Privacy Policy

1. Who we are (Controller)

The controller of personal data processed on the institutional website, marketing channels and Datameros user accounts is:

• Legal name: Datameros Solutions in Data, Artificial Intelligence and Software
• CNPJ: 46.468.319/0001-47
• Address: Av. Paulista 1471, Suite 511 — Bela Vista — São Paulo/SP — ZIP 01311-927 — Brazil
• Covered sites: datameros.com.br and portal.datameros.com.br (and related operational subdomains)

2. Scope and roles

This Policy covers: (i) the institutional website; (ii) the customer portal; and (iii) data processing on the Datameros platform (integrations, BI, forms, alerts, AI and support).

Datameros acts as controller when it defines the purposes and means of processing (e.g., website leads, analytics cookies, access accounts and billing).

When the customer sends, integrates or stores on the platform data about its own customers, employees or third parties, Datameros acts as processor: we process such data according to the customer’s instructions and contract. The customer remains responsible for ensuring an adequate legal basis and the rights of those data subjects.

3. Data we collect

Depending on the context, we may process the following categories:

• Identification and contact: name, email, phone, company, role, CPF/CNPJ when needed for contract or billing
• Browsing: IP address, browser type, pages visited, time on site, traffic source and device technical data
• Communication: messages via forms, WhatsApp, email or chat, and support history
• Portal/platform use: access credentials, authentication logs, features used, preferences and settings
• Data processed on behalf of the customer: data from ERPs, CRMs, APIs, files, forms and other sources connected by the customer

4. How we collect

Collection occurs through:

• Website forms: sales contact, quotes and messages
• Cookies and preferences: including language cookie and essential technologies
• Analytics tools: Google Analytics
• Lead/support tools: Leadster (chat/lead capture) and third-party content widgets (e.g., reviews)
• Portal and platform: registration, login and use of contracted features
• Contracted integrations: connections to systems and data sources authorized by the customer

5. Legal bases (LGPD)

We process personal data based on one or more of the following legal grounds:

• Consent: when you expressly authorize processing (e.g., marketing communications)
• Contract performance: to provide, manage and bill contracted services
• Legitimate interest: product improvement, security, fraud prevention and relevant communications, balanced against your rights
• Legal or regulatory obligation: when the law requires retention or disclosure

6. Purposes of processing

We use data to:

• Commercial contact: proposals and information about products and services
• Service operation: portal, integrations, dashboards, alerts and AI features under the contract
• Technical support: assistance, diagnosis and incident resolution
• Security: account protection, abuse detection and operational continuity
• Improvement: aggregated usage analysis to improve the platform
• Compliance: legal, tax and regulatory obligations

7. Sharing and subprocessors

We may share data with providers that help us operate the service, under confidentiality and security obligations consistent with the LGPD:

• Cloud infrastructure: Microsoft Azure and Amazon Web Services (AWS)
• E-signature: ClickSign (contract and deletion formalization)
• Analytics and support: Google Analytics, Leadster and similar tools essential to operations
• Authorities: when required by law, court order or competent authority

8. International transfers

Part of our cloud infrastructure and support tools may process data outside Brazil. In those cases, we apply appropriate safeguards (contracts, security standards and technical measures) consistent with the LGPD, aiming to maintain an equivalent level of protection.

9. Information security

We adopt reasonable technical and administrative measures to protect personal data, including:

• Encryption: data in transit (HTTPS/TLS) and, where applicable, at rest
• Access controls: authentication, authorization and access logging
• Monitoring: anomaly detection and incident response
• Backup and continuity: backups and recovery plans
• Training: teams guided by security and privacy practices

No system is absolutely secure. In the event of a relevant incident, we will notify data subjects and authorities as required by law and the applicable contract.

10. Data retention

We keep data only as long as needed for the purposes in this Policy or as required by law:

• Active customers: while a contractual relationship exists
• Former customers: up to 5 years after termination when needed for legal, tax or rights-defense obligations
• Browsing/analytics data: generally up to 2 years, unless a provider rule or legal requirement differs
• Leads and communications: for as long as needed for the commercial relationship or until consent is revoked, when applicable

11. Data deletion

To delete data tied to an active contract, the contract must first be terminated, subject to mandatory legal retention.

12. Data subject rights

Under the LGPD, you may request:

• Confirmation and access: to know whether we process your data and obtain a copy
• Correction: to update incomplete, inaccurate or outdated data
• Anonymization, blocking or deletion: where applicable
• Portability: to receive data in a structured format, when applicable
• Information on sharing: entities with which we share data
• Consent withdrawal and objection: in the cases provided by law

To exercise rights regarding data under Datameros’s control, email suporte@datameros.com.br. We will respond within 15 (fifteen) days under the LGPD. Requests about data under the customer’s control (platform data processed on the customer’s behalf) should be directed to that customer; we may provide technical support as set out in the contract.

13. Cookies and similar technologies

We use cookies and similar technologies for functionality, preferences and analytics:

• Essential: required for site operation and security
• Preferences: e.g., language cookie (datameros-lang)
• Analytics: Google Analytics to understand site usage
• Support/leads: Leadster and related chat/capture technologies

You can manage cookies in your browser settings. Disabling essential or analytics cookies may affect functionality or analysis quality.

14. Obligations and limits (mutual protection)

To protect customers and Datameros:

• Customer responsibility: ensure legality, legal basis and quality of data integrated into or sent to the platform
• Use under contract: Datameros processes customer data only to deliver the service and meet legal obligations
• Misuse: Datameros is not responsible for unlawful or excessive processing by the customer of third-party data
• Confidentiality: both parties must keep confidential information accessed due to the commercial relationship
• Credentials: the customer must protect logins, tokens and access granted to users under its management
• Incidents: notification and cooperation will follow law and contract, without prejudice to appropriate technical measures

15. Minors

Our services are B2B-oriented and not directed to anyone under 18. We do not knowingly collect minors’ data. If you become aware of improper collection, contact us so we can assess and take appropriate measures.

16. Changes to this Policy

We may update this Policy periodically for operational, legal or regulatory reasons. The current version will always be available on this website with the last-updated date. We recommend reviewing it periodically.

17. Contact and Data Protection Officer (DPO)

For questions, requests or to exercise rights regarding personal data under Datameros’s responsibility, contact our privacy/support channel:

• Email: suporte@datameros.com.br
• Phone: +55 11 99137-6120

We will respond within 15 (fifteen) days as provided by the LGPD.