This is the privacy notice for MosaicoTools (the “Site”), operated by Mosaico Marketing Digital, registered in Brazil [CNPJ to add], with operational address [address to add]. We respect your privacy. This page explains what we collect, why, who we share it with, how long we keep it, and the rights you have under GDPR, CCPA/CPRA, and Brazil’s LGPD.
1. Who we are (data controller)
For data-protection purposes, the controller is Mosaico Marketing Digital. You can reach us at privacy@mosaicdigitalmkt.com for any privacy-related request.
2. What we collect
We collect only what we need to run the Site and to deliver the content you ask for:
- Email address, only if you subscribe to The Brief newsletter. Processed on consent (GDPR Art. 6(1)(a); LGPD Art. 7, I).
- Analytics — anonymous page-view events, referrer, language, browser, country (no name, no email, no precise location). Processed on legitimate interest (GDPR Art. 6(1)(f); LGPD Art. 7, IX).
- Server logs — IP address, request URL, timestamp, user-agent. Retained briefly for security and abuse prevention.
- Cookies — see Section 4.
3. Why we process it
- To deliver the newsletter you subscribed to.
- To understand which articles are useful so we can write more of them.
- To keep the Site online, secure, and free from abuse.
- To meet legal obligations (tax, accounting, response to lawful requests).
We do not sell or rent your data. We do not use it to build advertising profiles outside this Site.
4. Cookies
We use three categories of cookies. You can refuse non-essential ones via the consent banner or your browser settings.
- Strictly necessary — session, security, consent state. Cannot be disabled without breaking the Site.
- Analytics — aggregate, IP-anonymised page-view metrics. Disabled by default until you consent.
- Marketing/attribution — used by ad networks (Google Ads) to measure whether visits from ads led to a subscription. Disabled until consent.
5. Who we share data with (sub-processors)
- Hosting — VPS provider in São Paulo, Brazil. Stores Site files and database.
- Email delivery — [ConvertKit / Brevo / Mailchimp — to be confirmed] for sending The Brief. Stores your email and engagement events.
- Analytics — Google Analytics 4 (with IP anonymisation) and Google Ads measurement, only after consent.
- Search engines & CDNs — public content is indexed and may be served from CDN edges; this does not transmit your personal data.
6. How long we keep it
- Email subscribers — until you unsubscribe. After that, suppression-listed for the legal minimum needed to honour your opt-out.
- Server logs — 30 days.
- Analytics — 14 months (GA4 default), then deleted.
- Tax / accounting records — as required by Brazilian law.
7. International transfers
Some sub-processors operate outside Brazil and the EEA (notably Google in the US). These transfers rely on Standard Contractual Clauses and the EU-US Data Privacy Framework where applicable.
8. Your rights
You can request the following at privacy@mosaicdigitalmkt.com — we respond within 30 days at most:
- Access — a copy of the personal data we hold.
- Correction — fix anything inaccurate.
- Deletion — remove your data, subject to legal retention.
- Portability — receive your data in machine-readable format.
- Objection & restriction — limit how we process your data.
- Withdraw consent — at any time, without affecting prior lawful processing.
- Complain to a supervisor — ANPD (Brazil), your local DPA (EEA/UK), or California AG.
9. Children
This Site is intended for adults. We do not knowingly collect data from children under 16 (EEA), under 13 (US, COPPA), or under 12 (Brazil, LGPD). If you believe we have, write to privacy@mosaicdigitalmkt.com and we will delete it.
10. Changes
If we update this policy, the date below changes. Material changes will be announced via a banner on the home page or in The Brief.
Last updated: May 28, 2026.