Privacy Policy

Who handles your data

CRATON Software is the controller of the personal data handled on this site. We are a small software house, and here you talk directly to the person who builds.

Contact for privacy matters:contato@craton.com.br

Location: Tambaú, SP

What we collect

Only what is needed, through three paths:

• Contact form.Name, e-mail, phone and the message you write. They go to our inbox so that we can reply, which is the only purpose.
• Technical access logs.IP address, browser, page visited and time. Any web server generates this automatically, and it serves security and keeping the site online.
• Ad measurement.Only if you accept. That is the subject of the next section.

We do not collect sensitive data, we do not ask for identity documents, and this site has no sign-up and no login.

Cookies and measurement

This site uses no advertising cookie without your consent. Until you accept, nothing is stored in your browser for marketing purposes and no browsing data leaves here for any ad platform.

If you accept, we store two identifiers in your browser for 90 days and start sending your browsing events to Meta, to measure how our ads perform. Those events leave from our own server, not from your browser, and include the page visited, the time, your IP address and your browser. The legal basis is your consent.

This site loads no third-party tracking script. The audience measurement that always runs is Cloudflare's, aggregated, cookie-free and without identifying visitors.

You can change your mind whenever you want, with the same effort as a single click:

Who we share with

With the providers needed to run the site, and with no one else. We do not sell personal data.

• Meta, for ad measurement, and only with your consent.
• Cloudflare, which hosts the site and measures audience in aggregate.
• Supabase, which stores the blog content.
• Web3Forms and Zoho, through which your contact message travels to our inbox.

How long we keep it

Contact messages stay for the length of the commercial conversation and for up to five years afterwards, the general retention period for business records. Measurement identifiers expire in 90 days. Technical access logs are kept for up to six months.

Your rights

Brazilian data protection law (LGPD) entitles you to request confirmation of processing, access, correction, anonymisation, portability and deletion of your data, and to withdraw consent at any time. Write to the contact address shown at the top of this page and we reply within fifteen days. We charge nothing for it and we ask for no justification.

Changes to this policy

When something relevant changes, the date at the top changes with it and we ask for your consent again. Old consent does not cover a new purpose.