Privacy policy
Sampaio Labs website and MVP Planner
This policy explains what data we collect when you visit sampaiolabs.com, use the MVP Planner or get in touch with us, how we use it, who we share it with and how to exercise your rights.
Last updated: September 29, 2026
Who we are
Sampaio Labs (“we”) is a digital product studio based in Toronto, ON, Canada. This policy covers the sampaiolabs.com website and the MVP Planner. Each Sampaio Labs app has its own privacy policy.
For any request or question about this policy, write to the contact email at the end of this page.
Data we collect
We collect only what each purpose needs:
- Browsing: pages visited, actions on the site (for example, starting or completing the MVP Planner), where you came from (referring site and campaign parameters), device and browser type, and approximate location (country or city). This data is collected by Google Firebase (Google Analytics), which only uses cookies if you accept them.
- MVP Planner answers: country, your role in the project, the description of what you want to build, the project stage, the features you chose, the timeline and the investment range. These answers are saved when the plan is generated, without your name or email.
- Contact details, if you ask for the plan by email: name, email and, if you provide them, company and website, plus your consent choices with date and time.
- Messages you send us by email.
- Technical data for security: IP address and browser information, used by Cloudflare to protect the site and check that forms are not being used by bots.
How we use the data
- Generate your plan in the MVP Planner and email it to you, if you ask.
- Contact you about your project, only if you tick the option that allows it.
- Organize incoming requests internally to prioritize our replies. This never leads to an automated decision that affects you.
- Reply to your messages.
- Measure how the site is used and improve it.
- Keep the site secure and prevent abuse.
Artificial intelligence
To build the scope analysis in your plan, your project description and chosen features are sent to an artificial intelligence provider (OpenAI). Under the provider’s API terms, this data is not used to train models. The price and stage shown in the plan are calculated by fixed rules, not by artificial intelligence.
Please avoid including confidential information or other people’s personal data in the description.
Communications
The email with your plan is sent only because you asked for it. We only send other messages about your project if you give express consent in the form. You can withdraw that consent at any time using the unsubscribe link in the email or by writing to the contact email.
Who we share data with
We use providers that process data on our behalf, only to run the site:
- Cloudflare: website hosting, abuse protection and bot verification (Turnstile).
- Supabase: database for MVP Planner answers and contact requests.
- OpenAI: artificial intelligence analysis of the project description.
- Resend: sending emails.
- Google Firebase: usage analytics.
- We do not sell your data and the site shows no advertising.
International transfers
These providers may process data in Canada, the United States and other countries. By using the site, you agree to this transfer for the purposes described here.
Cookies
The site uses no advertising cookies. Google Firebase analytics cookies are only enabled if you accept them in the cookie notice. You can change your choice at any time through the “Cookies” link in the footer.
Retention
We keep MVP Planner answers for up to 24 months. Contact details are kept while we are discussing your project and for up to 24 months after the last contact, or until you ask for deletion. Usage analytics data is kept for up to 14 months.
Your rights
Under PIPEDA (Canada), Brazil’s LGPD and other applicable laws, you may request access, correction, deletion and portability of your data, and withdraw your consent. Send your request to the contact email. You may also complain to the data protection authority in your country, such as the Office of the Privacy Commissioner of Canada or Brazil’s ANPD.
Security
Data travels over encrypted connections, and answers and contact details are stored in a private database accessible only to Sampaio Labs. No system is completely secure, but we work to protect your data.
Minors
The site and the MVP Planner are intended for professionals and businesses and are not directed at anyone under 16.
Changes to this policy
We may update this policy. The date of the last update is shown at the top of this page.