Privacy Policy
Last updated: 27 July 2026
This policy describes the personal data ResumoCast processes, for which purposes, on which legal bases, and how you can exercise your rights. It is the English counterpart of our Portuguese policy — same practices, same controller.
1. Who is responsible
ResumoCast is the controller of the personal data described here. We operate from Brazil and serve visitors internationally, including the European Union and the United Kingdom. Contact for any privacy matter: [email protected].
2. What we collect
Data you give us
- Name and email when you create an account, subscribe or contact us
- Name, work email, company and project details when you request a quote for Computer-Based Training production
- Payment information, processed by specialised providers — we never store it
- Preferences you set in the portal, and support records
Data collected automatically
- Technical logs, IP address, browser and security data needed to run the service
- Audience and performance analytics only after you allow it in the consent banner
- Advertising identifiers and campaign parameters (such as UTM tags and click IDs) only after you allow advertising storage — a choice separate from analytics
3. Legal bases and purposes
- Performance of a contract: authenticating users, delivering content and processing subscriptions.
- Legitimate interest and legal obligation: security, fraud prevention, operational logs and regulatory compliance.
- Consent: analytics and audience measurement; and, separately, advertising storage and measurement. Neither loads before you choose.
- Pre-contractual steps at your request: responding to a quote request you submit.
4. Cookies, consent and advertising
A consent banner appears before any non-essential technology loads. It offers three choices, and they are independent:
- Essential only: authentication, security and basic operation. No analytics, no advertising storage.
- Audience only: adds anonymous audience measurement (Google Analytics 4, Umami, Microsoft Clarity). No advertising storage.
- Accept all: adds advertising storage, so we can tell which campaigns bring visitors and measure conversions.
Until you choose, Google Consent Mode is set to deny both analytics and advertising storage, and the analytics scripts are not loaded at all. Your choice is stored locally in your browser under the key cookie-consent-v2 so the banner does not reappear on every visit. You can change or withdraw it at any time on the privacy controls.
5. Sharing and international transfers
We do not sell personal data. We share only what is necessary with processors that support the service: cloud hosting and monitoring, a specialised payment provider, email delivery, and — under your consent — analytics and advertising platforms.
Some of these providers are located outside the European Economic Area, including in Brazil and the United States. Where that applies, transfers rely on the European Commission's Standard Contractual Clauses or an applicable adequacy decision.
6. Security and retention
- Encryption in transit via HTTPS/TLS
- Internal access control and protected credentials
- Retention for as long as needed to provide the service, meet legal obligations and defend legal claims
For consented analytics we apply Google Analytics 4's 14-month default, the retention configured on our Umami instance, and the period configured in Microsoft Clarity. Quote requests are retained while the commercial conversation is live and for as long as required afterwards by accounting and legal obligations.
7. Your rights
Under the GDPR, the UK GDPR and the Brazilian LGPD you may request access, rectification, erasure, restriction of processing, portability, and object to processing based on legitimate interest. Where processing relies on consent, you may withdraw it at any time — withdrawal does not affect the lawfulness of processing carried out before it.
Write to [email protected] and we will respond within the statutory deadline. If you are in the EEA or the UK you also have the right to lodge a complaint with your national supervisory authority; in Brazil, with the ANPD.
8. Children
Our services are directed at professional and adult audiences. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
9. Changes
We may update this policy. Material changes are announced on the platform or by email, and the date at the top of this page always reflects the current version.
Related documents: