Privacy notice
This notice explains what happens to the details you send through the Prisma Diagnosis request form on prismalens.ai. It is written to meet Brazil's General Data Protection Law (LGPD, Law 13.709/2018).
Who is responsible
The controller of your data is Paulo Miranda Loureiro, São Paulo, Brazil, who runs Prisma. Contact for any privacy question or request, including as the channel of the person in charge of data protection (encarregado): paulo.loureiro.shp@gmail.com.
What we collect and why
| Data | Name, work email, company, website, what you sell, a question your buyers ask, main competitors and your area of interest, as typed by you. |
|---|---|
| Purpose | Only to reply to your request and prepare how to start your Diagnosis. |
| Legal basis | Your consent, given with the checkbox on the form (LGPD art. 7, I), and steps before a possible contract that you asked for (art. 7, V). |
| Retention | Up to 12 months after our last contact, or less if you ask us to delete it. |
We do not sell your data, use it for advertising or share it with anyone outside the providers below.
Cookies and analytics
This site sets no cookies and runs no analytics or tracking scripts. Fonts are served from our own domain.
Providers that process data for us
| Supabase | Stores the requests sent through the form, in its São Paulo region (sa-east-1), and keeps technical logs such as IP addresses. Access is restricted to the Prisma team. |
|---|---|
| Vercel | Hosts the website. Like any web host, it processes technical data such as your IP address and browser in server logs to deliver and protect the site. |
| Google (Gmail) | Our replies by email, and any request you send us by email instead of the form, are handled through Gmail. |
Supabase, Vercel and Google are companies based outside Brazil, so support access, technical logs and email may involve international transfer of data. We rely on the transfer mechanisms these providers offer under LGPD art. 33 and ANPD rules.
Your rights
Under LGPD art. 18 you can ask us to confirm whether we hold your data; access it; correct it; anonymize, block or delete data that is unnecessary or excessive; port it to another provider; delete data processed with your consent; learn who we share it with; be told what happens if you do not consent; withdraw your consent; and object to processing. Email the contact above and we will reply within 15 days. You may also contact Brazil's data protection authority (ANPD).
Security
The form sends data over HTTPS. The database only accepts new requests from the website and cannot be read with the public key the page uses.
Resumo em português
O controlador dos dados é Paulo Miranda Loureiro (São Paulo). Coletamos apenas o que você digita no formulário de pedido de Diagnosis, para responder ao seu pedido, com base no seu consentimento (LGPD art. 7º, I) e em procedimentos preliminares a pedido seu (art. 7º, V). Guardamos por até 12 meses após o último contato. Os dados ficam no Supabase (região São Paulo), o site é hospedado pela Vercel e as respostas por e-mail passam pelo Gmail (Google); estes fornecedores têm sede fora do Brasil. Não usamos cookies nem analytics e não vendemos dados. Para exercer os direitos do art. 18 (acesso, correção, anonimização, portabilidade, exclusão, revogação do consentimento, oposição, entre outros), escreva para paulo.loureiro.shp@gmail.com.