Privacy Policy
How ExoStack Consultoria collects, uses and protects your personal data, with a focus on our advertising campaigns on Meta Ads (Facebook and Instagram) and LinkedIn Ads, in compliance with the Brazilian General Data Protection Law (LGPD – Law No. 13,709/2018).
Last updated: July 2, 2026
This is a translation for convenience. In case of any discrepancy, the Portuguese version prevails.
This Policy explains, transparently, which personal data we process, for which purposes and on which legal bases, and what your rights as a data subject are. By browsing our website or interacting with our ads, you acknowledge that you are aware of the practices described here.
1. Who is the data controller
The controller responsible for processing your data is ExoStack Consultoria, located at R. Um, 7, Sala 01, Vila Margon, Catalão-GO, 75711-030. For any matter related to this Policy or to your personal data, please contact us by e-mail at [email protected].
2. Data we collect
Depending on how you interact with us, we process the following categories of data:
Data you provide to us
Name, e-mail, phone/WhatsApp, company and the messages sent through forms, chat or direct contact.
Browsing data
IP address, browser and device type, pages visited, traffic source and interactions measured by cookies and tags.
Campaign data
Which ad or platform originated your visit, and clicks and conversions attributed to our Meta Ads and LinkedIn Ads campaigns.
Relationship data
History of contacts, proposals and projects, when you become an ExoStack client or lead.
We do not collect sensitive data (racial origin, health, political opinion, etc.) for advertising purposes.
3. Ads: Meta Ads and LinkedIn Ads
We invest in digital advertising to present our services to those who may benefit from them. To do so, we install measurement tags on our website, which share information with the advertising platforms. Each one is detailed below.
Meta Ads
Facebook · InstagramWe advertise on Facebook and Instagram. We use the Meta Pixel and the Conversions API to measure campaign effectiveness, understand which ads generate contacts and show relevant ads to people who have already shown interest (remarketing) and to lookalike audiences.
Data processed on this platform
- Pages visited and actions on the website (view, click, form submission)
- Browser/device identifiers and IP address
- Contact data you provide to us, sent in encrypted form (hash) for audience matching
Tool: Meta Pixel and Conversions API
Operator: Meta Platforms, Inc. · platform's privacy policy
LinkedIn Ads
LinkedInWe advertise on LinkedIn to reach professionals and companies. We use the LinkedIn Insight Tag to measure conversions, optimize campaigns and build remarketing audiences, as well as to obtain aggregated demographic data about who visits our website.
Data processed on this platform
- Pages visited and conversions attributed to campaigns
- Device identifiers and IP address
- Aggregated professional data (job title, company, industry) provided by the platform in anonymized form
Tool: LinkedIn Insight Tag
Operator: LinkedIn Ireland Unlimited Company · platform's privacy policy
You are in control: personalized ads are only shown with your consent to marketing cookies. You can decline them in the cookie banner and adjust your ad preferences directly on the Meta and LinkedIn.
4. How we use your data
- Respond to contact, quote and business proposal requests
- Display and measure ads on Meta Ads and LinkedIn Ads, including remarketing and lookalike audiences
- Measure campaign effectiveness and optimize marketing investment
- Improve the experience and content of our website
- Comply with legal, contractual and regulatory obligations
- Prevent fraud and ensure the security of our platforms
5. Legal bases (LGPD)
All processing relies on a legal basis under Art. 7 of the LGPD:
| Purpose | Legal basis |
|---|---|
| Personalized ads and marketing cookies (Meta/LinkedIn) | Consent (Art. 7, I) |
| Responding to contacts and conducting business negotiations | Preliminary procedures to a contract (Art. 7, V) |
| Aggregated audience measurement and website improvement | Legitimate interest (Art. 7, IX) |
| Record keeping and compliance with obligations | Legal/regulatory obligation (Art. 7, II) |
6. Who we share data with
We do not sell your data. We share information only with processors necessary for our operations, always limited to the purpose described:
- Advertising platforms: Meta Platforms, Inc. and LinkedIn Ireland Unlimited Company, for running and measuring campaigns
- Website traffic analytics and measurement tools
- Hosting, e-mail and cloud infrastructure providers
- Public authorities, when required by law or court order
8. How long we keep data
We keep your data only for as long as necessary for the purposes of this Policy or to comply with legal obligations. Contact data of leads and clients is retained during the relationship and for the applicable legal periods; campaign identifiers follow the periods defined by the advertising platforms. Once the purpose has been fulfilled, the data is deleted or anonymized.
9. Your rights as a data subject
The LGPD guarantees you, at any time and free of charge, the right to:
To exercise any of these rights, simply send an e-mail to [email protected]. We will respond within the time limits set by law.
10. Information security
We adopt technical and organizational measures to protect your data against unauthorized access, loss, alteration or improper disclosure, including encryption in transit, access control and sending contact data to advertising platforms in encrypted form (hash). No system is infallible, but we work continuously to reduce risks.
11. International data transfer
Meta and LinkedIn are companies with operations outside Brazil. When using their tools, some data may be processed in other countries. These transfers take place based on the safeguards provided for in the LGPD and on the protection clauses adopted by the platforms themselves.
12. Children's data
Our services and ads are aimed at professionals and companies. We do not knowingly collect data from individuals under 18 years of age. If we identify such data, we will take steps to delete it.
13. Changes to this policy
This Policy may be updated to reflect legal or operational changes. The date of the last update is always shown at the top. We recommend reviewing it periodically.
14. Data Protection Officer (DPO) and contact
Questions, requests or complaints about the processing of your data can be sent to our Data Protection Officer:
Data Protection Officer (DPO), ExoStack Consultoria
You may also file a complaint with the ANPD (Autoridade Nacional de Proteção de Dados, the Brazilian National Data Protection Authority).