Privacy Policy

1. Introduction

sodei is committed to protecting the privacy and personal data of its users. This Privacy Policy describes how we handle information collected through our digital solutions — including mobile applications, web platforms, portals, and other digital tools developed and operated by sodei ("Solutions").

This Policy applies to all digital Solutions made available by sodei, regardless of platform or access channel.

Browsing this website (sodei.com.br)

You do not need to register or fill in any form to browse www.sodei.com.br. This website uses analytics (Google Analytics) and marketing (Meta Pixel) cookies only if you consent in the cookie notice. Details in the Cookie Policy.

• →Email contact: if you write to us, we process your name, email address and message content only to reply and follow up on your contact, based on legitimate interest and pre-contractual steps (LGPD, art. 7, IX and V). Messages are kept for up to 24 months after the last contact, unless required by law.
• →Hosting: the website is hosted by Vercel Inc., in the United States. As with any internet access, the server receives your IP address and technical browser data, used only to deliver the pages and protect the website against attacks.
• →Google and Meta: with your consent, browsing data (pages visited, device, IP address and cookie identifiers) is sent to Google LLC and Meta Platforms, Inc., in the United States, to measure website audience and campaign results, based on consent (LGPD, art. 7, I). You can withdraw consent at any time in Cookie preferences.
• →Fonts and images are served by the website itself, with no data sent to third parties.

The following sections cover sodei digital solutions (apps, platforms and portals).

2. Data Collected

Depending on the solution used and enabled features, we may collect the following types of data:

3. Purpose of Data Processing

Collected data is used exclusively for the following purposes:

• →Authentication and access control to the application;
• →Provision of features and services available in sodei Solutions;
• →Technical support and user assistance;
• →Continuous improvement of features and user experience;
• →Performance monitoring and technical fault diagnosis;
• →Compliance with legal and regulatory obligations;
• →Generation of reports and analysis for the user's organization, as contracted.

4. Legal Basis for Processing

The processing of personal data by sodei is based on the following legal grounds under the Brazilian General Data Protection Law (LGPD — Law No. 13,709/2018):

• →Performance of a contract — to provide contracted services and features;
• →Consent — for optional features that require explicit user authorization;
• →Legitimate interest — for product improvement, platform security, and fraud prevention;
• →Legal obligation — when required by applicable law.

5. Data Sharing

sodei does not sell, trade, or transfer personal data to third parties for commercial purposes. Data may only be shared in the following circumstances:

• →With operational and support partners, under confidentiality agreements;
• →With contracted technology service providers (e.g., cloud infrastructure, authentication), who operate under contractual confidentiality obligations;
• →With the contracting organization, as defined in the service agreement;
• →By legal, regulatory, or judicial determination.

6. Storage and Security

Collected data is stored on secure servers with access controls, encryption, and continuous monitoring. We implement appropriate technical and organizational measures to protect data against unauthorized access, loss, alteration, or improper disclosure.

Data is retained for the period necessary to fulfill the purposes described in this policy or for the period required by law, after which it is securely deleted.

7. Data Subject Rights

Under the LGPD, data subjects have the following rights:

• →Confirmation and access — to know whether data is processed and to access such information;
• →Correction — to request updating or rectification of incomplete or inaccurate data;
• →Deletion — to request deletion of data processed based on consent;
• →Portability — to request transfer of data to another service provider;
• →Withdrawal of consent — to revoke given consent at any time;
• →Objection — to object to processing in case of LGPD non-compliance;
• →Information — to obtain information about entities with whom data was shared;
• →Anonymization, blocking or deletion — to request these actions for data that is unnecessary, excessive or processed in breach of the LGPD;
• →Information on refusal — to be informed about the possibility of withholding consent and the consequences of refusing;
• →Review of automated decisions — to request review of decisions made solely through automated processing that affect your interests;
• →Petition to the ANPD — to lodge a petition with the Brazilian National Data Protection Authority (ANPD).

To exercise any of these rights, contact us at: dpo@sodei.com.br. We will reply within 15 days of the request.

8. Cookies and Similar Technologies

On this website, analytics and marketing cookies are only used with your consent, as described in the Cookie Policy. Our Solutions (apps and platforms) may use session identifiers and access logs that are strictly necessary for authentication, security and technical diagnostics. We do not use advertising cookies. If we adopt non-essential cookies in the future, they will only be activated after your consent.

9. Minors

sodei Solutions are intended exclusively for users aged 18 or older, in a professional and business context. We do not intentionally collect data from minors. If we identify such a situation, the data will be immediately deleted.

10. International Data Transfers

Any international data transfers resulting from the use of cloud infrastructure are carried out with providers that meet adequate data protection standards, in compliance with Article 33 of the LGPD and the guidelines of the National Data Protection Authority (ANPD).

11. Changes to This Policy

This Privacy Policy may be updated periodically to reflect changes in our Solutions, practices, or applicable law. Relevant changes will be communicated through the Solutions themselves or by email. When a change affects processing based on consent, new consent will be requested before the change takes effect.

12. Contact and Data Protection Officer (DPO)

For questions, requests, or exercise of rights related to this Privacy Policy, contact sodei:

This Privacy Policy was drafted in compliance with the Brazilian General Data Protection Law (LGPD — Law No. 13,709/2018), the Google Play Store guidelines for app publishing, and international best practices for personal data protection.