This policy explains, in plain language, how Tensoor Tecnologia ("Tensoor", "we") handles personal data when you visit tensoor.com or contact us through it. It follows Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018).
Tensoor CRM integration with Google Calendar
Tensoor CRM users may optionally connect their Google Calendar account. When authorized, the CRM uses the calendar.events scope only to create, update and cancel, in that user's calendar, the commercial activities they schedule in the CRM.
We store the connected account email, calendar identifier, synchronized event identifiers and an encrypted refresh token. We do not read the user's full calendar, use Google data for advertising, profiling or model training, or sell or transfer this data to third parties. Users can disconnect the integration in CRM settings, which deletes the stored token.
Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
Who is the data controller
Tensoor Tecnologia is responsible for the personal data collected through this website. Questions, requests or complaints about privacy can be sent to [email protected].
What data we collect
Today the site collects personal data in a single place: the contact form. When you submit your name, preferred channel, email or phone and message, that data is transmitted to our server and forwarded by email to our inbox through Resend, our delivery provider. Tensoor does not keep a contact database: the message lives in our mailbox and in the provider's delivery logs.
Beyond that, like any website, our hosting and content delivery network (Cloudflare) automatically process technical access data (such as IP address, browser type and pages visited), used only to operate and protect the infrastructure against abuse.
Cookies and similar technologies
The Tensoor website does not use tracking, advertising or profiling cookies. We don't use Google Analytics, social media pixels, or any third-party tool to identify you across visits.
The only local storage we use is a preference recording that you've already seen the cookie notice shown in the site's footer — kept in your own browser (localStorage), never sent to any server.
To understand traffic volume we use Cloudflare Web Analytics: aggregate measurement that is cookieless and does no browser fingerprinting. It records the page visited, traffic source, country, device type and performance metrics — never an identifier that follows you across visits or across sites. That is why this site does not need a cookie consent prompt to measure audience.
If that changes in the future — for example, if we start using a cookie-based analytics tool — the notice and this policy will be updated before the change takes effect, and any non-essential cookies will only be enabled with your consent.
What we use data for
- Responding to your contact message and discussing a potential project.
- Preparing commercial proposals, when requested.
- Keeping the site technically secure and running well.
Who we share data with
We don't sell or hand over personal data for marketing purposes. The data you send passes only through the processors needed to run the site and get your message to us:
- Resend — delivery of the contact form message to our mailbox.
- Cloudflare — hosting, content delivery, abuse protection and cookieless aggregate analytics.
These processors keep servers outside Brazil, so handling your data may involve an international data transfer, carried out to take the pre-contractual steps you asked for by writing to us. We may also share data where required by law or by a competent authority.
How long we keep data
Messages sent through the form live in our mailbox for as long as they are needed to carry the commercial conversation, and in Resend's delivery logs according to that service's retention — Tensoor doesn't keep its own database of that content. Technical access logs are retained by the infrastructure for as long as needed for security and diagnostics. You can ask us to delete your message at any time using the email at the end of this page.
Your rights under the LGPD
You can request, at any time and free of charge, confirmation of processing, access, correction, anonymization, deletion or portability of your data, as well as information about who we may have shared it with. To exercise any of these rights, write to [email protected].
Security
The site is served entirely over HTTPS and hosted on third-party infrastructure with its own security practices. Since we don't operate a database of contacts, the main leak risk sits outside our direct control — even so, we follow sound engineering practices to reduce the attack surface of the site's own code.
Changes to this policy
We may update this policy to reflect changes to the site or the law. The date at the top of this page always reflects the most recent version. Material changes — like introducing non-essential cookies — will be communicated visibly on the site.
Contact
Questions about this policy or how we handle your data? Write to [email protected].
