This document is provided for your convenience. The official, governing version is in English; in case of any discrepancy, the English version prevails.
1. Who We Are
SRRF Solutions is a marketing firm serving business clients in the United States and Brazil. This policy explains what personal data we collect, why, and what you can ask us to do with it. For privacy questions, write to info@srrfsolutions.com.
2. Site Visitors
When you visit this site we collect technical data through cookies and analytics: pages viewed, approximate location derived from IP address, device and browser type, and referring source. This is used to understand how the site performs.
Non essential cookies load only after you accept them in the cookie banner. Declining leaves the site fully usable. You can change your choice at any time by clearing site data and choosing again.
3. Prospects
If you complete a form on this site, book a call through Calendly, or email us, we collect the information you provide: name, business email, phone, company, company website, and whatever you write about your situation. Some forms also ask about how your business operates, such as your monthly spend on components, the size of your company, and where your material is kept today.
We use it to answer you, to prepare a proposal, and to follow up about that enquiry. If you opt in to marketing email, we also use your email to send it, and you can unsubscribe from any message.
The legal basis is your consent where you gave it, and our legitimate interest in responding to a business enquiry you initiated.
If you complete the form at /start, your answers are scored automatically, after a first check on whether you are in the United States or Brazil. The criteria are your timeline, your budget range, your role in the decision, your goal, where AI is in your business today, and your language needs. The result decides, on the spot and with no person in between, which next step the page offers you (an invitation to book a call, or a note that we are not the right fit), and which follow-up emails you receive. The result is not sent to Meta or to any other advertising platform. You can ask for that decision to be reviewed, and for more information about the criteria, by writing to info@srrfsolutions.com.
4. Clients
During an engagement we process business contact details, billing information, project assets you provide such as brand files, copy and data, communications between us, and access credentials where a Statement of Work requires them.
We use this only to deliver the engagement, to invoice, and to meet our legal obligations. The legal basis is performance of the contract between us.
Credentials are held only for as long as the engagement needs them and are revoked or handed back on request.
5. Subprocessors
We use the following providers to operate the business. Each processes only what its function requires:
Vercel (hosting and analytics), Supabase (application database and authentication), Resend (transactional and marketing email), Postmark (inbound email processing), Stripe (payments and billing; card details go to Stripe and are never stored by us), Anthropic (AI assisted research, drafting and analysis, and the model provider for custom AI stacks where an engagement uses Claude), Calendly (scheduling), Google (Workspace and Calendar), Meta (the Meta Pixel, for advertising measurement; it loads only after you accept Marketing cookies in the cookie banner).
We do not sell personal data. Apart from the Meta Pixel above, which runs only with your consent, we do not share it with third parties for their own marketing.
6. International Transfers
We operate between the United States and Brazil, so personal data may be transferred and processed in either country and in other countries where our subprocessors operate. Where data leaves the EEA, the UK or Brazil, transfers rely on the safeguards offered by the relevant provider, such as standard contractual clauses.
7. Your Rights
Under the GDPR, if you are in the EEA or the UK, you have the right to access, rectify, erase, restrict and port your personal data, to object to processing based on legitimate interest, and to withdraw consent at any time without affecting processing already carried out. You may also complain to your supervisory authority.
Under the CCPA and CPRA, if you are a California resident, you have the right to know what personal information we collect and how it is used, to request deletion, to request correction, and to not be discriminated against for exercising those rights. We do not sell personal information. If you accept Marketing cookies, the Meta Pixel sends Meta information about your visit for advertising measurement, which the CPRA treats as sharing. If you decline Marketing cookies, nothing is shared this way.
Under the LGPD, if you are in Brazil, you have the right to confirmation of processing, access, correction of incomplete or outdated data, anonymisation, blocking or deletion of unnecessary or excessive data, portability, information about sharing, and revocation of consent. Our LGPD data protection contact (encarregado, article 41) is Sergio Rosendal Ribeiro Filho, reachable at info@srrfsolutions.com.
To exercise any of these rights, write to info@srrfsolutions.com. We respond within the period the applicable law sets, and within 30 days where no period is set.
8. Retention
Project and engagement records, including contracts, invoices and deliverables, are kept for 7 years after the contract ends, which is the period our tax and contractual obligations require.
Marketing contact data is kept until you unsubscribe or ask for deletion, whichever is first.
Prospect enquiries that do not become engagements are kept for 24 months and then deleted.
Deletion requests are honoured except where a record must be retained to meet a legal obligation, in which case we keep only what the obligation requires and tell you what that is.
9. Security
Data is encrypted in transit. Access to client data is limited to the people working on the engagement. Payment card details are handled by Stripe and never reach our systems. No method of transmission or storage is completely secure, and we do not claim otherwise.
10. Children
Our services are for businesses. We do not knowingly collect personal data from anyone under 18. If you believe we have, write to info@srrfsolutions.com and we will delete it.
11. Changes to This Policy
We may update this policy. Material changes will be notified by email to clients and posted here with a revised date.