Privacy and Cookie Policy

1. Objective

ServiceInfo Soluções em TI Ltda. respects the privacy and protection of personal data of its clients, users, company representatives, suppliers, partners, and website visitors.

This Privacy and Cookie Policy explains how personal data is collected, used, stored, protected, and potentially shared while using the serviceinfo.com.br website, our customer service channels, and the services provided by ServiceInfo.

The processing of personal data is carried out in compliance with the Brazilian General Data Protection Law (LGPD, Federal Law No. 13.709/2018) and other applicable regulations.

2. Data Controller Identification

For the data processing described in this Policy, the data controller is:

ServiceInfo is responsible for making the main decisions regarding the purposes and means of processing the personal data covered by this Policy.

In certain technology service provisions, ServiceInfo may also act as a data processor, handling information on behalf of and according to the instructions of its clients. In these cases, the responsibilities of each party will be contractually defined in accordance with the LGPD.

3. Personal data we may process

Depending on the user’s interaction with ServiceInfo, we may process:

• Identification and contact data, such as name, company, job title, phone number, WhatsApp, email, and address;
• Information voluntarily provided in forms, messages, requests, proposals, complaints, or customer support interactions;
• Data necessary for preparing proposals and contracting or executing services;
• Registration, contractual, financial, banking, tax, and billing data;
• Information related to invoices, billing, charges, and payments;
• Technical support records, support tickets, communications, and service history;
• Technical and navigation data, such as IP address, date and time of access, device type, browser, pages visited, and event logs;
• Data collected by cookies and similar technologies;
• Other data required to comply with legal, regulatory, contractual, or security obligations.

ServiceInfo does not request sensitive personal data or excessive information through the general contact form. Users should not send data of this nature unless strictly necessary and explicitly requested.

4. How data is collected

Data may be collected:

• Directly from the user, via the contact form, WhatsApp, phone, email, or other support channels;
• During the request for a proposal, contracting, or provision of a service;
• During technical support and customer relationship management;
• Through platforms used for issuing invoices, billing, collections, management, and support;
• Automatically during website navigation, via technical logs, cookies, and similar technologies;
• From corporate clients, suppliers, partners, or duly authorized representatives;
• From public or legitimate sources, when necessary and permitted by law.

5. Purposes and legal bases

Personal data may be processed to:

• Respond to contacts, questions, requests, suggestions, and complaints;
• Prepare and send commercial proposals;
• Perform preliminary procedures prior to contracting;
• Execute contracts and provide technology management, support, and customer services;
• Maintain communication with clients, representatives, suppliers, and partners;
• Register clients and manage business relationships;
• Issue invoices, billing, charges, and related documents;
• Process payments and maintain accounting and financial records;
• Comply with legal, tax, regulatory, and administrative obligations;
• Prevent fraud, incidents, unauthorized access, and other illicit activities;
• Maintain the availability, integrity, and security of systems and services;
• Exercise or defend rights in judicial, administrative, or arbitration proceedings;
• Generate statistics and improve the website, services, and customer support;
• Send institutional or commercial communications, when permitted by law;
• Fulfill other purposes disclosed to the user at the time of collection.

Depending on the situation, processing may be based on the execution of a contract or preliminary procedures, compliance with a legal or regulatory obligation, the regular exercise of rights, credit protection, legitimate interest, or user consent.

When consent is used, it may be revoked at any time, without compromising the legality of previously conducted processing.

6. Contact form and WhatsApp

Data submitted via the contact form and WhatsApp will be used to respond to requests, provide support, prepare proposals, and maintain direct communication with the user.

By using WhatsApp, the user is also subject to the terms and privacy practices of the company responsible for the platform. ServiceInfo recommends avoiding the transmission of unnecessary data, passwords, or confidential information through the app unless requested.

The use of these channels does not authorize the indiscriminate sending of advertising. Users may request the interruption of commercial communications at any time.

7. Management, billing, and support platforms

ServiceInfo uses platforms and systems for technology management, invoice issuance, billing, collections, relationship management, and customer support.

Access to this data is restricted to authorized personnel and occurs only to the extent necessary to perform their duties. Data is not sold, made publicly available, or used for purposes incompatible with those stated in this Policy.

When technology providers process data on behalf of ServiceInfo, contractual, organizational, and security measures compatible with the nature of the service and applicable legislation will be adopted.

