Skip to content
Português

Privacy

Last updated: 6 November 2026

Who we are

Onda (ondahq.com) builds websites, automations and API integrations for small businesses. For anything about your data, write to contato@ondahq.com.

This website

This site has no cookies, no analytics, no ads, no trackers and no forms. It is hosted on Cloudflare, which processes technical data such as your IP address to deliver the pages and protect them from abuse.

When we e-mail businesses

Sometimes we write to a small business that seems to have no website, one at a time, with a preview of a site made for it. Each message says who we are, where we found the contact and how to stop receiving e-mails. We send at most one reminder.

Where the contact comes from

  • In Brazil: the public CNPJ register of the Receita Federal (Brazil's federal revenue service), published as open data. It includes the contact e-mail that each company registered. We do not contact individual micro-entrepreneurs (MEI).
  • Outside Brazil: Overture Maps, an open dataset of places with the contact details that businesses publish.

What we keep, and for how long

  • The business name, registration number (CNPJ, in Brazil), public contact e-mail and phone, city and neighbourhood, type of business, and the address of the preview.
  • The preview is not indexed by search engines and comes down after 14 days.
  • If there's no reply, we delete these data after 30 days. We keep only a one-way code (a hash) so we never contact the same business twice.

In Brazil, the legal basis is legitimate interest (LGPD, art. 7, IX): a single message about a service related to the company's business, with a one-click way out.

How to be removed

  • Every e-mail has a one-click link to stop receiving messages from us.
  • Or write to contato@ondahq.com asking to be removed. We delete your data and the preview, and keep only what's needed to make sure we don't write again.
  • You can also ask what we hold about you, or ask us to correct it, at the same address.

We don't sell data

We don't sell, rent or share your data. The only services that touch it are the ones we use to work: Google Workspace for e-mail and Cloudflare for hosting.

Changes

If this policy changes, we update this page and the date at the top.