Privacy policy

Build With Melo is the trading name of ANDRÉ MELO TECNOLOGIA DA INFORMAÇÃO LTDA (registered trade name WebWise), a Brazilian company, CNPJ 58.529.938/0001-83.

Contact for any privacy matter, including the data protection officer channel: andre@buildwithmelo.com.

Contact form. Name, email, role and the project description, plus phone and company when provided. Used to reply and to prepare a proposal. Legal basis: steps taken at the sender's request before a contract (LGPD, art. 7, V).

Browsing. The site uses Vercel Web Analytics, which counts visits in aggregate, without cookies and without identifying visitors. The hosting server logs technical data such as IP address and browser, for security and operation. A technical cookie remembers the chosen language.

Business outreach by email. Build With Melo sends business emails using professional contact details that a company publishes on its own website or official profiles, such as the company name, business email and phone, and the names of practitioners presented there. The purpose is to present a service related to that business. Legal basis: legitimate interest (LGPD, art. 7, IX). Every email carries an unsubscribe link, and anyone who unsubscribes receives no further messages.

AI agents for clients, including on WhatsApp. When Build With Melo runs an AI agent for a client business, for example on Meta's WhatsApp Business Platform, it processes on that client's behalf the messages, phone number and profile name of the people who talk to the agent. In that case the client is the controller and Build With Melo is the processor: it processes the data only to deliver the contracted service and on the client's instructions, does not sell it and does not use it to train AI models. Requests about this data are passed on to the responsible client.

Clients. Contact, contract and billing details, to perform the contract and meet legal and tax obligations (LGPD, art. 7, II and V).

Build With Melo does not sell personal data. It uses providers that process data on its behalf, only to deliver the services below:

• Vercel: website hosting and analytics.
• Resend: delivery of contact form messages.
• Google: business email.
• Notion: internal organisation of contacts and projects.
• Railway: servers for automations and agents.
• Meta: WhatsApp Business Platform, when the contracted service uses WhatsApp.
• AI model providers: processing of the conversations of contracted agents.

Data may also be disclosed to authorities when the law requires it.

Some of these providers store data outside Brazil, mainly in the United States. These transfers follow the safeguards set out in the LGPD (art. 33), such as data protection contract clauses.

Data is kept for as long as the purpose that justified its collection requires, and to meet legal, tax and contractual obligations. Anyone who unsubscribes is kept on a suppression list with the minimum needed (the email address or domain), so they are never contacted again. Data processed on behalf of clients follows each client's contract and instructions and is deleted when the service ends.

Under the LGPD (art. 18), you can ask for confirmation that your data is processed, access, correction, anonymisation, blocking or deletion of unnecessary data, portability, information about sharing, withdrawal of consent, and to object to processing based on legitimate interest. Requests go to andre@buildwithmelo.com and are answered within 15 days. You can also complain to Brazil's data protection authority (ANPD).

People in Australia can make the same requests through the same address.

Email andre@buildwithmelo.com with the subject "Data deletion", giving the email address or phone number you used. Build With Melo confirms the request and deletes the data within 15 days, except data the law requires it to keep.

If the data came from an agent run for a client, such as a WhatsApp conversation with a clinic, the request is passed on to that client, who is the controller, and carried out on its instructions.

Access to data is limited to those who need it to deliver the service, connections are encrypted (HTTPS), and system credentials are never shared.

This policy may be updated. The date at the top shows the version in force.