Privacy Policy

Who is responsible

Pro9 Technology is the controller of the personal data related to this website. For any matter about personal data, including exercising the rights described below, write to contato@pro9digital.com.

What changed, and why

Until September 2026 this website used no cookies at all and the form didn't send anything anywhere. We started investing in paid ads, and without measurement there is no way to know which campaigns bring companies we can actually help and which ones only spend budget.

That's the trade-off, stated openly: we measure to spend better. In return, nothing is loaded before you choose, declining is as easy as accepting, and if you decline you keep browsing exactly as before — no cookies, no pixels, no lost functionality.

Cookies: what we use and how to choose

On your first visit, a notice shows three categories, which you accept or decline separately. No analytics or advertising cookie is set before that. There is no wall: declining everything keeps the whole site working.

To review your choice later — including to withdraw consent you already gave — use the Cookie preferences link, also found in the footer of every page. When you withdraw consent, we delete from your browser the cookies those tools had set.

If you accept today and we add something later

Your consent records which categories were offered to you when you chose. If we later start using a tool from a category the notice never showed you, the notice reappears and we ask again.

In other words: an “accept all” doesn't extend to something that didn't exist when you clicked. Consent covers what you were told at the time.

Google: only after you choose

No Google tool is loaded before you choose. They only load after you accept at least one of the optional categories, and each one respects what you accepted (so-called Consent Mode): without the analytics category, Google Analytics sets no cookie and only sends signals without an identifier about the page visited; without the marketing category, Google's advertising features stay off.

If you decline everything, no request goes from your browser to Google, Meta or LinkedIn because of this site — you can check it in your browser's network tab.

Which ad you came from

When you arrive through an ad, the address carries a click identifier (gclid from Google, fbclid from Meta, li_fat_id from LinkedIn) or campaign parameters (utm_*). We store that with the landing page in our own cookie (pro9_attr, 90 days), to know which campaign produced which contact.

That cookie is only set if you accept the marketing category. If you decline and still send the form, the source of that visit goes along with it — because sending the form is your own act, and that information is part of what we need to reply and to know where you came from. This sentence is telling you exactly that.

And when you click the WhatsApp or email link. If — and only if — you arrived through a campaign link (an ad or a link with utm_* parameters), we add a short code at the end of the pre-filled message, formatted as Ref: ABC123, and record that code here together with the campaign you came from, your IP address and your browser identification. That's how we know which campaign started that conversation, since WhatsApp doesn't tell us.

The code is visible to you, in your own message, and you can delete it before sending — the conversation works the same. If you didn't come from a campaign link, you get no code and no record is created: there is no campaign to attribute, so there is nothing to store.

The contact form

At /contact/ — and in the Portuguese version, at /pt/contato/ — you provide your name, business email, company and a description of the process and, if you wish, your role and the systems in use. When you send it, this data reaches a server of ours, on our own domain, and is stored — together with your IP address, your browser identification, the page where you entered the site and the address you came from, when your browser provides it. The confirmation only appears after all of it has actually been saved.

We use it to reply, prepare the conversation and manage the business relationship — nothing else. Legal basis: preliminary steps toward a contract, at your request (LGPD art. 7, V). The submission includes the source of the visit, described above, and a short reference code shown to you in the confirmation.

Please don't send confidential documents or customer data in this first contact. A hidden field and a timing check block automated submissions by bots. If you fill in the form like a person, neither has any effect on you.

Who we share data with

Google, Meta and LinkedIn. Only if you accepted the marketing category, we report to these platforms the conversions that happened: sending the form, a WhatsApp or email click from a campaign and, if the conversation moves on to a proposal or a contract, that step, with the deal value. Meta receives, depending on the case, your email and your name as a SHA-256 code — never as text —, the IP address, the browser identification and the identifiers of Meta's own cookies; LinkedIn, only your email as a SHA-256 code; Google, only the ad click identifier (gclid), the time and the value of the conversion. The SHA-256 code lets the platform compare it with its own records and recognize whether you are one of its users — to the platform, it is not anonymous. Purpose: measuring and improving our ads. If you didn't accept the marketing category, none of this is sent.

Vercel and Upstash. Vercel hosts the site and runs the code that receives the form. The database where contacts are stored belongs to Upstash, contracted through Vercel and hosted in the United States. Both act as processors, handling data only according to our instructions.

No one else. We don't sell, rent or hand over data to third parties for their own campaigns, or to data brokers.

International transfer. These companies process data outside Brazil, mainly in the United States. The transfer relies on the contractual clauses and safeguards each of them offers, under articles 33 and following of the LGPD.

What happens even without cookies

Server access logs. Vercel automatically logs technical data about each request — IP address, date and time, requested page and browser identification. They exist to keep the site online and protected against abuse, and are processed on the basis of legitimate interest. We don't use them to identify individual visitors.

Our fonts stay ours. Font files are served from this same domain, not from Google Fonts.

Your language preference stays in your browser

When you choose EN or PT in the selector at the top, the site stores that choice in your browser's local storage, under a key named pro9-lang, whose value is only “pt” or “en”.

This isn't a cookie: the information is never sent to the server, doesn't identify you and doesn't leave your device. It disappears when you clear the site's data in your browser.

When you contact us through another channel

Besides the form, the site has links that open a WhatsApp conversation or an email. From then on, the data is whatever you decide to send. We use it to reply and to manage the business relationship, and for nothing else.

WhatsApp is a Meta service with its own policy, which applies to how the message is carried and is outside our control. If you'd rather not use it, the form and email are always available.

How long we keep data

Cookies: pro9_consent for 180 days; pro9_attr for 90 days; Google, Meta and LinkedIn cookies, when active, for the periods set by each tool — all of them revocable by you at any time in the cookie notice.

Form and contact history: for as long as the business relationship, or a legitimate interest in resuming it, lasts, and for the period required by law. You can ask for deletion before that, at any time.

Your rights

The LGPD (Law 13,709/2018) gives you, among others, the right to:

• Confirm whether we process your data and access it.
• Correct incomplete, inaccurate or outdated data.
• Request anonymization, blocking or deletion of unnecessary or excessive data.
• Request portability to another provider.
• Know who we share your data with — it's in the section above, with name and purpose.
• Withdraw your cookie consent at any time, at no cost.
• Object to processing based on legitimate interest.

How to exercise these rights

Write to contato@pro9digital.com saying what you need. We reply as soon as possible and, at the latest, within the period set by law. We may ask for information that confirms your identity before acting on the request — it's a protection for you.

For cookies specifically, the fastest path is the preferences notice itself: withdrawal is immediate and doesn't depend on us.

This policy changes whenever the site starts doing something it doesn't do today. When that happens, the date at the top is updated.