,709/2018). In this policy, "BrandLocal", "we" and "our" refer to ZupTech.
Our data protection officer (encarregado) is Weverton Guedes, reachable at support@myunite.ai, the same address as the privacy channel.
2. What this policy covers
This policy applies to the company website: the public pages, the contact form, the private demos prepared for invited companies and the sales conversations that start here.
The BrandLocal platform, used by brands and by the people in their networks after the contract is signed, has its own terms and policy, presented when you access the platform, and follows the contract signed with each company. If your company already uses the platform, the rules for the data that flows through it are in those documents.
3. What data we process
When you contact us
The contact form asks for your name, work email, company, network type and network size. The message is optional. We also record the language of the page the form was sent from, so we can reply in the same language. The required fields are the minimum we need to be able to reply.
When the email is from a corporate domain, the tool that organizes our sales contacts may complete the company's record with public information, such as website, industry and size. If the conversation continues, we also keep the history of emails and meetings with the sales team.
When you browse
When you open any page, your browser sends some technical data to the infrastructure that hosts the site: IP address, date and time of access, requested page, referring page, and browser and operating system type. These records are used to deliver the pages, find errors and protect the site against abuse.
On your first visit to the home page, we use the approximate country of your connection, which the hosting provider infers from the IP address, to open the site in the likely language: Portuguese in Brazil, Spanish in Spanish-speaking countries and English everywhere else. This country is not stored in a cookie and is not linked to you.
When you open a private demo
The pages at /deck/ are prepared for invited companies and require a password. The password you type is checked on the spot and is not stored. With the correct password, your browser receives an access cookie, which contains a code derived from the password, never the password itself.
Some demos load fonts from an external service. In that case, the service receives your IP address and your browser's technical data, as with any network request.
What we do not collect
The public site does not use audience analytics tools, ad pixels, session recording or heatmaps. We also do not ask for sensitive personal data, such as data about health, racial or ethnic origin, religion, political opinion or biometrics (art. 5, II, of the LGPD). Please do not include this data in your message on the form.
4. What we use the data for, and on what legal basis
Each processing activity has a purpose and a legal basis under the LGPD:
| Purpose | Data used | Legal basis |
|---|---|---|
| Replying to your message and continuing the sales conversation you started | Form data and conversation history | Preliminary procedures related to a contract, at your request (art. 7, V), and legitimate interest (art. 7, IX) |
| Preparing private demos for invited companies and giving them access | Name and email of the person who receives the invitation, and access cookie | Preliminary procedures related to a contract (art. 7, V) and legitimate interest (art. 7, IX) |
| Delivering the site, fixing errors and preventing abuse | Technical browsing data | Legitimate interest (art. 7, IX) |
| Keeping access logs required by law and responding to requests from authorities | Technical browsing data | Compliance with a legal obligation (art. 7, II), including the Brazilian Internet Civil Framework (Marco Civil da Internet, Law No. 12,965/2014) |
| Remembering the language you chose from one visit to the next | Preference cookie | Consent (art. 7, I), given in the cookie notice |
| Defending rights in judicial, administrative or arbitration proceedings | The data needed for the case | Regular exercise of rights (art. 7, VI) |
When the basis is legitimate interest, we use only what is needed for the purpose, within what you would expect from a sales conversation you started yourself. You can object to this use at any time through the channel in section 8.
After you contact us, the sales team may send you emails about the conversation, such as the proposal, scheduling and pilot materials. We do not add your email to a newsletter unless you ask. To stop receiving these emails, reply to any of them and ask, or write to the privacy channel.
The site does not make automated decisions about you and does not build a profile of your browsing behavior.
5. Who we share it with
We do not sell personal data. We share only what is needed, and only with:
- service providers that run the site and our sales work, such as hosting and page delivery, the tool that organizes our sales contacts, and email and calendar services. They process the data on our behalf, following our instructions, under contractual confidentiality and security obligations;
- the external font service used by the private demos, within the limits described in section 3;
- public authorities, when the law or a court order requires it;
- the successor company, in the event of a merger, acquisition or sale of assets, which will be bound to respect this policy.
You can request the current list of service providers that process your data through the privacy channel (art. 18, VII, of the LGPD).
6. Transfers to other countries
Some of these service providers store or process data outside Brazil, in countries such as the United States. These transfers follow art. 33 of the LGPD and the regulations of the Brazilian National Data Protection Authority (ANPD), with safeguards such as contractual clauses, and are limited to what is needed for each purpose.
