Draft, pending legal review. This document has not been reviewed by a lawyer yet and may change. Last updated October 6, 2026.
Who is responsible
Mazacode LTDA, CNPJ 45.655.559/0001-98, Florianópolis/SC, Brazil, operates AltoReport and this website. The operator is the controller of the data described in the first two sections. For client data inside the product, the agency decides why and how it is used, and Mazacode LTDA processes it on the agency's behalf.
This website
The website sets no cookies, has no forms and runs no analytics or advertising code. Fonts and images come from the site itself, so your browser contacts no other site to display it. The hosting account has Cloudflare Web Analytics enabled, which can add a small script from static.cloudflareinsights.com at the network edge and record aggregate page-view metrics without cookies.
The only way to get in touch is the WhatsApp link. When you use it, WhatsApp receives your message under its own terms, and the founder reads it and may reply to the number it came from. The prefilled text names the section of the site you came from.
The product, once an agency uses it
- Agency account data: name, email, sign-in records, team members and settings.
- Client records the agency enters: client names, websites, report recipients, comments and approvals.
- Metrics pulled from the platforms the agency connects: Google Analytics 4, Google Search Console, Meta Ads and Google Ads. Access tokens for those connections are stored encrypted.
- Billing status. Payments are handled by a payment processor, Stripe, once billing is switched on. The product does not store full card details.
- Operational records such as audit logs and error diagnostics.
AI processing
To write a summary, the product sends the report's metrics, the previous period's figures, the client's industry and the agency's instructions to an AI provider, Anthropic. Search Console top queries are not included. Passwords and payment details are never sent.
Report delivery and account emails are transactional and sent through Twilio SendGrid.
Your rights
You can ask for access, correction, export or deletion of personal data. Agencies can export their workspace data and ask for it to be erased, and a client's data can be erased on request. Retention and data-residency settings exist in the product. To make a request, use the WhatsApp contact on this site.
Changes
This is a draft. The final text will be published here and the date above will change.