Privacy Policy

Last updated: September 17, 2026.

This Policy explains how Lead Tracker LTDA, Brazilian corporate taxpayer ID (CNPJ) 37.258.502/0001-27, headquartered in Curitiba, Paraná, Brazil, processes personal data on the website and in Vestige Metrics in accordance with the Brazilian General Data Protection Law (LGPD).

1. Who we are and our roles

We are controllers of data relating to visitors, leads, business contacts, account users, and customers. When a customer enters third-party data into the Service, we act as a processor in accordance with the customer’s instructions and the applicable agreement.

2. Data we process

We may process identification and contact data; account, authentication, plan, payment, and support data; IP address, browser, device, logs, and technical events; campaigns, UTMs, pages, leads, and sales; as well as preferences and consent records. We do not request sensitive data or children’s data; do not enter such data without an appropriate legal basis.

3. Purposes and legal bases

We use data to provide, maintain, and protect the Service; create and manage accounts; process payments; respond to requests; improve products and security; comply with legal obligations; exercise legal rights; and send commercial communications when permitted. Legal bases may include performance of a contract, compliance with a legal obligation, regular exercise of rights, legitimate interests, and consent.

4. Cookies

We use cookies necessary for operation, security, sessions, and preferences. Depending on the website configuration and applicable legal basis, we may also use analytics or marketing cookies. You can manage cookies in your browser, but disabling necessary cookies may affect functionality.

5. Sharing

When necessary, we share data with hosting, authentication, support, communications, analytics, payment, and security providers. We may also share data to comply with legal orders, prevent fraud, or protect rights. We do not sell personal data.

6. International transfers

Some providers may process data outside Brazil. In such cases, we adopt the safeguards and mechanisms required by the LGPD and the rules of the Brazilian Data Protection Authority (ANPD), as applicable.

7. Retention and deletion

We retain data for the period necessary for the purposes of this Policy, performance of the agreement, compliance with legal and regulatory obligations, or exercise of rights. Afterwards, we delete or anonymize the data unless retention is legally permitted or required.

8. Security and incidents

We adopt reasonable technical and administrative measures, including access controls, segregation, monitoring, and credential protection. No environment is completely secure. If a relevant incident occurs, we will take the measures and provide the notices required by the LGPD and the ANPD.

9. Your rights

You may request confirmation and access, correction, anonymization, blocking or deletion where applicable, information about sharing, portability, withdrawal of consent, objection, and review of automated decisions under the LGPD. Send requests to [email protected]; we may verify your identity.

10. Data entered by customers

If you are the data subject of information entered by a customer, first contact that customer for information or assistance. Vestige may assist within legal and contractual limits and may forward requests received directly.

11. Children and adolescents

The Service is not directed to children. If data is entered improperly, contact us so that we can assess its deletion or regularization.

12. Changes and contact

We may update this Policy and will publish the current version on this page. For questions, exercise of rights, or contact with the data protection officer (DPO), email [email protected] or [email protected]. You may also contact the ANPD.