8. Data sharing

ServiceInfo may share personal data, on a limited basis and when necessary, with:

• Providers of hosting, storage, information security, support, and technological infrastructure;
• Management, tax issuance, billing, collections, communication, and support platforms;
• Financial institutions, banks, acquirers, and payment providers;
• Accounting, auditing, and law firms, as well as professional consultancies;
• Tax, administrative, regulatory, judicial, or law enforcement authorities, when there is a legal obligation or valid order;
• Companies involved in corporate reorganization, mergers, acquisitions, or similar operations, subject to applicable protection measures;
• Other third parties authorized by the user or necessary for the execution of a requested service.

ServiceInfo does not sell personal data.

9. International data transfer

Some technology, cloud, communication, or support providers may store or process data outside Brazil.

Whenever there is an international transfer of personal data, ServiceInfo will adopt the mechanisms and safeguards mandated by the LGPD and the regulations of the National Data Protection Authority, considering the nature of the operation and the provider used.

10. Storage and retention

Data will be kept only for the period necessary to fulfill the stated purposes, execute contracts, comply with legal or regulatory obligations, prevent fraud, maintain security records, and exercise rights.

Upon completion of processing, data will be deleted or anonymized, except when its retention is authorized or required by law.

Retention periods may vary according to the data category, processing purpose, contractual relationship, and legal storage and prescription periods.

11. Information security

ServiceInfo adopts technical and administrative measures designed to protect personal data against unauthorized access and accidental or unlawful situations of destruction, loss, alteration, communication, or inappropriate processing.

These measures may include access controls, permission management, system protection, backups, monitoring, technology resource updates, confidentiality, and training for employees and contractors.

No digital environment is completely risk-free. Should a security incident occur that could pose a significant risk or harm to users, ServiceInfo will take appropriate measures and make the required communications as mandated by law.

12. Data subject rights

Under the LGPD, the data subject may request, when applicable:

• Confirmation of the existence of data processing;
• Access to personal data;
• Correction of incomplete, inaccurate, or outdated data;
• Anonymization, blocking, or deletion of unnecessary or excessive data, or data processed in noncompliance;
• Data portability, observing regulations and the protection of commercial secrets;
• Deletion of data processed based on consent, except for legal retention hypotheses;
• Information about public and private entities with which data sharing occurred;
• Information regarding the possibility of denying consent and its consequences;
• Revocation of consent;
• Opposition to processing carried out in noncompliance with the LGPD;
• Review of decisions made solely based on automated processing, when applicable;
• Filing a petition with the National Data Protection Authority and consumer protection agencies.

To protect the user and prevent fraud, ServiceInfo may request additional information to confirm the requester’s identity. Requests will be fulfilled free of charge, observing the deadlines and limits established by law.

13. Cookie Policy

Cookies are small files stored on the visitor’s device to enable website functionality, save preferences, understand navigation, and, when authorized, measure performance or support communication and marketing campaigns.

Non-essential cookies will only be activated after the visitor opts in via the preference banner or panel. Consent can be refused or changed at any time using the “Manage cookie consent” option available on the website.

Visitors can also delete or block cookies directly in their browser settings. This action may affect certain functionalities.

The list of cookies, providers, purposes, and respective retention periods will remain available and updated in the website’s preference panel.

14. Third-party sites and services

The website may contain links to third-party platforms, social networks, or services. These environments have their own rules and are responsible for their privacy practices.

ServiceInfo recommends that users review the respective policies before providing personal data.

15. Children and adolescents

ServiceInfo’s services are primarily intended for companies and professionals and are not intentionally directed at children.

If it becomes necessary to process data of children or adolescents, ServiceInfo will adopt the measures required by law, prioritizing their best interests.

16. Data Protection Officer (DPO)

The DPO acts as the communication channel between ServiceInfo, data subjects, and the National Data Protection Authority.

Requests related to privacy and the exercise of rights provided for in the LGPD can be sent to the channels above.

17. Changes to this Policy

This Policy may be updated to reflect legal, regulatory, technological, or operational changes.

The current version will always be available on the website, accompanied by its last updated date. When a change is significant, ServiceInfo may use its communication channels to notify users.

18. Contact

Questions, requests, or complaints regarding this Policy or the processing of personal data can be forwarded to: