Privacy Policy

Introduction

Altvia Tecnologia e Serviços Digitais Ltda ("Altvia", "we", "our", or "us") is committed to protecting the privacy and personal data of every individual who visits our website or engages with our digital services. This Privacy Policy describes in clear, transparent terms what personal information we collect, why we collect it, how we process and protect it, and what rights you have over your own data.

This Policy applies to all personal data processed through our website (altviatech.online), our contact forms, email communications, and any other online touchpoints operated by Altvia. It has been drafted in compliance with Brazil's General Data Protection Law (Lei Geral de Proteção de Dados — LGPD, Law No. 13,709/2018) and, to the extent applicable to users located in the European Economic Area, the General Data Protection Regulation (EU GDPR 2016/679).

By browsing our website or submitting information through any of our forms, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please do not use our website or services.

Information We Collect

We collect personal data through several channels, depending on how you interact with us. We only collect information that is necessary, relevant, and proportionate to the purposes described in this Policy.

2.1 Information You Provide Directly

When you fill out a contact form, request a quote, subscribe to communications, or reach out to us by email, you voluntarily provide us with personal information that may include:

• Full name
• Email address
• Phone number (if provided)
• Company name or trading name
• The content of your message, inquiry, or support request
• Any other information you choose to include in your communication

Providing this information is entirely voluntary; however, certain fields are necessary for us to respond to your inquiry or deliver a requested service.

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical and usage information through cookies, web beacons, and similar tracking technologies. This data may include:

• IP address (anonymized where required by law)
• Browser type and version
• Operating system and device type
• Referring URL and exit pages
• Pages viewed, time spent on each page, and navigation paths
• Date and time of your visit
• Geographic location (country/city level, derived from IP)
• Click behavior and conversion events

2.3 Information From Third-Party Sources

We may receive data about your interactions with our advertisements or content through third-party advertising and analytics platforms (such as Google Ads and Google Analytics). This information is processed in aggregated or pseudonymous form to measure the performance of our marketing campaigns. We do not purchase data from third-party data brokers.

How We Use Your Information

We use the personal data we collect only for legitimate, specified, and explicit purposes. These purposes, together with the legal bases under which we process your data, are set out below:

• Responding to inquiries and providing services: To answer your questions, provide quotes, and deliver the digital technology services you have requested. (Legal basis: Performance of a contract or pre-contractual steps; legitimate interest.)
• Website operation and improvement: To maintain the security and functionality of our website, diagnose technical issues, and improve the user experience based on aggregate behavioral data. (Legal basis: Legitimate interest.)
• Marketing and advertising: To serve relevant advertisements on third-party platforms (e.g., Google Ads), measure campaign effectiveness, and conduct remarketing to users who have previously visited our site — where permitted by your consent or our legitimate interests. (Legal basis: Consent and/or legitimate interest.)
• Analytics and business intelligence: To understand how visitors use our website and which content is most relevant, allowing us to make informed product and content decisions. (Legal basis: Legitimate interest; consent where required.)
• Legal compliance: To comply with applicable legal obligations, enforce our terms of service, and respond to lawful requests from governmental or regulatory authorities. (Legal basis: Compliance with a legal obligation.)
• Prevention of fraud and abuse: To detect, investigate, and prevent fraudulent transactions or any other prohibited or illegal activities. (Legal basis: Legitimate interest; compliance with a legal obligation.)

We do not sell, rent, or otherwise monetize your personal data to third parties for their own marketing purposes.

Cookies & Tracking Technologies

Our website uses cookies and similar technologies (such as pixels, local storage, and session identifiers) to enhance your experience and gather analytics data. Cookies are small text files stored on your device by your browser.

Types of cookies we use:

• Strictly Necessary Cookies: Essential for the website to function correctly (e.g., security tokens, session management). These cannot be disabled without affecting site functionality.
• Performance & Analytics Cookies: Used to collect information about how visitors use our site, including which pages are visited most often and any error messages received. We use Google Analytics for this purpose. Data is aggregated and anonymized where possible.
• Advertising & Remarketing Cookies: Placed by Google Ads and similar platforms to deliver advertisements relevant to your interests and to measure the effectiveness of our advertising campaigns. These cookies may track your browsing activity across multiple websites.
• Functional Cookies: Allow the website to remember choices you make (such as preferred language) and provide enhanced, more personal features.

