REVIEW DRAFT — This notice describes the current implementation. It is not an approved legal policy. State-specific rights, retention periods, and provider contractual terms require review before campaign launch.

Privacy Notice — United States

Who operates this site

Vettarya is a Brazil-based recruitment consultancy operated by 55.197.231 YARA MEDEIROS DE MELO OLIVEIRA - ME, CNPJ 55.197.231/0001-29. For privacy questions, contact yara@vettarya.com.

Information and purposes

Our US consultation form collects your name, work email, company, roles to recruit, and hiring timeline. Company website, job title, and additional details are optional. We record your marketing checkbox choice and campaign parameters (UTM tags). A Google Ads click identifier (GCLID) is recorded only with Advertising permission. The form does not ask for a phone number.

We use inquiry information to respond and discuss recruitment services. Selecting the optional, unchecked marketing box is separate from requesting contact and from cookie permission. You can withdraw marketing permission by emailing us. Please avoid sending sensitive personal information in free-text fields.

Storage and service providers

Inquiries are stored in Lovable Cloud’s managed database in the United States (the configured infrastructure region is Ohio). Authorized Vettarya administrators access inquiries from Brazil. Lovable provides hosting and managed database services; its underlying database infrastructure uses Amazon Web Services.

The optional site assistant processes the messages you send using Lovable’s AI service and the configured OpenAI model. Conversations and messages are stored in Lovable Cloud; contact details are saved as an assistant lead only after agreement in the conversation. The implementation stores hashed network/session identifiers to limit abuse. Supplier-side retention and access terms still need confirmation.

Google provides Analytics 4 and Google Ads, subject to independent cookie preferences, and Google Fonts, which requests fonts when the site opens. Contact through WhatsApp takes you to Meta’s service only when you choose the WhatsApp link. These external services have their own privacy terms.

Cookie and advertising choices

All four Google measurement consent signals start denied. Optional Google code loads only with permission for the relevant category. You can reject all, accept all, or customize Analytics and Advertising independently; your form still works after rejection. Use “Cookie preferences” in the footer to change your choice. Withdrawal may refresh the page to stop previously loaded Google code. Global Privacy Control keeps optional tracking off, including after saved acceptance.

Analytics-only measurement is temporarily paused: the current Google tag automatically loads an advertising destination, so we do not load it without Advertising permission. Permitted measurement can share page URLs, device/browser information, cookie and advertising identifiers, and conversion events with Google. Our form conversion event does not include your name, email, phone, or hiring description; enhanced conversions are not enabled in this implementation. See the Cookie Policy and Google privacy information.

Retention, requests, and review

The implementation includes automatic deletion of assistant conversations without a saved lead after 90 days. A fixed retention period for commercial inquiries has not yet been approved. Contact yara@vettarya.com to request access, correction, deletion, or withdrawal; applicable rights and exceptions depend on the laws that apply.

LEGAL REVIEW: Confirm applicable US state-law thresholds, sale/sharing or targeted-advertising classification, required opt-out disclosures, request procedures and deadlines, retention schedules, and supplier contracts. This draft does not claim certification or comprehensive compliance.

The Brazilian Portuguese Privacy Policy is unchanged. The UK review draft remains separate.