Privacy Policy

1. Who is responsible for this site

This site is owned by Media Portal Soluções LTDA, headquartered in São Paulo, SP. For any matter related to this policy — including the requests described in Section 8 — contact us by email at contato@mediaportal.com.br or by phone at +55 11 3214-6415.

2. What we collect when you use the site

Browsing the site does not require registration. There is currently a single form that collects personal information, “Contact us”, and it only collects what you write yourself:

• required: name, company, job title, email address, and the message you wrote;
• how you prefer to be contacted: email, phone, or WhatsApp;
• phone number: optional, and required only if you choose to be contacted by phone or WhatsApp.

We use this to respond to your inquiry and to follow up on the business conversation. Filling out the form is not required to view any content on the site.

When handling an inquiry, our team records its status alongside it and, where applicable, an internal note on how the conversation is progressing. This note is written by us, is linked to your inquiry, and is visible only to authorized members of our team.

For past events, the site also offered booth appointment scheduling, which collected a name and a WhatsApp number. That form is no longer available; records already submitted remain stored and accessible only to authorized members of our team, and the same rights described in Section 8 apply to them.

3. Usage measurement, without identifying you

We record usage counts to learn what works on the site: which pages were opened, where the visit came from, the type of device, how long the page stayed open, how far it was scrolled, which buttons were used, and how fast it loaded — along with the connection type and the device's memory and processor, always in broad bands that identify no one. These records capture what happened, not who did it. The technical information the browser uses to identify itself (its user agent) is read only to filter out automated visits, such as those from bots, and is not stored.

We do not record your name, email address, phone number, or the content you type — not even the term searched within the site. We do not use these records to build behavioral profiles or for advertising.

4. Internal area: sign-in by email

The /admin address is the project tracking area, restricted to the Media Portal team and the client. Access is individual, through each person's email address: with a one-time code sent to that address at sign-in or with a password the person creates themselves.

We store the email address, the person's access level, and the date of their last access — enough to know who can open the area and how far their access extends. Only those already authorized on the access list can sign in; anyone who is not on it receives no code and cannot sign in.

The password, when a person creates one, is stored by our database provider in hashed form, which cannot be reversed — not even Media Portal can read it. When it is created, it is checked against publicly known data breaches: only a fragment of its hash is sent to the Have I Been Pwned service, which never receives the password.

On the sign-in screen, a Cloudflare check confirms that whoever is signing in is a person, and not an automated program. It runs only on that screen and uses technical information from the browser for this check.

The session is stored in a signed cookie that is valid for 12 hours and serves only to keep you signed in.

5. Cookies

This site does not use advertising, tracking, or audience measurement cookies — neither first-party nor third-party. Visiting the public pages does not store anything in your browser.

The three cookies that do exist are functional, and all of them originate from the internal area:

• the session cookie described in Section 4, which lasts 12 hours and keeps the user signed in;
• a temporary cookie, lasting up to 1 hour, created when someone requests the sign-in code by email and deleted upon signing in or out — it stores the email address the code was requested for, so that the code entered can be verified;
• a visual preference cookie, stored only if someone chooses a display theme within the internal area. It stores only the name of the chosen theme, lasts one year, and makes the screen open the way the person left it.

The first two are read only by the server and exist only on the internal area's address. The third is read by the browser itself, to render the screen, and stores nothing about who you are. None of the three follows you outside this site.

There is one exception that is outside our control: the event pages display an embedded Google map to show the venue. When this map loads, your browser connects directly to Google, which receives your IP address and may set its own cookies — governed by Google's privacy policy, not by this one. The venue address is also shown as text next to the map, for those who prefer not to load it.

6. Who holds the data

We do not sell, rent, or give away personal data. It stays with Media Portal and with the technology providers that keep the site running, each in its own role:

• Vercel — hosting and delivery of the pages.
• Supabase — database, on servers in the São Paulo region.
• Google — provides the map embedded in the event pages, described in Section 5. Google does not receive the content of the forms.
• Cloudflare — performs the bot check on the internal area's sign-in screen.
• Have I Been Pwned — checks, without receiving the password, whether a new password has already appeared in data breaches.

The information submitted through the forms is read only by the site's server and by authorized members of our team in the internal area. A visitor's browser never accesses this data.

7. How long we keep data

We keep the form data for as long as the handling of your inquiry and the business relationship last, or until you request its deletion. The measurement records described in Section 3, which do not identify anyone, are kept to track how the site evolves.

8. Your rights

Brazil's General Data Protection Law (LGPD — Law No. 13,709/2018) guarantees that you may request, at any time and free of charge:

• confirmation of whether we process your data, and access to it;
• correction of incomplete, outdated, or inaccurate data;
• anonymization, blocking, or deletion of unnecessary or excessive data;
• portability of the data to another provider;
• information about whom we share your data with;
• withdrawal of consent and deletion of the data processed on the basis of it.

To exercise any of these rights, write to contato@mediaportal.com.br. We will ask only for what is necessary to confirm that the request is yours.

9. Security

The site runs entirely over an encrypted connection. Personal data is kept in a database that cannot be read from the browser: only the site's server, with its own credentials, can read it. Team access is individual, using each person's email — with a one-time code sent at sign-in or a personal password, protected by Cloudflare's bot check — and only works for people on the access list, which is checked at every sign-in. Weak passwords, or passwords that have appeared in data breaches, are rejected.

10. Changes to this policy

If this policy changes, the “Last updated” date at the top of the page will change accordingly. We recommend reviewing this policy from time to time.