Privacy Policy

1. Scope and controller

This Policy applies to interactions through SΛDB digital channels. To ask questions or exercise personal-data rights, contact contact@sadb.com.br.

2. Data we may process

• Identity and contact data, such as name, email, organization, role, and telephone number.
• Registration and access data, such as username, protected credentials, profile, tenant, and session records.
• Commercial and engagement data, such as plan, proposal, billing, and payment status.
• Technical data, such as IP address, browser, device, date, time, logs, and security events.
• Data voluntarily submitted through forms, support requests, integrations, and communications.
• Operational telemetry provided by clients, according to the agreement and service configuration.

3. Purposes and legal bases

• Respond to contacts, prepare proposals, and take pre-contractual measures.
• Create and administer accounts, authenticate users, and provide contracted functionality.
• Process engagements and comply with legal, regulatory, tax, and accounting obligations.
• Protect users, systems, and infrastructure, prevent fraud, and record security evidence.
• Support legitimate interests in improvement, continuity, and support while respecting data-subject rights.
• Send authorized communications when consent applies, allowing its withdrawal.

4. Cookies and similar technologies

The website and portal may use local storage, session cookies, and technologies strictly necessary for authentication, security, preferences, and operation. Non-essential technologies, when adopted, will be presented with appropriate information and choice mechanisms.

5. Sharing

Data may be shared, to the extent necessary, with hosting, infrastructure, authentication, communication, support, and payment-processing providers; client-authorized partners; or authorities when legally required. SΛDB does not sell personal data.

6. International transfers

Some providers may operate infrastructure outside Brazil. When an international transfer occurs, the mechanisms and safeguards required by applicable law will be adopted.

7. Retention and deletion

Data is retained for the period necessary for the stated purposes, contractual performance, regular exercise of rights, and compliance with legal obligations. Once no longer needed, it will be deleted, anonymized, or retained where permitted by law.

8. Security

Technical and administrative measures proportional to risk are adopted, including access control, authentication, segregation, audit records, credential protection, and monitoring. No environment is absolutely immune; relevant incidents will be handled according to applicable procedures and duties.

9. Data-subject rights

Under Brazil's LGPD, data subjects may request, where applicable:

• Confirmation of processing and access to data.
• Correction of incomplete, inaccurate, or outdated data.
• Anonymization, blocking, or deletion of unnecessary, excessive, or irregular data.
• Portability, information about sharing, and review of applicable automated decisions.
• Deletion of data processed with consent, information about refusal, and withdrawal of consent.

A request may require identity confirmation to protect the data subject. If the request is not adequately addressed, the data subject may also petition Brazil's ANPD.

10. Children and adolescents

SΛDB corporate services are not directed to children. If improper processing of a child's or adolescent's data is identified, a responsible party may request review and deletion through the privacy channel.

11. Updates

This Policy may be updated to reflect legal, operational, or technological changes. The current version will be published on this page with its date.

12. Contact

Privacy and data-protection requests: contact@sadb.com.br.