Privacy Policy.

1. Who we are

This Privacy Policy describes how HPS SOFTWARE LTDA, registered under Brazilian Tax ID (CNPJ) no. 47.172.959/0001-78, headquartered at Av. Dr. Álvaro Severo de Miranda, 812, Apt. 1702, Passo Fundo / RS, Brazil ("HPS", "we", "us" or "our"), processes personal data in the context of our website, applications and services.

For any matter related to privacy or data protection, you may contact us at [email protected].

2. Data we collect

2.1 Data you provide directly

• Contact data: name, email, phone, company — when you reach out via form, email or WhatsApp.
• Account data: credentials, preferences and settings — when using our applications or platforms that require registration.
• Support data: content of messages, attachments and technical information shared during support requests.

2.2 Data collected automatically

• Browsing data: IP address, browser type, operating system, pages accessed, date/time of access.
• App usage data: technical events, error logs and operational metrics, used exclusively to improve the product.
• Cookies and similar technologies: we use essential cookies for site functionality and, when applicable, analytics cookies for measurement.

3. Legal basis and purpose of processing

We process your personal data under the legal bases provided by applicable data protection laws, for the following purposes:

• Contract performance: to deliver contracted services and maintain the business relationship.
• Consent: marketing communications, when expressly authorized.
• Legitimate interest: improving products, preventing fraud and ensuring security.
• Legal obligations: complying with tax, accounting and regulatory requirements.

4. How we use your data

• To provide, maintain and improve our services and applications.
• To respond to support requests and communicate with you.
• To issue invoices, tax documents and process payments.
• To diagnose technical issues and ensure platform security.
• To comply with legal, tax and regulatory obligations.

5. Data sharing

HPS does not sell your personal data. We may share data only in the following cases:

• Service providers: cloud infrastructure, payments, email, analytics — all bound by contractual confidentiality and data protection obligations.
• Legal compliance: when required by a competent authority or to exercise rights in judicial proceedings.
• With your consent: in any situation where you expressly authorize it.

6. Storage and security

Your data is stored on servers with modern security standards, including encryption in transit (TLS/HTTPS) and, when applicable, at rest. We implement access controls, monitoring and security practices aligned with industry best practices.

Despite our efforts, no system is 100% secure. In the event of an incident involving personal data, we will notify you and the relevant authority (Brazilian ANPD) as required by law.

7. Data retention

We retain your data only for the time necessary to fulfill the purposes for which it was collected, respecting:

• Mandatory legal deadlines (tax, accounting, labor).
• Duration of the contractual relationship and a reasonable period afterward for rights defense.
• Deletion requests made by you, unless there is a legal retention obligation.

8. Your rights as a data subject

Applicable data protection laws guarantee you, as a data subject, the following rights:

• Confirmation of the existence of processing.
• Access to your data.
• Correction of incomplete, inaccurate or outdated data.
• Anonymization, blocking or deletion of unnecessary or non-compliantly processed data.
• Data portability to another provider.
• Deletion of data processed based on consent.
• Information about sharing with public and private entities.
• Consent revocation.
• Objection to processing in case of non-compliance.

To exercise any of these rights, send an email to [email protected] with the subject "Privacy". We will respond within 15 days.

9. Children's privacy

Our services are not intended for children under 13. We do not knowingly collect personal data from children. If you become aware of improper collection, please contact us so removal can be performed immediately.

10. International transfer

Some service providers may be located outside Brazil. When international transfer occurs, we ensure safeguards required by applicable data protection laws are followed.

11. Cookies

We use essential cookies for site functionality and, when enabled by the user, analytics cookies to understand platform usage. You can manage cookies in your browser settings.

12. Changes to this policy

This Policy may be updated periodically. Relevant changes will be communicated on this site with prominence on the last updated date. We recommend reviewing this document regularly.

13. Data Protection Officer (DPO) contact