Privacy Policy
Who is responsible for your data
The controller of the personal data processed on this site is Lemamon.dev LTDA (CNPJ 69.700.690/0001-98, its Brazilian company registration number), the company responsible for Lemamon.dev (lemamon.dev), based in São Paulo, SP, Brazil. For any matter concerning your data, including exercising your rights, write to comercial@lemamon.dev.
Data you provide
We receive this data when you submit a form or get in touch with us:
- Through the quote and contact forms: name, email, phone or WhatsApp number, company, your answers to the questions, your preferred contact channel, the subject and the message.
- Along with each request: the page language and where the visit came from, such as the ad, campaign or link that brought you to the site.
- On submission: technical data that the form-handling service may record, such as your IP address and browser.
- Through WhatsApp or email: whatever you send in those conversations.
While you're answering the quote form, a draft with your answers and where your visit came from is stored in your browser, so you can continue later. What you type on the contact step of that form (name, email, phone, company and the details about your project) is stored separately, only while the tab is open, so it isn't lost if the page reloads.
From the moment you arrive, the first page you opened and where your visit came from (the ad, campaign or site that brought you here) are stored in your browser while the tab is open, and are sent along with your request if you submit the quote form or the contact form. If you open the site in another tab while that one is still open, the new tab keeps the same information about where your visit came from. If your request follows a click on a Google ad that is no longer stored in the tab, the ID of that click may be read from the Google Ads cookie. After a click on a Google ad, the WhatsApp messages the site prepares include a short campaign reference (for example, “Ref.: G-mvp”), which you can see and delete before sending. Where your visit came from is also measured by the tools described in Browsing data.
If the draft isn't updated for 30 days, it expires and is deleted the next time you visit the site. You can also delete it by clearing the site's data in your browser.
After you submit, the draft and the contact details you typed are deleted, and a summary of the request is kept only in the open tab, to show the confirmation page, until you close it.
This site is aimed at businesses and is not intended for children or teenagers. We don't knowingly collect data from minors; if we realize that has happened, we delete that data.
No field asks for sensitive data, such as health, religion, political opinions or biometrics, and we ask that you don't include it in your messages.
What we use it for
We use the data to:
- Respond to your request, schedule and hold the assessment, send the written feedback and, if you want to continue, run the Discovery Sprint, when agreed, and send the development proposal.
- Organize the order in which we handle requests. The multiple-choice answers generate an automatic classification for each request, which is used to organize that order.
- Follow up if the conversation doesn't get scheduled, and reply to messages about other topics.
- Know how you got to the site, for example through an ad or a campaign. This includes telling Google Ads that a request was submitted after an ad click and how that request progressed.
- Understand how the site is used, fix errors and measure ad results, using browsing data.
We don't sell personal data.
Legal basis
Each use of the data has a legal basis under Brazil's General Data Protection Law (LGPD):
- Handling your assessment request, sending the feedback, running the Discovery Sprint, when agreed, and sending the proposal: preliminary steps toward a possible contract, taken at your request (Art. 7, V).
- Organizing the order in which we handle requests, following up, replying to messages about other topics and knowing, for our own internal use, which channel the request reached us through: Lemamon.dev's legitimate interest (Art. 7, IX).
- Operating the site, keeping it secure and fixing errors using the hosting's technical access logs: Lemamon.dev's legitimate interest (Art. 7, IX).
- Measuring how the site is used with Google Analytics cookies: your consent, given in the cookie notice (Art. 7, I). You can withdraw it at any time in cookie preferences.
- Measuring the site's speed, errors, security and stability with New Relic, to keep it fast and secure: your consent, given in the cookie notice (Art. 7, I). You can withdraw it at any time in cookie preferences.
- Measuring ad results with Google Ads cookies and telling Google Ads how a request that came from an ad progressed: your consent, given in the cookie notice (Art. 7, I). You can withdraw it at any time in cookie preferences.
- If a contract is signed: performance of the contract and compliance with legal obligations (Art. 7, V and II).
Where the basis is legitimate interest, you can object to the processing by writing to comercial@lemamon.dev.
Who we share it with
The data passes through the providers we rely on to run the site and respond to you:
- Netlify: site hosting and form handling. Form spam filtering uses Akismet (Automattic, USA).
- Google Analytics: measuring how the site is used.
- Google Ads: measuring ad results. Google also processes some of this data under its own privacy policy.
- Microsoft 365 (purchased through GoDaddy): Lemamon.dev's email.
- New Relic: site performance and errors.
If you talk to us on WhatsApp, the conversation goes through WhatsApp, a Meta service: Lemamon.dev receives what you send, and Meta processes the conversation data under its own privacy policy.
These providers and WhatsApp store data outside Brazil, mainly in the United States. We also share data when required by law or by a competent authority.
How long we keep it
We keep the data for these periods:
- Requests and messages that don't lead to a contract: for up to 24 months after the last contact. After that, we delete this data from the form-handling service, our email and our WhatsApp.
- Requests and messages tied to a signed contract: for as long as the law requires.
- Browsing data in Google Analytics: 14 months.
- Google Ads cookies in your browser: up to 90 days.
- Conversions reported to Google Ads: per Google's data-retention policy.
- Browsing data in New Relic: 8 days.
- Access logs at Netlify: about 7 days.
You can request deletion of your data at any time by writing to comercial@lemamon.dev, except where the law requires us to keep it.
Your rights
Under the LGPD (Art. 18), you can request at any time:
- Confirmation that we process your data, and access to it.
- Correction of anything incomplete, inaccurate or out of date.
- Anonymization, blocking or deletion of anything unnecessary, excessive or processed in breach of the LGPD.
- Portability of your data to another service or product provider, subject to ANPD regulation.
- Information about who we share your data with.
- Withdrawal of consent, where consent is the basis for the processing.
- Deletion of data processed with your consent.
- Information about the option not to consent and about what happens if you don't.
- Objection to a processing activity.
- Review of decisions made solely on the basis of automated processing, such as the classification that organizes the order in which we handle requests (Art. 20).
Just write to comercial@lemamon.dev, and we'll respond within the period set by law. You can also file a complaint with Brazil's National Data Protection Authority (ANPD).
Privacy questions and requests
Requests and questions about your data: comercial@lemamon.dev. Put “Privacy” in the subject line so we can identify your request. If we change this policy, we'll update the date at the top of this page.