Privacy Policy

1. Who the controller is

The data controller is Olivas Engenharia e Tecnologia Ltda., based in Belo Horizonte/MG, Brasil.

For any matter concerning personal data — including exercising the rights described in section 9 — write to contato@olivaspss.com.

2. What we collect, and when

We only collect personal data when you deliberately submit it, in one of the three moments below. Browsing the site does not itself collect anything.

• “Work With Us” form: name, e-mail, phone, city, profile or portfolio link, intended area and seniority, professional summary and your answers to the role's questions.
• Purchase request: name, e-mail, phone, company name, tax ID (CPF or CNPJ), intended plan and seat count, preferred contact channel and the project context you describe.
• With either submission we also record the IP address, the browser identification (user-agent) and the referring page. These serve security and abuse prevention on the form — not profiling.
• In the licensed software: the licence holder's e-mail and a stable machine identifier, needed to bind the licence to the authorised computer and prevent improper concurrent use.

3. What we do not collect

The public pages use no tracking cookies, no social pixels and no third-party analytics. No cookie is written when you merely browse the site — which is why there is no consent banner to display.

We do not buy lists, do not enrich records from third-party databases, do not sell personal data and do not release it for advertising. The site is not directed at children, and we do not knowingly collect their data.

4. Why we use it, and on what legal basis

• To answer your purchase request, present a proposal and prepare the contract — performance of a contract or preliminary procedures (LGPD, art. 7, V).
• To assess applications and maintain the talent pool for future openings — legitimate interest (art. 7, IX), within the expectation of someone who applied voluntarily.
• To issue, activate, renew and support the software licence — performance of a contract (art. 7, V).
• To record the submission's IP and user-agent for security and fraud prevention — legitimate interest (art. 7, IX).
• To invoice and meet tax and accounting obligations — compliance with a legal obligation (art. 7, II).

5. Who we share it with

We neither sell nor assign personal data. Sharing is limited to the processors that keep the operation running, each handling data only on our instruction and only as far as its service requires:

• Website hosting and delivery.
• Database, where requests and applications are stored.
• Distribution of installers and release files.
• Payment platform, when the purchase is made through it — card data is handled by the platform and never passes through or is stored by us.
• E-mail delivery service, for the internal notification of your contact.
• Accountants and public authorities, where a legal obligation applies.

6. International transfer

Part of that infrastructure operates outside Brazil. In those cases the international transfer relies on art. 33 of the LGPD, is limited to what the service requires, and is subject to contractual confidentiality and security obligations.

7. Olivas Assistant (AI features)

When you use the Olivas Assistant, your question and the study results needed to answer it are sent for processing by language-model providers engaged by Olivas, which may operate outside Brazil. That content is not used to train models.

The on-device edition processes everything on your own computer: in that mode no study content leaves the machine, which suits air-gapped plants.

8. How long we keep it

• Talent-pool applications: 24 months from submission, or until you ask for deletion.
• Purchase requests that did not convert: 24 months.
• Customer and licence data: for the duration of the relationship and, afterwards, for the period required by tax law (5 years).
• Application access logs: 6 months, per art. 15 of the Brazilian Civil Rights Framework for the Internet.

9. Your rights

The LGPD (art. 18) grants you, at any time and free of charge, the right to obtain:

• confirmation that we process your data, and access to it;
• correction of incomplete, inaccurate or outdated data;
• anonymisation, blocking or deletion of unnecessary data or data processed unlawfully;
• portability to another provider;
• deletion of data processed on the basis of your consent;
• information about whom we share your data with;
• withdrawal of consent, and objection to processing carried out on another legal basis.

10. How to exercise your rights

Write to contato@olivaspss.com describing your request. We may ask for additional information to confirm your identity — precisely so as not to hand your data to someone else. We answer within 15 days.

You may also petition Brazil's National Data Protection Authority (ANPD) directly.

11. Security

Site and API traffic is encrypted in transit (HTTPS/TLS). Database access is restricted and segregated by role, credentials and keys are held in a secrets vault, and the admin panel requires authentication and is not indexable.

No system is immune to incident. Should one occur that may entail relevant risk or harm, we will notify you and the ANPD as required by art. 48 of the LGPD.

12. Changes to this policy

We may update this document to reflect changes in the law or in the processing itself. The effective date at the top indicates the current version; material changes will be announced through the contact channels you have with us.