Privacy Policy

1. Data controller

Atomic Solutions is the controller of personal data processed through this site and the commercial relationship related to the Proton product.

• Legal name: Atomic Solutions
• Brazilian Tax ID (CNPJ): 17.836.749/0001-76
• Address: Av. Dr. Chucri Zaidan, 1550, Suite 2112, Vila Cordeiro, São Paulo, SP, ZIP 04583110

3. Personal data we collect

We collect only the data strictly necessary for the purposes described in this Policy:

Via contact form:

• Full name
• Corporate email
• Phone / mobile
• Company
• Company website (optional)
• Role / job title
• Number of employees
• Message describing the challenge or goal (optional)
• Navigation language

Via cookies and tracking technologies (subject to your consent in the cookie banner):

• IP address (anonymized by Google Analytics)
• Device and browser identifiers
• Pages visited, time on site, and navigation flow
• Traffic source (referrer) and campaign parameters (UTM)

Via Google reCAPTCHA v3 (for spam protection):

• Validation token and risk score assigned by Google
• Technical data collected by Google for behavioral analysis

4. Purposes of processing

• Respond to commercial requests, demos, and contacts about Proton
• Understand the company's automation context and direct consultative support
• Send communications about the platform, automation, runners, AI, integrations, and related services
• Analyze aggregated site traffic and behavior for continuous improvement
• Measure Google Ads campaigns and conversions when applicable consent exists
• Prevent fraud, abuse, and automated submissions through reCAPTCHA
• Comply with legal and regulatory obligations

5. Legal bases (LGPD art. 7)

• Consent (art. 7, I): checkbox on the contact form and acceptance in the cookie banner for analytics and marketing.
• Pre-contractual procedures (art. 7, V): handling your request for a quote or commercial contact.
• Legitimate interest (art. 7, IX): fraud prevention via reCAPTCHA and site security measures.
• Legal obligation (art. 7, II): minimum retention for tax purposes and responding to authority requests.

6. Sharing with third parties (processors)

We share your data only with processors required to perform the purposes of this Policy, under adequate security measures:

• RD Station (RD Station Tecnologia da Informação Ltda., Brazil): CRM and marketing automation. Receives form data for lead management.
• Google LLC (United States): Google Ads and reCAPTCHA. May receive technical data for conversion measurement, abuse protection, and spam prevention.
• Storylane Inc. (United States): hosts the interactive product demo on the Tour page. May receive technical data about demo interactions for usage analytics. Policy: storylane.io/privacy-policy.
• Hosting provider: technical infrastructure for site delivery and secure application execution.

7. Retention period

Lead data is retained for a maximum of 24 months without interaction or while the commercial relationship continues, whichever comes first. After that period, data is anonymized or deleted. You may request deletion at any time via the DPO.

8. Your rights as a data subject (LGPD art. 18)

The LGPD grants you the following rights over your personal data:

• Confirmation that processing exists
• Access to your data
• Correction of incomplete, inaccurate, or outdated data
• Anonymization, blocking, or deletion of unnecessary data
• Portability of data to another provider
• Deletion of data processed based on consent
• Information about entities with which we share your data
• Information about the option not to consent and its consequences
• Withdrawal of consent at any time

9. Cookies and similar technologies

We use essential cookies required for the site to work, and analytics and marketing cookies only according to applicable consent through the banner. By default, before any action, non-essential cookies remain disabled in Google Consent Mode v2.

10. Security

We adopt technical and organizational measures to protect your data, including HTTPS, sensitive variables outside the client, server-side validation, reCAPTCHA, and secure form data submission to RD Station via API.

11. Children's data

This site is intended for a professional adult audience (B2B). We do not intentionally collect data from anyone under 18. If you identify such a case, please contact our DPO for immediate deletion.

12. Changes to this Policy

This Policy may be updated to reflect changes in our practices or in legislation. The date of the last update is shown at the top of this page. Relevant changes will be communicated with additional prominence.

13. Jurisdiction and applicable law

This Policy is governed by Brazilian law. The courts of São Paulo/SP, Brazil, are elected to resolve any disputes.