Privacy and Data Protection
Privacy Policy
Last updated: November 9, 2026
DoMeLift is a product of AppSecLab.IO LLC, a company registered in Texas, United States. AppSecLab.IO LLC runs this website and is the controller of the personal data processed on it (LGPD Article 5, VI); in this Privacy Policy, “we” means AppSecLab.IO LLC. This Privacy Policy describes how we handle the personal data of clients, users and visitors of the website under the Brazilian General Data Protection Law (LGPD - Law 13,709/2018) and applicable international rules.
1. Data We Collect and Purposes of Processing
We collect personal data strictly necessary to facilitate business inquiries and deliver tailored software demonstrations. When you submit a walkthrough request, we collect: full name, business email address, company name, estimated volume of active placements, and contact phone number. These details reach our sales team by email, at [email protected]; the website does not store them in a database. The sole purpose of processing is to coordinate product demonstrations, address technical inquiries, and provide enterprise proposals. Technical traffic data and server logs are maintained strictly for network security and threat prevention.
2. Legal Bases for Processing
Walkthrough requests are processed to answer your request, as a preliminary step to a contract (LGPD Article 7, V). Access logs and the form's anti-abuse counter rely on the legitimate interest of keeping the site secure (Article 7, IX). Google Analytics cookies depend on your consent (Article 7, I), which you give or decline in the cookie notice and can change at any time. Data may also be processed to comply with a legal or regulatory obligation (Article 7, II).
3. Data Sharing and Zero Commercial Sale
AppSecLab.IO LLC does not sell, rent or give away personal data to third parties for advertising. Data only passes through the providers that run the site, or goes to authorities when the law requires it: the hosting provider, which holds the site and the mailbox that receives the requests; Cloudflare, Inc. (United States), the delivery and protection network that every visit and form submission goes through; and, only if you accept analytics cookies, Google Analytics, operated by Google LLC (United States; see section 6). No third-party form service receives walkthrough requests. Passing through Cloudflare and sending data to Google Analytics are international data transfers (LGPD Article 33).
4. Security, Storage, and Data Retention
The site only works over HTTPS: the connection is encrypted (TLS) from your browser to Cloudflare and from Cloudflare to the hosting server. Walkthrough requests are not stored in a database: the website's server delivers them by email to the [email protected] mailbox, at the same hosting provider. To prevent abuse, the website keeps for up to 15 minutes a per-IP attempt counter, identified only by a hash (HMAC), and for up to 1 hour the total count of emails sent, with no personal data. Requests stay in the mailbox for as long as needed to follow up or until you ask for deletion, subject to statutory retention requirements.
5. Data Subject Rights
Under applicable data protection legislation (including LGPD Article 18), you have the right to request at any time: confirmation of processing activities; access to your personal data; correction of incomplete, inaccurate, or outdated data; anonymization, blocking, or erasure of unnecessary data; data portability; and withdrawal of consent. You may also petition Brazil's National Data Protection Authority (ANPD) regarding your data (LGPD Article 18, §1).
6. Cookies and Browser Storage
The site uses browser storage to remember your cookie choice and your place on the page when you switch languages. The home page opens in the language set in your browser; when you pick a language in the PT/EN switcher, we set the domelift_lang cookie, holding only that language, for up to 1 year so the site opens in it next time. With your consent, we load Google Analytics (Google LLC), which sets the _ga and _ga_<ID> cookies for up to 2 years to measure visits in aggregate. Without consent, no analytics cookie is set. You can change your choice at any time under “Cookie preferences” in the footer.
7. Data Protection Officer (DPO) and Inquiries
To exercise any of your data protection rights or submit questions regarding our privacy practices, contact the Data Protection Officer of AppSecLab.IO LLC directly at: [email protected].