Privacy Policy of the Meu Estoque app

1. Who we are

The Meu Estoque app is developed and published by Activasoft Sistemas Ltda, Brazilian company register (CNPJ) 02.278.246/0001-55, with offices at Av. Venâncio Aires, 1565, Cond. Res. Angela Augusta, apto 102, Centro, São Marcos, RS, Brazil, ZIP 95.190-000.

2. Activasoft's role

The app is not intended for the general public. It is used by users authorised by an Activasoft client company, to check and move stock, and access depends on a username and password granted by that company.

Under the Brazilian General Data Protection Law, Law 13,709/2018, the client company is the controller of the data processed in the app, and Activasoft acts as processor, handling the data on its behalf and according to its instructions.

3. What data the app processes

User sign-in data: name and e-mail address. The password is managed by the authentication service and is not visible to Activasoft.

Stock data: products, quantities, goods in and out, and a record of who made each movement and when.

The app does not collect location, contacts, photos, camera or microphone from the user's device.

4. How Activasoft processes the data

Activasoft processes the data only to run the app on behalf of the client company: identify the user and grant access, record stock movements, keep the data in step with the company's management system, and fix problems.

Activasoft does not use the data for its own purposes and does not sell it to anyone.

5. Where the data is kept

To run the app, Activasoft uses the Supabase platform, which provides authentication and database services, and the Vercel platform, which publishes the app on the internet. These platforms' servers may be located outside Brazil, and the transfer takes place with the safeguards required by law.

6. Retention and deletion

The retention period is set by the client company. Once it stops using the app, Activasoft deletes or returns the data as instructed, except where the law requires longer retention.

7. Data subject rights

The data subject may exercise the rights set out in article 18 of the Brazilian General Data Protection Law, such as confirmation of processing, access, correction and deletion. As the client company is the controller, requests should be sent to it. If a request reaches Activasoft, it is forwarded to the client company and handled as instructed.

8. Account deletion

Users may request deletion of their account from the client company responsible for the access, or through the Activasoft contact below. Activasoft carries out the deletion once the client company confirms it, keeping only the records the law requires.

9. Security

Access to the app requires authentication, communication with the servers is encrypted, and access to the data is restricted to users authorised by the client company and to the Activasoft staff responsible for maintenance.

10. Changes to this policy

This policy may be updated to reflect changes in the app or in the law. The effective date at the top of this page shows the version in force.

11. Contact

English version. If the versions differ, the Portuguese version of this policy prevails.