Managing your cookie preferences:

You have the right to accept or decline non-essential cookies. Most web browsers allow you to control cookies through their settings. You may also opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on, and opt out of personalized Google advertising through Google Ads Settings. Please note that disabling certain cookies may impact your experience on our site.

Where required by law (including the LGPD and applicable ePrivacy rules), we will present a consent banner before placing non-essential cookies on your device.

Sharing With Third Parties

Altvia does not sell or trade your personal data. We share personal information only in the limited circumstances described below, and always with appropriate contractual and technical safeguards in place:

• Service providers and sub-processors: We engage trusted third-party providers to help operate our website and business (e.g., cloud hosting providers, email delivery services, CRM tools, customer support platforms). These providers act as data processors on our behalf and are contractually bound to process your data only as instructed by Altvia and in compliance with applicable data protection law.
• Analytics and advertising platforms: We share usage and behavioral data with Google LLC (via Google Analytics and Google Ads) to analyze site performance and run targeted advertising. Google may process this data in countries outside Brazil, including the United States. Google's data processing practices are governed by Google's own privacy policy and the Standard Contractual Clauses approved by the European Commission.
• Legal and regulatory requirements: We may disclose your personal data if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of Altvia, our users, or the public.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of substantially all of our assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

We require all third parties with whom we share personal data to maintain appropriate security measures and to use the data solely for the specified purpose.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Our general retention criteria are:

• Contact form submissions and email inquiries: Retained for up to 2 (two) years from the date of last communication, or for the duration of an active business relationship, whichever is longer. After this period, records are securely deleted or anonymized.
• Analytics and technical logs: Automatically collected usage data and server logs are retained for up to 26 months in accordance with Google Analytics' default retention settings. We may configure shorter retention windows at our discretion.
• Advertising and conversion data: Data associated with Google Ads conversions is retained for the periods necessary to evaluate campaign performance, typically not exceeding 18 months.
• Legal and compliance records: Where we are required by Brazilian or international law to retain data for longer periods (e.g., for tax, accounting, or litigation purposes), we will retain the relevant records for the legally mandated period.

Once the applicable retention period expires, we will securely delete, destroy, or anonymize your personal data so that it can no longer be associated with you.

Data Security

We take the security of your personal data seriously and have implemented a range of technical and organizational measures designed to protect your information against unauthorized access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Transmission of data over encrypted HTTPS/TLS connections
• Access controls limiting personal data to authorized personnel on a need-to-know basis
• Regular review and updating of our security practices
• Use of reputable, security-certified cloud infrastructure providers
• Staff awareness and training on data protection obligations
• Incident response procedures to detect, report, and investigate data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority (ANPD — Autoridade Nacional de Proteção de Dados) and, where required, the affected individuals, within the timeframes prescribed by the LGPD and applicable law.

While we apply industry-standard safeguards, no method of data transmission or storage over the internet can be guaranteed to be 100% secure. We encourage you to take steps to protect your own data, including using strong passwords and keeping your software up to date.

Your Rights

Depending on your location and the applicable law (LGPD, GDPR, or other), you may have the following rights with respect to your personal data. We are committed to honoring these rights promptly and free of charge, in accordance with the law:

How to exercise your rights: To exercise any of the rights listed above, please submit a written request to us by email at contato@altviatech.online with the subject line "Data Subject Rights Request". We may ask you to verify your identity before acting on your request. We will respond to all legitimate requests within 15 (fifteen) days, or within the period required by applicable law. In complex cases, this period may be extended by an additional 30 days, and we will notify you accordingly.

Children's Privacy

Our website and services are directed exclusively to adults and business professionals. We do not knowingly collect personal data from children under the age of 18 (or under the applicable age of digital consent in your jurisdiction).

If we become aware that we have inadvertently collected personal information from a child without appropriate parental or guardian consent, we will take immediate steps to delete that information from our systems. If you believe we have collected data from a minor, please contact us immediately at contato@altviatech.online so that we may investigate and take appropriate action.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational needs. When we make material changes to this Policy, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by posting a prominent notice on our website or by sending you a direct communication.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website or services after the effective date of any updated Policy constitutes your acknowledgment of the changes. If you disagree with the revised Policy, you should discontinue your use of our website and services.

Archived versions of previous policies are available upon request by contacting us at the details provided in the Contact section below.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please do not hesitate to contact us. We are committed to addressing your inquiries promptly and transparently.