Privacy Policy

Tg Apps is the public brand of TG APPLICATIONS DESENVOLVIMENTO LTDA, a Brazilian company registered under CNPJ 56.918.851/0001-72 and identified by D-U-N-S® 651029828. Its fiscal address is in Belo Horizonte, Minas Gerais, and its operating base is in São Paulo, SP, Brazil. The company is the data controller for the website processing activities it determines.

For website privacy questions, contact support@tgapps.dev. Our business phone number is +55 11 97971-7703. You can use these channels to ask about information handled by the company.

This policy covers the company website, service pages, campaign pages, guides, the business inquiry form and related communications. It applies to visitors, company representatives, founders and other people interested in our services.

Tg Apps mobile products, client applications and authenticated use of the Client Portal may involve separate information and notices. When Tg Apps handles data on a client's instructions, the responsibilities are addressed in the project agreement and, where needed, a data processing agreement. This website policy does not replace those documents.

The inquiry form asks for your name and email address. You may also provide a phone or WhatsApp number, the phone country code, the service you need, a plan of interest, your preferred starting arrangement, an initial deliverable and notes about your project. Notes are required if you select a custom plan; other additional fields follow the form's instructions.

We may receive emails, WhatsApp messages, replies during a project discussion and information needed to understand the inquiry. The form's WhatsApp permission is for responding to that inquiry at the number you provide. It is not a blanket marketing permission.

Do not send passwords, private keys, identity documents, patient records, payment card details or customer databases through the public inquiry form. If a review requires restricted material, we agree on an appropriate transfer method, access and confidentiality arrangements first.

A submitted inquiry includes the language, page path, landing-page address with its query parameters, the referring page when the browser provides it, and campaign information present in the address, such as UTM parameters and advertising click identifiers.

Submission also uses a random visitor identifier, an identifier for each attempt and information used to manage spam and duplicate requests. The visitor identifier is sent with the name and email address. It can be linked to the inquiry and is not anonymous.

A connection makes information such as an IP address and request attributes available to the infrastructure. Google Analytics may receive browser, device, page and interaction signals. Do not place personal information or restricted material in campaign URLs: full page addresses can be part of measurement and the inquiry record.

Consent is not treated as a blanket authorization for every activity. Where it is required, it must relate to the stated purpose. Legitimate interests require a separate assessment and do not permit unrestricted collection or unrelated use of an inquiry.

References: Brazil's LGPD and ANPD guidance on legitimate interests.

Cookies store information in your browser for interactions with a website. Local storage, or localStorage, is a separate technology that also keeps information on your device.

You can clear or restrict cookies and storage through your browser settings. Doing so may reset your language choice or cause a new inquiry identifier to be generated. Blocking cookies alone does not necessarily stop all measurement data transmissions.

References: GA4 cookies and ANPD cookie guidance.

The website uses Google Analytics 4. Events configured in the project include navigation and contact clicks, plan interest, language changes, form starts and results, and app-store link interactions.

Our GA4 form events contain selections and indicators rather than explicit name, email, phone or message fields. That does not establish that every part of the collection is anonymous. Full page addresses are included in measurement, and external services carry out their own processing.

We measure website form submissions for OpenAI campaign reporting through a small GET request to the OpenAI image-tag endpoint. The lead_created event is sent only after the CRM accepts your form submission. It includes the event type, our measurement source ID, a random event_id and oppref from the current page URL when present.

We do not load the OpenAI SDK or use automatic advanced matching. This request does not include your name, email, phone, message, hashes or a user object. It omits OpenAI cookies (credentials: omit) and creates no new cookies or local-storage records. OpenAI can receive the site origin through the Referer header and ordinary connection information, including your IP address. This measurement is not anonymous.

The event is not sent when your browser signals Global Privacy Control or an earlier refusal stored as false under tgapps_openai_measurement_consent is present. The form works normally without this event. This measurement does not change the existing Google Analytics setup.

Campaign attribution helps identify where an inquiry originated. It is separate from contact permission and does not itself authorize personalized advertising.

Technical details: OpenAI image-tag measurement and OpenAI conversion measurement. Google explains its processing at How Google uses information from partner sites.

Accepted form submissions go to the commercial management system used by Tg Apps for inquiry records and follow-up. A selected plan records interest; it is not a service purchase or payment authorization.

