Privacy policy.
How Agency Zero collects, uses and protects data, and what rights you have under the Brazilian LGPD and United States privacy laws.
In one line: Agency Zero collects the minimum needed to answer you and to measure its own marketing, never sells anyone’s data, and only loads the pixel and analytics after you accept.
1. Who we are and who this applies to
Agency Zero LLC is a marketing agency based in Florida, United States, serving Brazilian-owned businesses in the American market. This policy covers agencyzero.co, its subdomains, the free tools and the contact and briefing forms.
Because we work in Portuguese and part of our audience visits from Brazil, we handle data under both the Brazilian General Data Protection Law (LGPD, Law 13.709/2018) and the applicable United States privacy laws, including California (CCPA as amended by CPRA), Florida (Digital Bill of Rights) and the laws of Virginia, Colorado, Connecticut, Texas and other states with equivalent rules.
Under the LGPD, Agency Zero LLC is the controller. Under US law, we are the business or controller.
2. What we collect
What you give us. Name, phone or WhatsApp, email, company name, city and state, industry, intended budget range and whatever you write in open fields. In the brand briefing, also color and style preferences and the services you offer.
Collected automatically, with consent. Pages visited, time on page, traffic source, device type, browser, operating system and approximate region derived from IP. None of this starts until you accept cookies.
Security logs. Server records, including IP and timestamp, kept by our host to protect the site from abuse. These do not depend on consent, because they exist under legitimate interest in security.
What we do not collect. No government ID, no banking data, no health data, no racial origin, religious belief, political opinion, union membership, genetic or biometric data, and no data from anyone under 16. The site is not directed to children.
3. Why we use it, and on what legal basis
- Answering your request for a quote, diagnosis or briefing. Basis: steps prior to a contract, at your request.
- Delivering and invoicing the contracted service. Basis: performance of a contract.
- Measuring our own website and campaigns. Basis: consent, given in the cookie notice.
- Showing ads to people who already visited. Basis: consent.
- Sending marketing SMS or email. Basis: specific consent, given separately. See section 5.
- Protecting the site from fraud and abuse. Basis: legitimate interest.
- Complying with legal, tax or court obligations. Basis: legal obligation.
We do not sell personal data and never have. We also do not use your data for automated decisions that produce legal effects about you.
4. Cookies, pixel and measurement
Essential cookies store your cookie choice and keep the site working. They cannot be turned off, because without them the notice would reappear on every click.
Measurement and advertising cookies are Google Analytics 4 and the Meta pixel. They do not load until you click accept. If you choose “essential only”, neither is loaded and no request leaves your browser for Google or Meta.
We use Google Consent Mode, which keeps ad storage and analytics storage denied by default until you decide.
Global Privacy Control. If your browser sends the GPC or Do Not Track signal, we treat it as an automatic opt-out and load no measurement or advertising, without you clicking anything. This satisfies the opt-out right under US state privacy laws.
You can change your mind at any time through the Cookies link in the footer of any page.
5. SMS, WhatsApp and email
We only send marketing SMS or email to people who expressly opted in by checking the box on a form. Consent is separate from requesting a quote: asking for a quote does not authorise campaigns.
This follows the Telephone Consumer Protection Act and carrier A2P 10DLC registration rules. Every message includes opt-out instructions. Replying STOP ends messages immediately and HELP returns support contact. Message and data rates may apply.
When Agency Zero runs campaigns on behalf of a client, the client is responsible for obtaining and evidencing consent from their own contact list, and Agency Zero acts as processor.
6. Who we share with
- Vercel, website hosting and security logs.
- Resend, sending the email that notifies us of your contact.
- ClickUp, recording your request in our sales pipeline.
- Google, audience measurement and advertising, with consent only.
- Meta, advertising and remarketing audiences, with consent only.
- Quo, when you speak to the AI receptionist by phone.
We may also disclose data to comply with legal obligations, respond to lawful requests or defend our rights.
On behavioral advertising. The Meta pixel, when you authorise it, shares identifiers with Meta to build advertising audiences. California law classifies this as sharing for cross-context behavioral advertising. We receive no money for it and do not consider it a sale, but you have the right to refuse, and refusal is the default state of this site.
7. How long we keep it
- Contacts who did not become clients: up to 24 months.
- Clients: during the contract and for up to 5 years afterwards, for US tax and contractual requirements.
- Security logs: up to 12 months.
- Measurement data: per the retention configured in Google Analytics and Meta.
8. Your rights
If you are in Brazil or your data is processed under the LGPD, you have the right to confirmation of processing, access, correction, anonymisation, blocking, deletion, portability, information about sharing, withdrawal of consent and review of automated decisions.
If you are a California resident, you have the right to know what categories we collect, to obtain a copy, to request deletion, to correct, to limit the use of sensitive data, to opt out of sale or sharing for cross-context behavioral advertising, and not to be discriminated against for exercising any of them.
If you reside in Florida, Virginia, Colorado, Connecticut, Texas or another state with equivalent law, you have rights of access, correction, deletion, portability and opt-out of targeted advertising, plus the right to appeal our decision.
How to exercise them. Email adm@agencyzeropv.com with the subject “Privacy”. We respond within 15 days under the LGPD and within 45 days under US law, extendable where the law allows. We may ask for additional information only to confirm you are the data subject. You may appoint an authorised agent.
If you disagree with our response, you may complain to the Brazilian National Data Protection Authority or to your state attorney general in the United States.
Data protection officer, for LGPD purposes: the contact above.
9. Security and international transfer
We use encrypted connections, per-person access control and two factor authentication on the tools that hold client data. No system is immune, but any material incident is reported to data subjects and authorities within the legal deadline.
Our servers and vendors are in the United States. If you are in Brazil, your data is transferred to the United States based on your consent and on the need to perform a contract or pre-contractual steps, under article 33 of the LGPD, with contractual clauses in place with our vendors.
10. Changes
When something material changes, we update the date at the top of this page. A change that broadens the use of your data will be communicated and, where the basis is consent, will ask for a new opt-in.
11. Contact
Agency Zero LLC · Florida, United States
Email: adm@agencyzeropv.com
WhatsApp: +1 (615) 652-6180