Privacy
Policy.

1. Who controls your data

The data controller is De Artista e Louco / Sacha Ferreira. Privacy requests can be sent to hello@deartistaelouco.com.

2. Information we process

• Information you send by email, including your name, address and message content.
• WhatsApp identifiers, message content, delivery information and commands sent to Scarlett.
• Technical website information such as IP address, browser, device, pages viewed and approximate location collected through hosting logs and Google Analytics.

We do not intentionally collect special-category or payment data through Scarlett.

3. Why we use it

• To respond to inquiries and discuss or provide requested creative services.
• To authenticate, route and record authorised DAeL production commands.
• To protect the studio, prevent misuse and troubleshoot the website and production systems.
• To understand aggregated website use and improve the experience.

Processing is based on steps requested before a contract, performance of a contract, legitimate interests in operating and securing the studio, legal obligations, and consent where required.

4. WhatsApp and Scarlett

WhatsApp messages are transmitted through Meta's WhatsApp Business Platform to a secured DAeL relay. The relay validates Meta's signature, limits access to the registered DAeL number, pseudonymises sender identifiers and keeps only the minimum event data needed to deliver the command to DAeL Engine. Provider-level identifiers and secrets are not exposed in the normal production workflow.

Do not send confidential third-party information or sensitive personal data through Scarlett unless it is necessary and you are authorised to do so.

5. Service providers and transfers

Data may be processed by service providers that support the studio, including Meta/WhatsApp, Google Analytics, OpenAI-hosted services and Cloudflare infrastructure. Some providers may process data outside the European Economic Area under their applicable transfer safeguards. We do not sell personal data.

6. Retention and security

Personal data is retained only as long as reasonably needed for the purposes above, contractual or legal requirements, dispute handling and system security. DAeL uses access controls, encrypted secrets, signature validation, pseudonymisation and data minimisation. No online service can guarantee absolute security.

7. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction or portability of your personal data, object to processing, or withdraw consent. You may also complain to Portugal's supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD).

Send requests to hello@deartistaelouco.com. We may need to verify your identity before fulfilling a request.

8. Changes

This policy may be updated when the studio's services or legal obligations change. The current version and update date will remain on this page.