Privacy policy

Last updated: October 6, 2026

1. Who we are

allee is a digital marketing agency. We create and manage ads (Meta, Google and TikTok), web pages and content for businesses.

The company responsible for your data (the "controller", under Brazil's General Data Protection Law, LGPD) is MAKENAI DIGITAL CONSULTORIA LTDA, CNPJ 62.465.056/0001-79, which operates the allee brand.

Data protection officer: Rafael Seifriz, at contato@alle3.com.br.

This policy covers:

the website alle3.com.br and our campaign pages (l.alle3.com.br);
our WhatsApp number, +55 11 96915-9193;
the forms you fill in, including lead forms in our Facebook and Instagram ads;
our social media accounts.

When we work for a client (for example, receiving the leads generated by the client's ads), the client decides how that data is used. In that case we follow the client's instructions and privacy policy.

2. What data we use and where it comes from

What you give us. Name, email, phone or WhatsApp number, company and job title. If you hire us, also your tax ID (CPF or CNPJ) and address, for the contract and the invoice. And the messages you send us on WhatsApp (text, audio and images).

Ad lead forms. When you fill in a form in one of our ads on Facebook or Instagram, we receive what you entered (for example name, email and phone) and the ad identification.

Social media. Comments and messages sent to our accounts, and statistics about our posts. Statistics arrive aggregated, without identifying who viewed them.

What is collected while you browse. Pages viewed, clicks, where the visit came from (for example, which ad), device and browser type, IP address and cookie identifiers. For this we use Google Analytics and Google Ads, the Meta Pixel, the TikTok Pixel and Shopify's own analytics. See section 7.

Public sources. To offer our services to professionals and businesses, we may use professional data that the professional or business has published themselves: name, business phone, website and address listed on Google Maps or on their own website. You can opt out at any time (section 6).

What we do not ask for. We do not ask for sensitive data (health, religion, political opinion and the like). We do not store card data: when there is a payment, it is processed by the payment provider.

Google Ads data accessed by our tool. Our internal campaign tool uses the Google Ads API with allee's own sign-in, and only on allee's ad accounts and on the ad accounts of clients who granted us access. It reads and writes advertising data only: accounts, campaigns, budgets, ad groups, keywords, ads and performance reports. We use this data only to create, report on and manage that client's own campaigns. We do not sell it, do not use it for third-party advertising and do not use it to train artificial intelligence models. allee's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The access key is kept out of the source code and system logs, in a restricted-access file. A client can unlink their account from ours at any time in Google Ads.

3. Why we use it and our legal basis (LGPD)

Purpose	Legal basis (Law 13,709/2018)
Replying to you and preparing the proposal you asked for	Pre-contractual steps (art. 7, V)
Providing the contracted service, drawing up the contract and issuing invoices	Performance of a contract (art. 7, V) and legal obligation (art. 7, II)
Measuring visits and ad results, and showing ads to people who visited us	Consent (art. 7, I) on the store; legitimate interest (art. 7, IX) on campaign pages, with the option to block it (section 7)
Offering our services to professionals and businesses, based on public data or a previous contact	Legitimate interest (art. 7, IX), with the right to say no at any time
Security, fraud prevention and defense in legal proceedings	Legitimate interest (art. 7, IX) and regular exercise of rights (art. 7, VI)

We do not sell personal data. No decision that affects you is made by automated means alone.

4. Who we share it with

Only with the service providers we need in order to operate. They process data on our behalf and under our instructions:

Provider	Purpose
Shopify	Store and website alle3.com.br
Supabase	Our database (servers in São Paulo, Brazil)
Cloudflare	Hosting of our campaign pages and our customer service screen
Meta (WhatsApp, Facebook and Instagram)	WhatsApp messages, ad lead forms, Pixel and ads
Google	Analytics, Ads, email and backups
TikTok	Pixel and ads
Anthropic (Claude)	Artificial intelligence that helps us summarize conversations and draft replies. A team member reviews everything before it is sent.
Payment provider (when there is a payment)	Processing the payment

We also share data when required by law or by a court order.

5. Data outside Brazil

Some of these providers store or process data outside Brazil, mainly in the United States and Europe. In those cases the transfer follows art. 33 of the LGPD, with providers that are contractually bound to protect the data.

6. Your rights and how to exercise them

At any time, you can:

find out whether we process your data and see what it is;
correct wrong or outdated data;
ask for unnecessary data to be anonymized, blocked or deleted;
receive your data to take it to another provider;
find out who we share your data with;
withdraw any consent you gave;
object to uses based on legitimate interest, for example to stop receiving our offers.

How to ask: write to contato@alle3.com.br or send a WhatsApp message to +55 11 96915-9193. We reply within 15 days.

To stop receiving messages from us: just reply asking to be removed. We add your number to a "do not contact" list and will not contact you again.

Data deletion

To delete your data, including data we received through Facebook, Instagram or WhatsApp, ask through the channels above and tell us the email or phone number you used. We delete it from our database within 15 days and confirm in writing. Old backups are deleted automatically within about 2 months. We keep only what the law requires us to keep, such as invoices, and your number on the "do not contact" list if you asked to be removed.

If you are not satisfied with our answer, you can also file a complaint with Brazil's National Data Protection Authority (ANPD) at gov.br/anpd.

7. Cookies and measurement

Cookies are small files a website stores in your browser.

On the store (alle3.com.br), essential cookies are always on. Analytics and advertising cookies (Google and Meta) only work if you accept them in the cookie banner. To change your choice later, clear the site's cookies in your browser and the banner will appear again.

On campaign pages (l.alle3.com.br), Google Analytics measures without storing cookies in your browser. The Meta and TikTok pixels measure the visit from the moment the page opens. You can block them in your browser settings or in your Meta and TikTok ad preferences.

8. How long we keep it

Data	Retention
Contacts who did not become clients, including those from public sources	Up to 24 months after the last contact
Clients: contract, invoices and conversations	For the duration of the contract plus 5 years
Browsing data	Up to 14 months
"Do not contact" list	As long as needed to honor your request

When the period ends, we delete the data or make it anonymous.

9. Security

Access to data is limited to the team members who need it and is password protected. Data travels encrypted (HTTPS). No system is completely immune to failures; if an incident happens that could put you at risk, we will notify you and the ANPD, as the law requires.