What we collect, and what we don’t.

This policy covers two websites: vanzik.lictorate.com, with its waitlist, and lictorate.com, Lictorate’s company site, which links here.Both measure visits with PostHog, without cookies or anything stored on your device (see How we measure visits); on lictorate.com that means the pages you view, the links you click (an email link gets a short random reference code in its subject, so we can tell which link an email came from) and your country and company network. lictorate.com sets no cookies and never records sessions; the cookie and session recordings you can accept here apply to vanzik.lictorate.com only. This policy does not cover the Vanzik software: Vanzik runs in your own infrastructure, and nothing it processes reaches us.

Lictorate, based in São Paulo, Brazil, is responsible for the personal data described here. Questions about it go to hello@lictorate.com.

That's the complete list. The form asks for your email address and how you heard about Vanzik, nothing else.

• Everyone, without asking. PostHog counts visits without cookies and stores nothing on your device. Each event carries an anonymous ID that PostHog computes from a hash of the date, your browser details, your IP address and the site’s address. It changes every day, so it can’t follow you from one day to the next. When a page loads, our server also attaches your country to the visit.
• Only if you accept Analytics in the cookie banner. PostHog keeps a random ID in a cookie and in your browser’s storage on vanzik.lictorate.com, so it recognizes your browser on later visits, and it records your sessions on this site: what the page showed and where you moved, clicked and scrolled. Every form field is masked in your browser before anything is sent, and neither network traffic nor the browser console is recorded.
• Session recordings never run without that consent, in any country: there is no per-country exception, and nothing is recorded while you’re counted without cookies.
• You can withdraw at any time in Cookie settings. The recording stops at once, PostHog’s cookie and stored values are deleted, and you’re counted without cookies again. What was recorded before you withdrew is kept for the period below unless you ask us to delete it.

• Your IP address, in our own systems. Our code uses it for a moment to stop the site being flooded, keyed by a hash with a random key held only in memory, and never stores or logs it. Vercel, which hosts the site, processes it to deliver the page. PostHog uses it, with your browser details and the date, to compute the day’s anonymous ID, and then discards it.
• Your email in our logs. Server logs record that a signup succeeded or failed, never whose.
• Your email at Google, or at any advertising network. It is never sent: not in plain text, not hashed.
• A profile of you. We don’t do ad targeting or retargeting, and we don’t combine this data with anything else, except that an email you send from one of our email links adds its domain to the statistics of the visit it came from.

• Your waitlist signup (your email, your answer to how you heard about Vanzik, and the details we keep with them): your consent, given when you submit the form. You can withdraw it at any time.
• Cookies and session recordings: your consent, given in the cookie banner. Nothing optional starts, and nothing from Google loads, unless you accept.
• Hosting, rate limiting and visit measurement without cookies, including matching an email to the link it came from: our legitimate interest in running a website that works and can’t be abused. It is kept to the minimum and never used to profile you.

We use a few providers to run the site. Each acts on our instructions and receives only what's listed here.

These providers are based in the United States, so your data may be processed outside your country. The regional sections below set out the safeguards that apply.

This site sets no cookies of its own. It keeps the small values below in your browser’s local storage. The providers below set the cookies and storage values listed for them only if you accept them; PostHog's stay on vanzik.lictorate.com.

You can change your mind at any time in Cookie settings. When you withdraw, Google's cookies and stored values are deleted and the page reloads without them; PostHog's cookie and stored values are deleted at once, and any session recording stops.

We keep your waitlist signup (your email and everything stored with it) until you ask us to delete it, or until the waitlist program ends, whichever comes first. PostHog deletes visit statistics after one year and session recordings after 30 days, the limits of our current PostHog plan. The lifetimes of browser storage and cookies are listed above.

• Only our server can add to the waitlist, using a credential that never reaches your browser. No part of this website can read the list back.
• Row-level security on the database refuses every public request; only our server's credential can write to it.
• Every connection is encrypted with HTTPS, and browsers are instructed never to fall back to an unencrypted one.

Wherever you are, you can ask us to:

• tell you whether we hold data about you, and give you a copy
• correct it
• delete it
• stop using it, including withdrawing any consent you gave

Email hello@lictorate.com from the address in question. We answer within 15 days, the shortest deadline among the laws that apply to us. You can also complain to a data-protection authority; the regional sections below say which.

When this policy changes, the date at the top changes with it. If a change affects something you accepted in the cookie banner, the banner asks you again.

The GDPR or the UK GDPR governs how we handle your data.

• Legal bases: consent (Art. 6(1)(a)) for the waitlist and for cookies and session recordings; legitimate interests (Art. 6(1)(f)) for hosting, rate limiting and visit measurement without cookies, including matching an email to the link it came from.
• Your rights under Articles 15 to 22: access, rectification, erasure, restriction, data portability and objection, and withdrawing consent at any time, as easily as you gave it (Art. 7(3)).
• Transfers to our US providers rely on the EU–US Data Privacy Framework (and its UK extension) where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses.
• Cookies and storage that aren't strictly necessary, and session recordings, only with your prior consent, as the ePrivacy rules require. Visit measurement without consent stores nothing on your device.
• You can lodge a complaint with the supervisory authority where you live or work: in the UK, the ICO.

The LGPD (Lei nº 13.709/2018) governs how we handle your data.

• Legal bases: consent (Art. 7, I) for the waitlist and for cookies and session recordings; legitimate interest (Art. 7, IX) for hosting, rate limiting and visit measurement without cookies, including matching an email to the link it came from.
• Your rights under Art. 18: confirmation that we process your data, and access to it; correction; anonymization, blocking or deletion; portability; information about who we share it with, and about what happens if you refuse consent; and revoking consent.
• We answer requests within 15 days (Art. 19).
• International transfers to our US providers follow Art. 33, including through standard contractual clauses.
• Our data-protection officer (encarregado) is Cauã Ferraz, at hello@lictorate.com.
• You can also petition the ANPD (Autoridade Nacional de Proteção de Dados).

We don't sell your personal information, and we don't share it for cross-context behavioral advertising. It is never used to target ads at you.