Privacy Policy – Trílogo

The protection of our users’ data is a priority for us and, therefore, we recognize our responsibility to handle your personal data appropriately. We are committed to acting with transparency and security regarding the use of your information and to offering our users the ability to control and manage their personal data.

Based on the provisions of the General Data Protection Law (LGPD), we have developed this Privacy Policy to describe how our users’ personal information is collected, used, stored, and protected, applying to everyone who accesses our website or registers on our platform.

It is essential to understand how we handle your personal information and ensure compliance with applicable data protection laws. We recommend that you carefully read this Privacy Policy so that you are aware of the data we collect and use.

Reading this document is essential because, by accessing our website and using our platform, we consider that you are aware of and fully agree with the terms described herein. We emphasize that the use of both depends on the express acceptance of this Privacy Policy.

  1. Data Protection

The security of users’ data is a priority for TRÍLOGO and, therefore, we use technologies aimed at data protection, such as:

a. Secure and encrypted requests via HTTPS;

b. Authentication via Amazon Cognito (TRÍLOGO and Amazon do not have access to users’ passwords);

c. Servers not exposed to the internet – Security Group (only authorized Amazon machines have access to the servers);

d. Database with automatic replication and backup;

e. CDN (Content Delivery Network) for greater availability and security (AWS CloudFront);

f. File servers with restricted access (AWS S3); and

g. Well-defined and restricted development and code access processes (Gitflow).

In addition to the technologies mentioned above, TRÍLOGO uses information security best practices to protect personal data, preventing loss and theft, as well as unauthorized access, use, and alteration. Although risks exist, we adopt all applicable security measures to ensure a high level of security in the processing of personal data.

  1. What type of data do we collect and for what purpose?

All data collected automatically or provided directly by data subjects will only be used for the purposes listed below, always ensuring their confidentiality. The personal data processed by TRÍLOGO are as follows:

PERSONAL DATA | PURPOSE | LEGAL BASIS

Name, email address, phone number, company, segment, sector, role, and company size
→ Provided so we can contact you based on your interest and better understand how we can assist you.
Legal basis: Consent

Name, email address, phone number, company, segment, sector, role, and company size
→ Provided to send content, personalized materials, and offers via email marketing. We are against any form of spam.
Legal basis: Consent

IP address, interaction logs with the site or landing pages, browser version, operating system type and version, geolocation data, among others
→ Collected automatically to improve our content and services.
Legal basis: Legitimate Interest

Name, email address, phone number, and CPF number
→ Provided for registration on our platform, ensuring full use.
Legal basis: Consent

User ID, geolocation data, access to camera, media, and microphone
→ Collected with prior authorization to improve platform functionality.
Legal basis: Consent

IP address, activity logs within the platform, smartphone model and OS information
→ Collected automatically to improve usability and user experience.
Legal basis: Legitimate Interest

Additionally, we collect data during chat usage on our platform to ensure proper service delivery. Access is restricted and controlled.

TRÍLOGO does not collect sensitive personal data under LGPD. If necessary, we will request prior consent.

By accepting this Privacy Policy, you authorize TRÍLOGO to collect, use, and store the data mentioned above.

  1. Google Analytics and Data Collection

We use Google Analytics to understand user interactions and improve experiences. It collects IP address, browser type, pages visited, behavior, and demographic data.

This data is used to improve functionality and usability. Google Analytics uses cookies and stores data on Google servers in aggregated form.

TRÍLOGO is committed to protecting this data and maintaining confidentiality.

  1. Data Processing, Use, and Storage

Data processing aims to provide the best experience, fulfill contractual obligations, and strengthen relationships.

Purposes include:

a. Service provision
b. Service improvement
c. Technical support
d. Communication via email, phone, WhatsApp, or chat
e. Personalized services
f. Email notifications
g. Email marketing (with consent and opt-out option)
h. License and access management
i. Reports and analysis
j. Legal compliance

If data is used for other purposes, prior consent will be requested.

TRÍLOGO continuously monitors the platform to ensure compliance.

Data is stored securely until its purpose is fulfilled or legal requirements expire.

  1. Data Sharing

Data is not sold or lent but may be shared with:

a. Service providers
b. In case of corporate restructuring

Data may also be shared for legal compliance, contract execution, or legal defense.

  1. Data Retention and Deletion

Data is retained while the account is active and deleted when no longer necessary, unless legally required.

It may be retained for:

a. Legal obligations
b. Contract fulfillment
c. Legal defense
d. Security and fraud prevention

  1. Use of Cookies

Cookies store preferences to improve experience.

You may disable them, but this may affect functionality.

  1. Data Subject Rights

Under LGPD, users may request:

a. Confirmation of processing
b. Access
c. Correction
d. Deletion or anonymization
e. Portability
f. Deletion of consent-based data
g. Information on sharing
h. Information on refusal consequences
i. Consent withdrawal

  1. Contact

Hugo Ramos Soares | privacidade@trilogo.com.br

  1. Updates

This Privacy Policy may be updated. Users will be notified.

If not accepted, the account may become unusable.

Last updated: February 10, 2023