Skip to content
First Class Dev
Home/Privacy Policy

Privacy Policy

Last updated: August 16, 2026. Here's exactly how we handle your data — in plain language, no legalese.

1. Who we are

This policy belongs to L. M. GODOY LTDA, Brazilian company registry (CNPJ) 68.496.102/0001-83, registered at R. Presidente Juscelino Kubitscheck de Oliveira, 1321, Sala Sede Virtual 87, Centro, Nova Andradina/MS, 79750-059, Brazil — trading as First Class Dev. It describes, item by item, exactly what data this site collects, why, on what legal ground and for how long.

2. Everything we collect

The list below is complete. If something is not here, the site does not collect it.

  • Name, email, phone and company — when you fill in the contact form or request the Speed X-Ray. Used to reply and send a proposal. Legal ground: your consent. Kept for 24 months.
  • Project type and budget range — contact form fields, used to route your request. Consent. 24 months.
  • The message you write — including whatever you tell us about your business. Consent. 24 months.
  • The website address you ask us to measure, plus the technical results (score, load time and bottlenecks found). Without it there is no report. Legal ground: performance of the service you requested. 24 months.
  • Your IP address — read on each request to rate-limit form abuse. Legal ground: legitimate interest in security. In the abuse control it lives 15 minutes; in the internal scan notice it travels with the email for 24 months.
  • Server logs — IP, browser and page requested, generated automatically by the hosting provider. Legitimate interest in security and diagnostics. Retention set by the hosting provider.
  • Site usage data — pages visited, device and approximate city-level location, via Google Analytics, only if you allow it in the cookie notice. Consent. Up to 14 months.
  • Billing name, email, CPF or CNPJ and phone — when you purchase through the site. The CPF or CNPJ is required to issue a Pix or boleto and goes straight to Asaas, which processes the payment; the phone is optional. For card payments everything is filled in on Asaas's own page:card data never touches our server. Legal ground: performance of contract and tax obligation. 5 years, as tax law requires.
  • Project information — what you share with us during development. Performance of contract. For the contract term plus 5 years.

3. Cookies and what stays in your browser

Analytics cookies are not loaded before you allow them: until you click Allow, Google Analytics is not even downloaded by your browser. You can change your mind at any time via Cookie preferences in the footer.

  • fcd-cookie-consent — stores your cookie choice. Essential, stays until you clear your browser.
  • fcd_raiox_popup — remembers you already saw the Speed X-Ray invitation, so it does not repeat in the same week. Essential.
  • Google Analytics cookies — only exist after you allow them.

4. Who we share it with

We do not sell your data and we do not hand it to third-party advertising. It only passes through the providers the site needs to run:

  • Vercel (United States) — site hosting and server logs.
  • Resend (United States) — delivery of the emails the site sends.
  • Google Analytics (United States) — usage measurement, only with your permission.
  • Google PageSpeed Insights (United States) — receives the address you ask us to measure.
  • Asaas (Brazil) — payment processing.

We also share when the law or a court order requires it.

5. Data that leaves Brazil

Vercel, Resend and Google operate in the United States, so part of the processing happens abroad. Those transfers rely on the standard contractual clauses approved by the Brazilian data protection authority (ANPD Resolution 19/2024), present in those providers' agreements — and, for analytics, on your specific consent.

6. Your rights

Brazil's data protection law (LGPD) lets you ask, at any time, for:

  • Confirmation that we process your data, and access to it;
  • Correction of anything wrong or out of date;
  • Deletion or anonymisation;
  • Portability;
  • Information on who we share it with;
  • Withdrawal of consent, without invalidating what was done before.

Write to suporte@firstclassdev.com.br. We answer within 15 days. To stop receiving our emails, the fastest route is the unsubscribe link in the footer of the message itself.

7. Security

The site runs over HTTPS only and keeps no visitor database: enquiries arrive by email and live in our corporate inboxes, with access restricted to the team. Payment data stays inside Asaas, not with us. No system is 100% secure, but we work to reduce risk — and if a relevant incident occurs, we notify you and the ANPD as required by law.

8. Data protection officer

Our DPO is Lucas Godoy, reachable at suporte@firstclassdev.com.br.

9. Changes to this policy

We may update this policy when needed — the date at the top always marks the current version. Material changes are emailed to active clients.