The intake workflow may send an email invitation to the Client Portal. An invitation does not create a software development agreement or paid plan. Additional processing during authenticated portal use needs its own notice.

A WhatsApp link takes you to that service. The email fallback may prepare a subject and message in your email application, and you decide whether to send it. Those services also process information under their own policies.

Necessary sharing may involve authorized team members, collaborators involved in the inquiry, hosting and infrastructure providers, the CRM, email, authentication and measurement services. Access should be limited to the purpose and information needed for that work.

Google Analytics is an identified website service. OpenAI receives the ad measurement information described above for accepted form submissions. WhatsApp and your email provider participate when you choose those channels. Authorities, legal advisers or other recipients may receive information to meet an applicable obligation or a justified need to protect legal rights.

International business operations and global providers may involve processing outside Brazil. Using a global service does not establish that information is kept only in Brazil or in any single country.

You may ask about processing countries, the information involved, purposes, duration and safeguards relevant to transfers of your information, subject to lawful limits.

Reference: ANPD Resolution 19/2024.

Retention periods depend on the purpose, the status of an inquiry, any contractual relationship and applicable obligations. This policy does not set one retention period for every category of information. You may ask about records associated with your inquiry using the contact provided in this document.

Cookie expiration is not the retention period for information sent to Google or OpenAI. Google Analytics user and event retention depends on the property settings, while aggregated reporting can follow different rules. Clearing browser storage does not automatically delete records held by us or our providers.

Technical reference: Google Analytics data retention.

Depending on the applicable law and circumstances, you may request:

• Confirmation of processing, access and correction of your information.
• Anonymization, blocking or deletion of unnecessary, excessive or unlawfully processed information.
• Portability subject to applicable requirements and limits.
• Information about sharing and the consequences of withholding consent.
• Withdrawal of consent and deletion of consent-based information, subject to lawful retention.
• Objection to non-consent processing that does not comply with Brazil's LGPD.
• Review and explanation of solely automated decisions affecting your interests, if such decisions exist.

Send requests to support@tgapps.dev using the subject “Website privacy.” Explain your request and provide a reference that helps locate your inquiry. Exercising privacy rights does not require purchasing a service.

Proportionate identity or representative verification may be needed to avoid disclosing information to the wrong person. Do not send passwords or private keys. If a requested action cannot be completed, the response should explain the reason and available alternatives.

Confirmation and access requests covered by Article 19 of Brazil's LGPD follow its immediate simplified response or complete declaration within 15 days, as applicable. That deadline applies to requests covered by Article 19; other requests follow their applicable rules.

You may contact ANPD or another competent body for your situation. ANPD provides information through its data subject channel.

References: ANPD rights guidance and ANPD FAQs.

An inquiry allows Tg Apps to use information necessary to respond to the discussion you started. The WhatsApp permission is specific to that inquiry. It does not automatically enroll you in newsletters, ongoing promotions or unrelated uses.

You can ask us to stop further commercial follow-up by replying through the channel used or emailing support. Withdrawing an optional permission does not prevent privacy requests or, by itself, require ending a contract. Necessary contractual or legally required communications are assessed separately.

The published form transmits submissions over HTTPS.

Incidents should be assessed for the information affected and risk to individuals. Where notification is required, the company must notify the appropriate recipients and individuals under the applicable rules, with available information about the incident and the measures taken.

The website presents business services and is not designed to request children's information or sensitive personal information. Contact us if a minor's information or sensitive material appears to have been provided in error so the appropriate response can be assessed.

This guidance does not replace the separate assessment and best-interest protections required for processing information about minors. It does not treat a single generic age rule as sufficient for every situation.

Tg Apps serves people and businesses in different markets. This policy does not displace mandatory rights that apply to your situation. Additional rights under applicable local law will be assessed under that law.

New forms, advertising tools, automated decision processes or purposes require review of this policy and website controls before those uses begin.

The latest update date appears at the beginning of this document. Material changes will be communicated appropriately, and fresh consent requested where required. Updating a notice does not expand a permission already given.

Questions about the website or your information can be sent to support@tgapps.dev. Portuguese and English versions should describe the same practices. Please report discrepancies so they can be clarified and corrected.