Privacy Policy

Murillo Cortez, a photographer based in Goiânia, Goiás, Brazil, is responsible for personal data processed through this website and the Murillo Cortez Agenda application. For privacy questions and requests, contact murillocortez@gmail.com or WhatsApp +55 (62) 8322-0501.

When requesting assistance, you may provide your name, phone, email, company, messages and project details: service, date, city, venue, time, duration, audience, intended image use and notes. These support replies, quotation and delivery of the requested service. A valid name and phone allow a private draft quote to be saved progressively while you complete the brief.

Proposals include scope, prices and, when accepted, the parties’ names, server timestamp, record identifier and a hash of the approved data. Murillo records payment confirmation separately, with the received amount and an internal reference. The website does not collect card numbers or access your bank account. Voluntary feedback may include a rating and comment.

If you choose to receive your summary on WhatsApp, we record the number, the permission version and its date. The first message only verifies the number; your brief is linked after confirmation from the same account. Murillo reviews proposals before release. One reminder after 24 hours is only allowed if you select that option. Reply STOP to stop automated messages. n8n coordinates the workflow and Evolution processes messages. The browser stores only a temporary brief reference and the offer frequency during the session, separately from analytics cookies.

Assistance and quotations support steps you request before entering a contract and performance of the service. Necessary records may be kept for legal obligations and the exercise of rights. Security and abuse prevention protect operation. Optional cookies and measurement require your permission, which you may withdraw. Rejecting measurement does not prevent assistance.

The public brief uses guided collection without sending your conversation to an AI model. If WhatsApp assistance or an AI feature is enabled, that channel’s messages may be processed by configured providers, such as OpenRouter, to assist the conversation. Avoid sending unnecessary identity documents, passwords, financial or sensitive information.

Only the owner connects a Google account through OAuth. Visitors do not need to connect theirs. The calendar.events scope permits querying and managing events in the authorized calendar. Availability checks use event identifiers, times, status and participation responses, without disclosing private appointments. Approved proposals request a provisional reservation with client and event details; payment confirmation updates the same reservation.

When conversation booking is enabled, name, email, note and time are sent to Google to create the appointment, invite the visitor and generate Meet. Cancellation and rescheduling update that appointment. Refresh tokens are encrypted on the server; necessary booking records use private storage. Google data is not sent to AI or used for advertising, sale or model training.

Use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including Limited Use requirements. The owner may revoke access in Google Account permissions and request deletion through the contact above. Revocation does not automatically delete existing calendar events or records that must be retained.

Hosting and storage providers process information needed to operate the service. The contact form uses Formspree to forward messages. Google processes Calendar and Meet when used; the SMTP provider processes email when configured. Opening WhatsApp, Instagram, LinkedIn or an external form also involves those services’ practices. JotForm may be used when you choose a brief form provided through that service.

With analytics permission, Google Analytics and Microsoft Clarity, when configured, receive navigation and interaction data. Assistance fields are marked for Clarity masking; avoid entering personal information where it is not requested. Providers may process information outside Brazil, subject to their policies and applicable legal safeguards. We do not sell your information or use it for unsolicited advertising.

Necessary cookies support sign-in, security, calendar authorization and privacy choices. Appearance preferences use local storage. Cookie choices last 180 days. Optional measurement stays blocked until permission; proposal, owner panel and booking pages do not load Analytics or Clarity. See the Cookie Policy for identifiers and controls.

Assistance, proposal, acceptance and booking records are stored privately on the server with restricted owner access. They are retained as needed for assistance, contractual relationships, legal duties or the exercise of rights. There is no single automatic deletion period for every record; requests are assessed according to purpose and applicable duties. Backups and technical logs may have their own retention cycles. No system is immune to incidents; protect private proposal and booking links.

You may request confirmation, access, correction, sharing information and, where applicable, portability, anonymization, restriction or deletion. You may withdraw consent, learn about the consequences of refusal and contact Brazil’s ANPD. Use the email above; proportionate identity checks may be needed to protect information without collecting excessive data.

Cookie choices can be changed in the footer. Deleting cookies does not erase proposals or messages already sent: contact us about those records. A responsible adult should provide children’s project details, limited to what is needed. We do not request children’s registration or sensitive data to browse.

This page may be updated to reflect actual features and practices. Significant purpose changes will be communicated and require fresh permission where needed. The version date is shown on this page.