Privacy Policy

Last updated: October 19, 2026.

Tessa Tecnologia e Desenvolvimento LTDA ("Tessa", "we") respects your privacy. This Policy explains clearly which personal data we process when you use this website, why we use it, who we share it with, how long we keep it and how you can exercise your rights under the Brazilian General Data Protection Law (Law No. 13,709/2018 — LGPD).

1. Data controller

Tessa Tecnologia e Desenvolvimento LTDA, registered under CNPJ 04.849.533/0001-01, headquartered at Parte da Gleba B - Estr. Vicinal, S/N - Mini Distrito Industrial, Guapiaçu - SP, 15113-899, is the controller of the personal data processed through this website. For any privacy matter, contact us at contato@tessa.com.br (subject: "Privacy / LGPD").

2. Data we process

We process only the data needed for each purpose:

Contact form: name, email, mobile/WhatsApp, company, state, city and, if you wish, the department, the service of interest and your message.
Quote request: name, company, email, mobile/WhatsApp, phone (optional), country, state, city, project details (service, quantity, application and message) and any attachments you send (projects, plans, images and spreadsheets).
Careers (job applications): name, email, phone, state, city, LinkedIn profile (optional), message (optional), the chosen opening and your résumé. Please do not include sensitive data (such as religion, health, political opinion or union membership) in your résumé, as it is not needed for the hiring process.
Reviews and testimonials: name (or anonymous submission), email, mobile (optional), job title and company (optional), photo (optional), the rating and the testimonial text.
Technical and security data: an identifier of your IP address protected by irreversible encryption (hash), browser type, date and time of submission and, when you send a form, the page through which you reached the site and campaign parameters (UTM). We use this data for security, to prevent fraud and automated submissions (spam) and to learn which channels bring in contacts.
Cookies and similar technologies: see the Cookie Policy.

We do not ask for sensitive data and we do not make automated decisions about you based on your data.

3. Why we use the data and on what legal basis

Answering your contact and preparing quotes and proposals — preliminary procedures for a contract, at your request (art. 7, V, LGPD) and our legitimate interest in serving those who contact us (art. 7, IX).
Hiring processes and talent pool — consent (art. 7, I) and preliminary procedures for an employment contract (art. 7, V).
Publishing testimonials on the website and social media — consent (art. 7, I), which you may withdraw at any time.
Website security and fraud and spam prevention — legitimate interest (art. 7, IX).
Usage statistics and site improvement (Google Analytics and Microsoft Clarity) — only with your consent (art. 7, I), given in the cookie notice.
Complying with legal and regulatory obligations and exercising rights in proceedings — art. 7, II and VI.

We do not sell or rent personal data, and we do not use your data for purposes other than those described here.

We share data only when necessary and with providers acting on our behalf (processors), who are bound to protect it:

Website and database hosting: a server located in Brazil.
Email delivery: the email provider that delivers form notifications and confirmations.
Tessa's internal team: the people who handle each subject (sales, technical support and human resources), with access limited to what each one needs.
Customer management system (CRM), if any: contact and quote data may be recorded there to follow up on your request.
Automatic translation service: the texts of approved testimonials may be translated into English and Spanish by a translation service, without your email or phone number.
Google (Analytics, Tag Manager and Maps) and Microsoft (Clarity): only if you accept the corresponding cookies. The map on the contact page loads only with your consent or when you click "Load map".
Public authorities: when required by law or court order.

When you click links to WhatsApp, social networks or other websites, you start using third-party services with their own privacy policies.

5. International transfers

Some providers (such as Google and Microsoft) may process data on servers outside Brazil. In these cases, the transfer follows art. 33 of the LGPD, with providers that adopt safeguards compatible with Brazilian law, such as standard contractual clauses.

6. How long we keep data

Contacts and quote requests: up to 5 years after submission, the period for possible claims and the defense of rights.
Job applications and résumés (including the talent pool): up to 24 months after submission.
Testimonials: while they are published; those not published are deleted within 12 months.
Records of emails sent by the website: 12 months.
Backup copies: 14 days.

After these periods, data and files are deleted automatically, unless the law requires longer retention. You may also request earlier deletion, as described in section 8.

7. How we protect data

We adopt technical and administrative measures to protect data against unauthorized access, loss or alteration, including: encrypted connection (HTTPS); résumés and attachments stored in a private area, out of public reach; an admin panel with individual access, permission profiles and encrypted password storage; protection against automated submissions; and daily backups. If a security incident that may pose a relevant risk occurs, we will notify you and the Brazilian Data Protection Authority (ANPD), as required by law.

8. Your rights

Under the LGPD (art. 18), you may request at any time:

confirmation that we process your data and access to it;
correction of incomplete, inaccurate or outdated data;
anonymization, blocking or deletion of unnecessary or excessive data;
portability of your data to another provider;
deletion of data processed based on your consent;
information about who we share your data with;
information about the possibility of not giving consent and its consequences;
withdrawal of consent;
review of decisions made solely on automated processing.

To exercise your rights, write to contato@tessa.com.br with the subject "Privacy / LGPD". We may ask for information to confirm your identity and will reply within 15 days. You may also file a complaint with the ANPD (www.gov.br/anpd).

9. Cookies

We use essential cookies to run the website and, only with your consent, analytics cookies and third-party content. You can review your choice at any time using the "Cookie preferences" link in the footer. Learn more in the Cookie Policy.

10. Children and teenagers

This website is not directed to people under 18, and we do not knowingly collect data from children and teenagers. If we identify data sent by minors without the required authorization, it will be deleted.

11. Data protection officer

The communication channel with Tessa's data protection officer (DPO) is the email contato@tessa.com.br (subject: "Privacy / LGPD").

12. Changes to this Policy

We may update this Policy to reflect changes to the website or the law. The date of the last update appears at the top of the page, and relevant changes will be highlighted on the website.