Privacy Policy

Prontável is the public brand of REYNIER RIVERO LTDA. REYNIER RIVERO LTDA, CNPJ 49.927.272/0001-20, Av. Paulista, 771, Andar 15, Conj. 15, Sala 451, Bela Vista, São Paulo - SP, CEP 01311-100.

The company is incorporated in Brazil and has no establishment in any other country.

Contact for anything in this policy: contact@prontavel.com.

From the contact form: your name, one way to reach you — either an email address or a WhatsApp number, whichever you give us — and the message you write.

From a conversation with Tavel, the AI assistant: your name, one way to reach you — an email address or a WhatsApp number, not both — and the description of what you need, whatever of that you choose to give it. The full text of the conversation is stored along with it.

We do not ask for, and you should not send us, financial data, health data, government identifiers or anything else you would not want in an email. The free-text fields are read by people on our team.

Nothing else is collected about you. There is no advertising pixel on this site and no profile is built about you.

One purpose only: to answer you, to work out whether we can help with what you described, and to carry on that commercial conversation.

Your data is not sold, not rented, and not used to build advertising audiences.

For the contact form and the chat: the preliminary steps of a contract carried out at your own request — LGPD art. 7, V. You filled in a form asking us to get in touch; that request is the basis. Under European data protection law the equivalent basis applies.

For analytics: your consent, and nothing else. Analytics load only if you accept them in the cookie banner, and stop if you withdraw that acceptance.

Lead records and chat transcripts are kept for as long as the commercial conversation is live, and after that only while there is still a reason to keep them — for example an ongoing project or a legal obligation.

You can ask us to delete them at any time and we will, unless a law requires us to keep a specific record. There is no automatic deletion schedule in place today; a request is the reliable way to have data removed.

Google. Conversations with Tavel are sent to the Google Gemini API (model gemini-2.5-flash) to generate the replies. Conversations and lead records are stored in Google Cloud Firestore. If you accepted analytics, Google Analytics also receives usage data about your visit.

Vercel. The site is hosted on Vercel. If you accepted analytics, Vercel Analytics also receives usage data about your visit.

Telegram. When a lead comes in, a private Telegram chat our team reads gets an alert saying so. It carries no name and no contact details — only a conversation reference — because Telegram offers no data-processing agreement, so nothing personal is sent there.

An n8n automation workflow, which we host ourselves on our own server. The lead and the text of the conversation are routed into our internal follow-up. No third party receives them along the way.

Cloudflare. The contact form uses Cloudflare Turnstile to tell people from bots.

That is the complete list. No one else receives your data, and none of these recipients is paid to advertise to you.

The controller is in Brazil and the providers above process data outside it, so your data crosses borders.

Between Brazil and the European Union the flow is free in both directions: the European Commission adopted an adequacy decision for Brazil in early 2026, and the ANPD recognised the European Union as adequate in Resolution 32 of 26 January 2026.

For processing that happens outside both Brazil and the European Union, the transfer relies on the data processing agreement signed with each provider, incorporating the ANPD standard contractual clauses approved by Resolution CD/ANPD 19/2024, adopted whole and unaltered as that resolution requires.

Under LGPD art. 18 you may ask us to confirm that we hold data about you, to give you access to it, to correct it if it is wrong, to anonymise, block or delete it, to port it to another provider, to tell you who we shared it with, to tell you what happens if you refuse consent, and to withdraw a consent you gave.

European and United Kingdom data protection law gives you an equivalent set: access to your data, correction, erasure, restriction of how it is used, portability, and objection to a particular use.

Write to the channel below and we will answer. As a small-scale processing agent under Resolution CD/ANPD 2/2022 the response deadlines that apply to us are the doubled ones in art. 14 of that resolution, but we will not use the whole of them if we do not need to.

contact@prontavel.com

Resolution CD/ANPD 2/2022 art. 11 dispenses a small-scale processing agent from appointing a data protection officer, but §1 of that article requires an open channel to the data subject. This address is that channel. It is read by a person, not by an assistant.