Privacy Policy
This policy explains what personal data UnderLab collects through this site, what it's used for, who it may be shared with, and how you can exercise your rights under Brazil's General Data Protection Law (LGPD, Law 13.709/2018) and, where applicable, comparable frameworks such as the GDPR.
1. Who is the data controller
UnderLab Tecnologia LTDA, Brazilian company registry (CNPJ) 68.175.522/0001-68, headquartered at R. Verbo Divino, 2001, Tower B, Suite 305, Chácara Santo Antônio, São Paulo/SP, Brazil, 04719-002.
Contact for any data-related matter: contato@tryunderlab.com.
2. What data we collect
We only collect data you voluntarily provide by filling out a form on this site:
• Contact form: name, email, subject, and message.
• Waitlist: email address.
• Partnership and project-discovery forms: whatever answers you choose to provide.
We do not collect sensitive data (health, race, political opinion, etc.) and we do not use tracking cookies. Our site analytics (Vercel Analytics) are cookieless and do not identify individual visitors.
3. What we use it for
To reply to your message, to notify you of updates once you join the waitlist, and to evaluate partnership or project proposals you send us. We do not use your data for any other purpose, and we do not sell data to third parties.
4. Legal basis
Processing is based on your consent, given when you voluntarily submit one of the site's forms, and on UnderLab's legitimate interest in responding to business inquiries it receives.
5. Who we share data with
We use the following service providers (data processors) to operate the site:
• Supabase: storage of messages and emails received via forms.
• Vercel: site hosting and cookieless audience analytics.
• Resend: email notifications when a form is submitted.
These providers may process data on servers outside Brazil. When that happens, the transfer follows the safeguards required by law. We do not share your data with third parties for marketing or advertising purposes.
6. How long we keep it
We retain data for as long as necessary to fulfill the purpose it was collected for, or until you request deletion, whichever comes first, subject to any legally mandated retention periods.
7. Your rights
You may request at any time: confirmation that we process your data, access to it, correction of incomplete or outdated data, anonymization or deletion of unnecessary data, portability, information about who we share your data with, and withdrawal of your consent.
To exercise any of these rights, write to contato@tryunderlab.com. We respond within a reasonable time.
8. Security
The site is served entirely over HTTPS, and data received through forms is stored in a database with restricted access control (row-level security): the site can only insert data, and reading is reserved to the UnderLab team.
9. Children
This site is aimed at businesses and professionals and does not knowingly collect data from anyone under 18.
10. Changes to this policy
We may update this policy to reflect changes to the site or to applicable law. The date at the top of this page indicates the version in effect.