This Policy explains how Trace Case collects, uses, shares, and protects personal data, in accordance with Brazil’s General Data Protection Law (LGPD — Law No. 13.709/2018) and other applicable privacy rules.
1. Controller and Data Protection Officer
Controller: Trace Case Ltda. | Data Protection Officer (DPO): contato@trace-case.com
2. Data We Collect
- Registration: name, email, company, role, phone (when provided).
- Usage: access logs, pages visited, features used, device identifiers.
- Transactional: billing/subscription data (processed by payment providers).
- Support: messages, attachments, and metadata sent to support.
3. Legal Bases (LGPD)
- Performance of a Contract: provide and operate the Services.
- Legitimate Interest: improve features, prevent fraud, and ensure security.
- Consent: when required (e.g., marketing communications, non-essential cookies).
- Legal/Regulatory Compliance: tax obligations, audits, lawful orders.
4. Purposes of Use
- Deliver, maintain, and improve the Services.
- Customer support and success.
- Aggregated usage analytics and statistics.
- Security, monitoring, and incident prevention.
- Relevant account and product communications.
5. AI and Data
We may use aggregated and/or anonymized data to train, evaluate, and improve internal AI models, observing minimization, security, and proportionality. We will not use your data for unlawful purposes or sell individualized personal data.
6. Sharing
- Processors/Subprocessors: cloud, payments, monitoring, and email providers. We require contracts and security measures.
- Legal requirements: compliance with laws, court, or administrative orders.
- Corporate events: merger, acquisition, or restructuring, while maintaining data protection.
7. International Transfers
When personal data is transferred internationally, we adopt appropriate safeguards (e.g., contractual clauses, risk assessment, and complementary measures).
8. Security and Retention
- Security: encryption in transit, access controls, backups, and monitoring.
- Retention: we keep data as long as needed for the purposes and legal obligations, then securely delete or anonymize it.
9. Data Subject Rights (LGPD)
You may request confirmation of processing, access, correction, anonymization, portability, deletion, information about sharing, and information about the option not to consent. To exercise your rights, contact contato@trace-case.com.
10. Cookies
We use essential cookies for operation and, with consent, analytics/marketing cookies. You can manage preferences in the cookie banner or your browser.
11. Children and Adolescents
We do not target the Services to minors. If we identify improperly collected data, we will remove it as applicable.
12. Changes
We may update this Policy and will notify you of material changes. Continued use indicates acceptance of the then-current version.
13. Contact
Data Protection Officer (DPO): contato@trace-case.com