Privacy Policy
Last updated: 07/04/2026
1. Data Collected
We collect: identification data (name, email, phone), GPS location data (during WO status transitions), photos and documents attached to WOs, checklist, material, and observation data, technical device data (for diagnostics), and usage/navigation data (analytics).
2. Legal Basis and Purpose
Data is processed based on the service contract and user consent. It is used exclusively for: work order execution and management, report generation, service improvement, technical support, and service-related communications.
3. Storage and Security
We employ robust security measures: encryption in transit (HTTPS/TLS), local device encryption (AES-GCM 256-bit), data isolation per company (multi-tenant with Row-Level Security), role-based access control (RBAC), and secret management via HashiCorp Vault. Sensitive data such as customer phone numbers is encrypted locally on the technician's device.
4. Data Sharing
We do not sell, share, or disclose personal data to third parties, except: payment processors (for billing), infrastructure services (hosting and storage), and when required by law or court order. All processors are contractually obligated to protect data.
5. Data Subject Rights
In compliance with applicable data protection laws, you have the right to: access your personal data, correct incomplete or inaccurate data, request deletion of personal data, request data portability, revoke consent, and obtain information about data sharing. Requests should be made via our contact email or support channel.
6. Data Retention
Data is kept for the period necessary for service provision and legal obligations. After account termination: data is kept for 30 days for export, then anonymized or permanently deleted. Local data on the device remains until manual or app deletion.
7. Cookies and Tracking
We use essential cookies for service operation (authentication and session). We do not use third-party tracking or advertising cookies.
8. International Transfer
Data may be processed on servers located outside Brazil. In such cases, we ensure equivalent protection through standard contractual clauses.