Privacy Policy

The controller of the personal data processed on the platform is ObraVisor. For any privacy-related matter, contact our Data Protection Officer (Encarregado) at [email protected].

We collect only the data strictly necessary to operate the service:

• Registration data: first name, last name, email and, optionally, phone number.
• Login credentials: your password is stored in encrypted form (hash) — never in plain text.
• Service usage data: information about the projects, organizations, phases, site visit logs, comments and photos that you or your team enter.
• Payment data: when you subscribe to a paid plan, card details are collected and processed directly by Stripe. We do not store your card numbers on our servers.
• Technical data: IP address, device/browser type and access logs, generated automatically for security and operational purposes.

• Creating and maintaining your account and enabling use of the platform — legal basis: performance of a contract.
• Processing payments and managing subscriptions — legal basis: performance of a contract.
• Sending operational communications (sign-up confirmation, password recovery, service notices) — legal basis: performance of a contract and legitimate interest.
• Ensuring security, preventing fraud and complying with legal and tax obligations — legal basis: legal obligation and legitimate interest.
• Improving and supporting the product — legal basis: legitimate interest.

We do not sell your data. We share only what is necessary with service providers that help us operate the platform (processors), such as:

• Stripe — payment processing.
• Infrastructure and email providers — application hosting and delivery of transactional messages.
• Public authorities, when required by law or court order.

Some of these providers may process data outside Brazil. In such cases, we adopt appropriate safeguards in accordance with the LGPD.

We use cookies and local storage (localStorage) strictly necessary for authentication and for the platform to work. For details, see our Cookie Policy.

We keep your data while your account is active and for the period required to meet legal, tax and audit obligations. Once the account is closed, the data is deleted or anonymized, unless the law requires it to be kept for longer.

We adopt technical and organizational measures to protect your data, including encrypted connections (HTTPS/TLS), hashed passwords, per-organization access control (isolation between customers) and audit logs. No system is 100% immune, but we work continuously to reduce risks.

The LGPD guarantees you, at any time, the right to:

• Confirm whether your data is being processed and access it;
• Correct incomplete, inaccurate or outdated data;
• Request anonymization, blocking or deletion of unnecessary data;
• Request data portability;
• Withdraw consent and request deletion of data processed on that basis;
• Obtain information about how your data is shared.

To exercise any of these rights, write to [email protected].

Our officer in charge of personal data processing (Encarregado) can be contacted at [email protected].

We may update this Policy from time to time. Material changes will be communicated through our channels. The date of the last update is shown at the top of this page.