Website privacy notice.

1. Who is responsible

Venelouis, based in Brazil, is responsible for this website and acts as the controller of personal data handled for its contact and privacy requests. Contact: [email protected]. This is also the channel for privacy questions, complaints and rights requests.

2. Information involved and why

Website requests. GitHub Pages hosts these pages. Serving them necessarily involves sending your IP address and technical request information, such as the requested address, time and browser information, to the host. GitHub may process this information to deliver and protect its services under the GitHub Privacy Statement. This website does not create visitor profiles or keep an application database of visits.

Messages you send. If you contact us, we receive your email address, any name you provide, your message, attachments and associated email metadata through Google Gmail. We use this information to answer your inquiry, follow up on an issue or handle your privacy request. Providing it is voluntary; without enough information or a reply address, we may be unable to help. Please avoid sending passwords, identity documents or sensitive personal data unless specifically needed and requested.

Local interactions. Navigation, animations and display preferences detected from your browser run locally. On the landing page, clicking Copy writes the displayed command to your clipboard; it does not read your clipboard or send its contents to us.

3. Purposes and legal bases

For ordinary correspondence we rely, where permitted, on our legitimate interest in responding to inquiries you initiate and maintaining the project, taking your rights and reasonable expectations into account. When LGPD or GDPR applies, these are the legitimate-interest grounds in LGPD Article 7(IX) and GDPR Article 6(1)(f). Handling a statutory privacy request or a binding legal obligation relies on LGPD Article 7(II) or GDPR Article 6(1)(c), as applicable.

Where applicable law requires consent for a particular activity, it must be obtained before that activity. Merely visiting this website does not constitute consent. We do not use contact messages to enroll you in marketing. GitHub and Google explain the legal bases for their own processing in their respective privacy notices.

4. Providers and international processing

GitHub receives website requests as the hosting provider; Google processes messages sent to the Gmail contact address. Our policy is to share information with people assisting with your inquiry only as needed to resolve it. Information may also need to be disclosed when required by law or to establish, exercise or defend legal rights.

The responsible person is in Brazil. Provider processing may take place in the United States and other countries where GitHub or Google operates, which can have different privacy laws. Their GitHub international transfer information and Google Privacy Policy describe their locations and safeguards. Those provider statements do not certify Rullst's compliance. Contact us for information about the recipients and transfer arrangements relevant to your data; applicable transfer requirements must be met for processing under our responsibility.

5. Retention and security

Our retention policy is to keep correspondence only for the time needed to resolve the inquiry and related follow-up. Records needed to meet a legal obligation or address a dispute may be retained for that requirement's duration. Once those purposes end, our policy requires deletion or anonymization. These criteria apply to records under our control; GitHub and Google set their own retention and backup schedules for provider-managed records.

The pages load their resources from the same website and restrict third-party content and background connections. These measures reduce unnecessary disclosure; they do not eliminate every security risk. Please use the security reporting channel for vulnerabilities rather than a public issue containing personal data.

6. Cookies, advertising and linked services

The code on these two pages does not set or read cookies or similar storage and does not implement fingerprinting or targeted advertising. This website does not sell or share personal information for cross-context behavioral advertising. There is no optional tracking to accept or reject. This behavior is the same whether or not your browser sends a Global Privacy Control (GPC) or Do Not Track (DNT) signal.

Social links are ordinary links: the social service is contacted when you follow one, rather than through an embedded feed on these pages. Rullst Academy, linked documentation, benchmarks, repositories and the Showcase, LMS, Portfolio and SaaS demos are outside this notice's scope. They may use accounts, cookies, local preferences or external resources and require their own information about those activities. Applications built with the Rullst framework also need privacy practices appropriate to their own data flows.

7. Your rights and how to exercise them

Depending on applicable law, you may request confirmation of processing, access or a copy, correction, deletion, anonymization, blocking or restriction, portability, and information about recipients. You may also have rights to object, withdraw consent where processing relies on it, or learn the consequences of refusing consent. Withdrawal does not affect earlier lawful processing. These pages do not make automated decisions with legal or similarly significant effects on you.

Email [email protected] with your request and enough context to locate the relevant correspondence. You do not need an account. We may ask for proportionate information to verify your identity or an authorized agent's authority; please do not send identity documents unsolicited.

Requests will be handled within the deadlines and conditions of the law that applies, normally without charge and without discrimination for exercising your rights. If a request is refused or an extension is permitted and needed, we will explain why and any available review or appeal route. You can reply to ask for review and may complain to the competent authority. For provider-controlled records, we can help identify the appropriate provider contact; we cannot directly delete its independent logs.

8. Regional privacy information

Laws have different territorial, activity and business thresholds. The following references help you find relevant rights and authorities; availability of the website worldwide does not mean every law automatically applies.

• Brazil — LGPD. Rights include those in Article 18 of the LGPD, subject to its conditions. You may petition the ANPD.
• European Economic Area — GDPR. Where applicable, you have the rights described in the EDPB rights guide and may complain to a supervisory authority, including where you live or work.
• United Kingdom — UK GDPR and Data Protection Act. You may exercise applicable data protection rights and raise concerns with the Information Commissioner's Office.
• California and other US states. Where the CCPA, as amended by CPRA, or another state privacy law applies, rights may include access, correction, deletion, portability, and opting out of sale, sharing, targeted advertising or certain profiling. This website does not carry out those advertising, sale or profiling activities. Applicable appeal and authorized-agent rights remain available.
• Canada. Where PIPEDA or provincial privacy law applies, you may seek access, correction and review of a privacy concern. See the Office of the Privacy Commissioner of Canada for the federal principles and complaint information.
• Switzerland. Where the Federal Act on Data Protection applies, you may exercise its information and other applicable rights. See the Federal Data Protection and Information Commissioner.
• Australia. Where the Privacy Act and Australian Privacy Principles apply, you may request access or correction and make a privacy complaint. See the Office of the Australian Information Commissioner.
• Singapore. Where the PDPA applies, relevant rights include access, correction and withdrawal of consent, subject to legal exceptions. See the Personal Data Protection Commission.

If you are elsewhere, contact us to exercise the rights available under your local law. This notice does not limit mandatory legal rights.

9. Children and changes to this notice

These pages provide general information about a software framework and do not offer child accounts or request children's personal information. If a child has sent personal information that needs attention, a parent or guardian can contact us to request review and, where appropriate, deletion.

The date above identifies the latest revision. We will update this notice when the website's data practices change, provide additional notice where required, and obtain consent before introducing processing that requires it. This notice describes these pages and their contact channel; it is not a certification of worldwide compliance or a privacy policy for every Rullst application.