Privacy Policy

Last updated: July 8, 2026

This Privacy Policy describes how Defender360 collects, uses, and protects the personal data processed through the defender360.io website, in line with Brazil's General Data Protection Law (LGPD — Law No. 13,709/2018).

1. Data Controller

The controller of the personal data processed on this site is Defender360, a company headquartered outside Brazil (with no Brazilian CNPJ registration), which serves customers in Brazil and processes Brazilian data subjects' data in accordance with the LGPD (Law No. 13,709/2018). To exercise your rights or ask questions, contact our Data Protection Officer (DPO) at [email protected].

2. Data We Collect

We collect only the data needed for the stated purposes.

2.1 Data You Provide

  • Name
  • Business email
  • Phone
  • Company and message, when you fill out a contact or demo request form.

2.2 Data Collected Automatically

  • Browsing and usage data (pages visited, source, device), via Google Analytics 4, only with your consent.
  • IP address and cookie identifiers (see the Cookie Policy).

3. Purposes and Legal Basis

We process your data for the following purposes:

PurposeLegal basis (LGPD)
Respond to inquiries and demo requestsConsent / pre-contractual steps (art. 7, I and V)
Sales and relationship activities (pre-sales)Legitimate interest (art. 7, IX)
Audience measurement and site improvementConsent (art. 7, I)
Compliance with legal and regulatory obligationsLegal obligation (art. 7, II)

4. Data Sharing

We do not sell personal data. We share data only with processors that provide services to us, under contract and our instructions:

  • HubSpot, Inc. — CRM and management of business contacts.
  • Google LLC — Google Analytics 4 / Google Tag Manager (with consent).
  • Public authorities, when required by law or court order.

5. International Transfer

Some processors (HubSpot, Google) process data outside Brazil. In such cases, we adopt appropriate contractual safeguards, as provided in arts. 33 to 36 of the LGPD.

6. Data Retention

We keep personal data only for as long as necessary for the stated purposes or as required by law. Business contacts are kept for the duration of the relationship and can be deleted upon request.

7. Your Rights (LGPD)

Under art. 18 of the LGPD, you may, at any time:

  • Confirm the existence of processing and access your data;
  • Correct incomplete, inaccurate, or outdated data;
  • Request anonymization, blocking, or deletion of unnecessary data;
  • Request data portability;
  • Withdraw consent;
  • Object to processing based on legitimate interest.

8. Security

We adopt technical and organizational measures to protect personal data against unauthorized access and accidental or unlawful destruction, loss, alteration, or disclosure.

9. DPO and Contact

To exercise your rights, withdraw consent, or ask privacy questions, write to our DPO: [email protected]. You may also file a complaint with the Brazilian data protection authority (ANPD).

10. Changes to This Policy

We may update this Policy from time to time. The revision date at the top indicates the last update.