Privacy Policy

Last updated: 2026-05-06

What we collect

• Aggregate, cookieless analytics via Cloudflare Web Analytics
• Server logs for the free DMARC checker (IP, requested domain, timestamp) for rate limiting and abuse mitigation, retained 30 days
• If you sign up for a paid plan: name, email, billing details (handled by Stripe)

What we do not do

• No Google Analytics, no Hotjar, no third-party trackers
• No cookies beyond strictly necessary ones (none required at v1)
• No selling, sharing, or advertising-derived data use

Your rights (LGPD / GDPR)

Email privacy@atalaia.io for access, correction, portability, deletion, or objection requests. We respond within 15 days.

Data Processing Agreement

Business and MSP plans receive a Data Processing Agreement. See /legal/dpa.