Privacy Policy
Last updated: July 20, 2026.
This policy explains how OBSCVRA Produções handles personal data received through the website, especially through the contact and quote form, and how usage metrics are used to improve the experience.
Data controller and contact
The data controller is OBSCVRA Produções, Brazilian company registration CNPJ 43.165.726/0001-97. For privacy requests, use the contact page or the professional channels provided by OBSCVRA in direct communications. The destination email address used by the form is not published as plain text in the website HTML in order to reduce automated harvesting and spam.
Data we collect
We may receive your name, email address, phone number, project location, estimated date, media and project type, intended image usage, budget range, free-text information and acknowledgement of this policy.
The website may also record technical and usage data such as pages visited, referral page, browser and device type, and named interactions with projects, filters, galleries, videos and form steps. Content typed into contact fields is not sent to the analytics service.
Purposes and legal bases
Data is used to answer requests, prepare quotations, assess production scope, maintain commercial history and comply with legal obligations when applicable. Legal bases may include pre-contractual procedures, contract performance, legitimate interest in managing commercial contacts, compliance with legal obligations and consent when specifically requested.
Web3Forms, hCaptcha and email
The form uses Web3Forms to process and forward messages to OBSCVRA's email inbox and hCaptcha to reduce automated submissions. Technical data required for anti-spam verification and the information you submit may pass through these services and through email providers involved in delivery and storage.
Usage metrics with PostHog
The website uses PostHog Cloud EU to understand, in aggregate, which pages and projects generate interest and where users encounter friction in the quote flow.
The configuration records page views, page exits and specific actions defined by OBSCVRA. Automatic click capture, session recordings, heatmaps, surveys and person profiles remain disabled. Values typed into the form, including name, email, phone and message, are not sent to PostHog.
Retention and deletion
Contact messages may be retained for as long as necessary to respond, negotiate, perform services and maintain administrative history. When there is no commercial, legal or contractual need, OBSCVRA may delete or anonymize the data. You may also request deletion, subject to legal obligations and records required for the defense of rights.
Your rights
Under applicable Brazilian data protection law, including the LGPD, you may request confirmation of processing, access, correction, anonymization, blocking, deletion, portability where applicable, information about sharing, review of automated decisions if any, and withdrawal of consent.
Security
OBSCVRA adopts reasonable measures to reduce unauthorized access, loss, alteration and disclosure, including use of a form access key without exposing the destination email address, field limits, hCaptcha and an anti-spam honeypot. No internet transmission is completely risk-free.
International transfers
Web3Forms, hCaptcha, PostHog, email providers, hosting and technical services may process data using infrastructure located outside Brazil. When this occurs, OBSCVRA seeks to use providers with security and privacy measures appropriate to the service context.
Changes to this policy
This policy may be updated to reflect changes to the website, services or legal requirements. The version published on this page is the current reference.