How we handle data on this site
Last updated: . This policy explains what happens to data in the contact form and while you browse areaface.com. The site does not access your device's camera.
Who is the controller
The controller of the data processed on this site is Areatec Tecnologia e Serviços Ltda, based in Araras — SP, Brazil. For any privacy or data protection matter, write to contact@areaface.com.
Camera
This site does not access your device's camera and does not collect face images or biometric data. Demonstrations of the AreaFACE engine are held with the Areatec team and scheduled through the contact form.
Contact form
Data collected: organization profile, modules of interest, estimated scale, full name, role, organization, city/region, corporate email, phone/WhatsApp and the technical scenario you describe. We also record the page language. To block automated and abusive submissions, the server checks technical request data such as the IP address and how long the form took to fill in.
Purpose: to reply to your request and, where relevant, prepare and follow up on a commercial proposal. The form does not send you an automatic email: our team replies to the email you provided.
Legal basis: we process this data under Article 7, V, of Brazil's General Data Protection Law (LGPD — preliminary procedures related to a contract, carried out at your request) and Article 7, IX (Areatec's legitimate interest in answering business inquiries and following up on the negotiation).
Recipients: the Areatec team handling the request and the providers that operate the service on our behalf: Resend (delivers the email with your request to our team), Google (Google Workspace, which hosts our team's mailboxes where your request is delivered), Supabase (database, when enabled) and Cloudflare (site hosting and, when enabled, the Turnstile anti-bot check). These providers may process data outside Brazil. We do not sell this data or use it for advertising.
Retention: for as long as needed to reply to and follow up on the proposal, and at most 24 months without further interaction. This limit also applies to the emails with your request in our team's mailboxes. We review the records periodically and delete the data after that period. The providers listed above may keep technical delivery logs for the periods set in their own policies.
Your rights (LGPD, Article 18)
You may request at any time: confirmation that we process your data; access to it; correction of incomplete, inaccurate or outdated data; anonymization, blocking or deletion of unnecessary or excessive data; portability; deletion of your data; information about whom we share it with; and objection to processing based on legitimate interest. Write to contact@areaface.com. You may also file a complaint with Brazil's National Data Protection Authority (ANPD).
Google Fonts and hosting
Pages load typefaces from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). To download them, your browser connects to Google's servers, which receive your IP address and technical request data such as your browser type. The site is hosted on Cloudflare, which processes technical connection data, such as the IP address, to deliver the pages and protect the site against abuse, under its own retention rules. Our server's own technical logs (event and error types, without the contents of the form) stay in the Cloudflare dashboard for up to 7 days, for operation and security.
Cookies
We do not use advertising or audience analytics cookies. Cloudflare may use technical security cookies needed to protect the site.
Security
We apply technical and administrative measures proportionate to the data processed, including encrypted connections (HTTPS), server-side validation and rate limiting of submissions, and access to contact data restricted to the team that handles requests. No measure removes every risk; if a security incident occurs that may cause relevant risk or harm, we will notify affected data subjects and the ANPD as required by the LGPD.
AreaFACE deployments by customers
This policy covers only the areaface.com site. When an organization (a municipality, company or institution) uses AreaFACE in its own operation, that organization is the controller of the data processed there and defines the legal basis, retention and service channels for data subjects.
Changes
We may update this policy when the site or the data processing changes. The last update date is shown at the top of this page.