7. How long we keep it
- Sales contacts that do not become a contract: up to 24 months after the last contact, or sooner if you ask for deletion.
- Contacts that become a contract: for the duration of the contract and, after it ends, for the legal retention periods, such as tax periods and periods for defense in legal proceedings.
- Technical access logs: for as long as needed for the security of the site and for the period required by law, including art. 15 of the Brazilian Internet Civil Framework (Marco Civil da Internet).
- Cookies: the periods are in the table in section 9.
At the end of the period, the data is deleted or anonymized.
8. Your rights
Under the LGPD (arts. 18 and 20), you can request at any time:
- confirmation that we process your data, and access to it;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of data that is unnecessary, excessive or processed in breach of the law;
- portability of the data to another provider, subject to commercial and industrial secrets;
- deletion of data processed based on your consent;
- information about the public and private entities we share data with;
- information about the possibility of not giving consent and about what happens if you refuse;
- withdrawal of consent;
- objection to processing carried out on another legal basis, if it does not comply with the LGPD;
- review of decisions made solely by automated processing. The site does not make decisions of this kind.
To make a request, write to support@myunite.ai with the subject "BrandLocal Privacy" and tell us which right you want to exercise. Before we act on it, we may ask you to confirm your identity, so we do not hand your data to someone else. The request is free, and you will receive the full response within 15 days, the period set by art. 19 of the LGPD.
If the response does not resolve the matter, you can file a complaint with the ANPD at gov.br/anpd.
9. Cookies
Cookies are small files that a website stores in your browser. We use three, all set by BrandLocal itself. The public site does not set third-party cookies.
| Cookie | What it does | Type | Duration |
|---|---|---|---|
bl_consent | Stores the choice you made in the cookie notice, so the notice does not appear on every page | Necessary | 12 months |
bl_lang | Remembers the language chosen in the PT · EN · ES selector, so the home page does not switch the language based on the country of your connection | Preference | 12 months, with your permission. Without it, it lasts until you close the browser |
bl_deck_ + demo name | Opens access to a private demo after you enter the correct password | Necessary | 30 days |
Necessary cookies do not depend on consent, because without them the site cannot do what you asked it to do. The preference cookie lasts beyond your visit only with your permission.
We do not use audience measurement or advertising cookies. If we ever start using a tool in one of these categories, it will appear in this table and in the cookie notice switched off, and we will ask for your choice again before turning it on.
You can change your choice whenever you want, through the "Cookie preferences" link in the footer of any page or here: . You can also delete or block cookies in your browser settings. Blocking the necessary cookies prevents access to the private demos.
10. Security
We use technical and administrative measures to protect data against unauthorized access, loss and alteration. All pages use an encrypted connection (HTTPS). Access to sales contacts is restricted to the people who need them for their work. Demo passwords are not stored, and service providers take on contractual security obligations.
If a security incident occurs that may pose a significant risk or harm to you, we will notify the ANPD and the affected people, as required by art. 48 of the LGPD.
Found a vulnerability? Write to support@myunite.ai. The rules for reporting are in clause 10 of the Terms of use.
11. Children and teenagers
The site is aimed at companies and professionals, is not directed at anyone under 18 years old, and we do not knowingly collect data from minors. If we identify a minor's data sent through the form, it will be deleted.
12. If you are outside Brazil
If you are in the European Union, the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR) may also apply. In that case, the corresponding legal bases are pre-contractual measures at your request and legitimate interest, for the sales contact and the demos; compliance with a legal obligation, for the access logs; and consent, for the language cookie.
You have the right to access, rectify, erase, restrict and port your data, to object to processing, and to withdraw consent at any time, without affecting what was done before. We respond within one month. You can also file a complaint with the data protection authority in your country.
13. Changes to this policy
We may update this policy when the site, the law or the way we work changes. The date of the current version is at the top of the page. If a change affects something that depends on your consent, we will ask for your choice again. Previous versions can be requested through the privacy channel.
14. Contact
ZUPTECH SOFTWARE LTDA. · CNPJ 54.362.858/0001-25
Rua Joaquim Floriano, 100, conj. 121, sala 3, Itaim Bibi, São Paulo, SP, Brazil, CEP 04534-000
Data protection officer (encarregado): Weverton Guedes · support@myunite.ai
This policy is available in Portuguese, English and Spanish. If there is any discrepancy between the versions, the Portuguese version prevails.