Privacy Policy

Bruma Agency ("we," "our," or "us") operates the website bruma.agency (the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our Site or use our services. By using the Site, you agree to the practices described in this policy.

We collect information that you voluntarily provide to us when you fill out our contact form, including:

• Your name
• Your email address
• Your estimated project budget range
• Project details and any other information you choose to share

We do not use cookies for tracking purposes. We do not collect data through analytics tools, advertising pixels, or any third-party tracking technologies.

We use the personal information we collect solely for the following purposes:

• To respond to your inquiry and communicate with you about your project
• To send you a confirmation email acknowledging receipt of your message
• To evaluate and prepare a proposal for your project

We will never use your information for marketing purposes unless you explicitly opt in.

Your contact form submissions are stored securely in our database hosted by Supabase, which uses encryption at rest and in transit. Access to your data is restricted to authorized personnel only. We use industry-standard security measures to protect your information, including encrypted connections (HTTPS), Row-Level Security policies, and restricted API access.

We use the following third-party services to operate our Site:

• Supabase—Database hosting for storing contact form submissions
• Resend—Email delivery service for sending confirmation and notification emails
• Vercel—Website hosting and deployment

These services may process your data in accordance with their own privacy policies. We do not sell, trade, or otherwise transfer your personal information to any other third parties.

We retain your contact form data for as long as necessary to fulfill the purpose for which it was collected, typically for the duration of any business relationship and a reasonable period thereafter. You may request deletion of your data at any time by contacting us.

Depending on your location, you may have the following rights regarding your personal data:

• Access—Request a copy of the personal data we hold about you
• Correction—Request correction of inaccurate data
• Deletion—Request deletion of your personal data
• Portability—Request your data in a portable format
• Objection—Object to the processing of your personal data

To exercise any of these rights, please contact us at tomas@bruma.agency.

Our Site is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy or our data practices, please contact us at tomas@bruma.agency.