We handle your data the way we would want ours handled.

1. Who we are

Futago Automações e Soluções Empresariais, Brazilian company registration (CNPJ) 52.249.005/0001-56, based in Manaus, Amazonas, Brazil. For anything related to personal data, write to [email protected] or call +55 92 8602-2865.

Your three choices in the privacy notice

On your first visit, a notice asks how much you want to share. You can change your mind at any time through the “Privacy preferences” link in the footer of every page — withdrawing is as easy as agreeing.

• This visit only (or dismissing the notice): nothing about you is stored beyond the technical cookie described in 2.5. No page views, events or heatmap data, and the chat conversation is not kept on our server.
• Essential only: we measure site usage as described in 2.3 and keep the chat conversation on our server so it can pick up where it left off.
• Accept all: everything in essential, plus your approximate city/region (inferred from your IP address) and mouse-movement signals used only to help the AI agent understand where you are in your visit.

At no level do we record your session (video or screen replay), what you type into forms, or chat content as measurement data.

2. What data we collect

2.1 Contact form

When you fill in the form at /contato, we collect your name, email, company and message. That data is stored in our contact system, emailed to Futago through Amazon SES, and used only to reply to you and follow up. If you accepted at least “Essential only”, where your visit came from (see 2.3) is copied to the contact so we know how it reached us.

2.2 AI agent (chat)

The chat in the bottom-right corner runs on Anthropic's Claude model. By default we use browsing context (current page, scroll depth, time in session, sections visited) so the bot's first message and the tone of the conversation fit where you are. That context does not include your name or anything you typed into forms.

• You can turn context off at any time through the “Turn off context” link in the chat's own footer. Your choice is saved in your browser.
• The messages you type and the context (when active) are sent to Anthropic's API to generate the reply. Nothing beyond the conversation is shared with third parties.
• With “Essential only” or “Accept all”, the conversation is kept on our server so it can continue where it stopped and so the Futago team can reply. With “This visit only”, it is not kept on the server.

2.3 Site usage measurement

Only from “Essential only” upwards do we measure how the site is used. All measurement runs on our own code, on our own server, in Brazil — we use no Google Analytics, no ad pixels and no third-party tool of any kind. We collect:

• Pages viewed and your device type (phone, tablet or computer), language and screen width.
• Where the visit came from: the referring site and the campaign parameters in the entry link (utm_*, gclid, fbclid).
• Usage events: clicks on WhatsApp, chat and demos; form usage (which fields were filled in and submission errors, never what you typed); technical errors and page load performance.
• Unidentified heatmap: click positions and scroll depth, stored with no identifier at all — there is no way to tell who any point came from.

2.4 Technical logs

To protect against abuse (rate limiting), the originating IP address is used as a temporary counter that expires after up to 60 seconds for browsing and chat, and up to 10 minutes for contact form submissions. We keep no IP history.

2.5 Cookies and browser storage

We use no third-party tracking or advertising cookies. The site sets a single first-party technical cookie (futago_vid, a random identifier valid for 1 year) on every visit, because the site needs it to work: it keeps the chat continuous and lets us limit abuse. Without your consent, it is not linked to any browsing history — no page view, event or heatmap point is stored. Beyond it, the site uses the browser's localStorage to remember your theme preference (light/dark), your choice in the privacy notice and the ongoing conversation — on your device.

3. Legal basis and purpose

Form: consent (you tick the LGPD box) and legitimate interest in answering your request (LGPD Art. 7, I and IX).

Chat: the conversation is processed in order to reply to you; keeping it on our server depends on your consent in the privacy notice (Art. 7, I). You can decline the browsing context and still use the chat.

Usage measurement and visit origin: consent (Art. 7, I), given by choosing “Essential only” or “Accept all”; approximate city only with “Accept all”, and revocable at any time.

Technical cookie and security: legitimate interest (Art. 7, IX), limited to what is strictly necessary for the site to work and protect itself from abuse.

4. Sharing

We do not sell or share your data with third parties for marketing. Measurement data stays on our own server, in Brazil, and is not sent to any outside tool. The processors involved are:

• Anthropic (Claude API) — receives chat messages and the context (when active) in order to generate replies.
• Amazon SES — delivers the form email to Futago.
• OpenAI — helps write and illustrate blog articles. It receives no visitor data.

5. Retention

• Form contacts: kept for as long as they matter to the business relationship. You can ask for deletion at any time.
• Chat conversations: kept on the server (if you consented) until your visitor record is deleted for inactivity, as below.
• Heatmap points: 7 days; after that only aggregate per-page totals remain.
• Usage events: 90 days.
• Aggregate totals (not linked to any visitor): about 13 months.
• Visitor record (pages viewed, origin, conversations): deleted automatically after 12 months without a visit.
• IP for rate limiting: up to 60 seconds (up to 10 minutes for the contact form).

6. Your rights (LGPD Art. 18)

At any time, you may request:

• Confirmation that we process your data, and access to it.
• Correction of incomplete or inaccurate data.
• Anonymization, blocking or deletion of data.
• Portability.
• Withdrawal of consent — directly through the “Privacy preferences” link in the footer: from your new choice on, we stop measuring your browsing.

To exercise any of these rights, write to [email protected]. We reply within 15 business days.

7. Security

The site runs on HTTPS in production, with security headers (HSTS, CSP, X-Frame-Options) and rate limiting on sensitive endpoints. But absolute security does not exist on the internet — if you spot an incident, tell us at the email address above.

8. Updates

This policy may change. Material changes will be announced prominently on the site. Current version: 1.1 — last revised on September 16, 2026.