Privacy Policy

Who we are

TUCO Digital is a Brazilian company founded in 2024. We design and build websites, branding and advertising for tattoo artists and studios, and we serve clients in several countries.

For anything in this policy, write to help@tucodigital.com.br. A person reads that inbox.

What we collect

We collect only what a specific purpose requires:

• Contact data you type into our forms: name, email, phone or WhatsApp number, country, and whatever you write in the message field.
• Newsletter data: your email address, and the date you subscribed.
• Messages you send us: the content of Instagram and Facebook direct messages, WhatsApp messages and emails, along with your public profile name and username on that platform.
• Purchase data: for paid plans, your billing details are collected and stored by Stripe, our payment processor. We never see or store your full card number.
• Usage data: pages visited, approximate location by country, device and browser type, and how you arrived at the site.

Why we use it

• To answer you, and to keep track of a conversation that may span several weeks and more than one channel.
• To deliver and support what you hired us to build.
• To send the newsletter, when you asked for it, and to stop sending it the moment you unsubscribe.
• To process payments and issue invoices.
• To understand which pages work and which do not, in aggregate.
• To comply with legal and accounting obligations.

Legal basis

Under the Brazilian LGPD and the European GDPR, we rely on: your consent, for the newsletter and for non-essential cookies; the performance of a contract, for work we deliver to you; our legitimate interest, for answering messages and for aggregate analytics; and legal obligation, for tax and accounting records.

Consent can be withdrawn at any time, and withdrawing it does not affect what was lawful before.

Instagram, Facebook and WhatsApp messages

When you send a direct message to our Instagram or Facebook account, or a WhatsApp message to our business number, we store that conversation in our own customer system so that our team can answer you and see what was already discussed.

From those platforms we receive the content of the message, your public username and display name, and the time it was sent. We do not receive your password, your email address, your follower list, or anything you have not sent us.

We use this data only to talk to you and to keep the record of that conversation. We do not sell it, and we do not use it to build advertising audiences.

This use follows the Meta Platform Terms and the WhatsApp Business Terms.

Who we share it with

We do not sell personal data and we do not trade it. We share it only with the service providers that make the product work, and only with what each one needs:

• Supabase, which hosts our database.
• Vercel, which hosts and serves our websites.
• Stripe, which processes payments.
• Resend, which delivers our transactional email.
• Google Analytics, for aggregate audience measurement.
• Meta, for the messaging platforms described above.

We may also disclose data when a law, a court or a regulator requires it.

How long we keep it

• Form and message data: while the conversation is open, and for up to 3 years after the last contact, so that we can pick up where we left off.
• Client project data: for the life of the contract, and for 5 years after it ends, which is the period Brazilian law expects for commercial records.
• Newsletter data: until you unsubscribe.
• Financial records: 5 years, as required by Brazilian tax law.
• Analytics data: 14 months, in aggregate form.

Your rights

You can ask us to confirm whether we hold data about you, to show it to you, to correct it, to delete it, to send it to you or to another provider in a portable format, and to stop processing it.

Write to help@tucodigital.com.br and we will answer within 15 days. We may ask you to confirm your identity first, because handing your data to the wrong person would be the worse mistake.

Deleting your data

To have your personal data deleted, send an email to help@tucodigital.com.br with the subject "Delete my data", from the email address you used with us, or send us a direct message from the account you used.

We will delete what we are not legally required to keep, and we will tell you exactly what was kept and why. Records we must retain for tax purposes are the usual exception.

If you contacted us through Instagram or Facebook, you can also remove our app's access at any time in your Instagram settings, under Apps and websites. That stops any new data from reaching us, and a deletion request removes what we already have.

Cookies and measurement

We use cookies that are strictly necessary for the site to work, and analytics cookies that tell us, in aggregate, which pages people read. You can block cookies in your browser settings, and the site will keep working.

International transfers

We are based in Brazil and our clients are spread across several countries, so your data may be processed outside the country where you live. Our providers operate under standard contractual clauses or equivalent safeguards recognised by the LGPD and the GDPR.

Security

Data is transmitted over encrypted connections and stored in access-controlled databases. Only the people who need it to do their work can reach it. No system is perfect, and if a breach ever affects your data we will tell you and the competent authority, as the law requires.

Children

Our services are meant for professionals and are not directed at anyone under 18. We do not knowingly collect data from children. If you believe we have, write to us and we will delete it.

Changes to this policy

When we change this policy we update the date at the top. If a change materially affects your rights, we will say so directly rather than expecting you to notice.

Contact

Questions, requests or complaints about privacy: help@tucodigital.com.br.