Website privacy policy

Version 2026-10-10. Applies to this commercial website; data processing within the platform follows each customer’s agreement.

What data we collect

For a demo or assisted activation, we collect your name, work email, optional company, message, referring page and preference for product updates. For automatic trial registration, we collect your name, email, company, selected billing period and a record of your acceptance of the privacy policy.

To protect registration against abuse, we store a hash of the confirmation token and identifiers derived using HMAC from the IP address and email. These identifiers support attempt limits and are not used for advertising.

The password set during activation is sent to Keycloak, which handles authentication. It is not stored in the application database or trial registration records.

How we use it

• Respond to your request, verify your email and create your trial workspace, through assisted or automatic activation — legal basis: steps before entering a contract, at your request (Brazilian LGPD, Article 7, V).
• Send product updates, only if you check the form option — legal basis: consent (Article 7, I). You may withdraw consent at any time, and every update email includes an unsubscribe option.

Acceptance of the policy records your request; it does not authorize marketing messages. Product updates require a separate consent choice.

Cookies and tracking

This site uses no tracking cookies or advertising tools. The text fonts are served by the site itself — no third party receives your IP address to deliver them.

Who we share data with

We do not share data for third-party marketing. We use Zoho to send confirmations and service messages, and hosting providers to operate the website and platform. Internal access is limited to teams authorized to handle your request and operate the service.

How long we retain data

Commercial requests for a demo or assisted activation are kept for as long as needed for the sales conversation and deleted within 24 months if you do not become a customer, or earlier upon an applicable request. These records are separate from temporary automatic registration data.

Temporary automatic registration records are purged after 30 days. In-progress processing that requires reconciliation is retained until resolved. Once the account is created, account and workspace data follow the retention periods set out in the contract and applicable obligations.

Your rights

You can request access, correction, deletion or portability of your data, and information about how it is used, by writing to our data protection officer, replying to any of our e-mails or at [email protected].

Data protection officer (DPO)

Gerivia's data protection officer (LGPD, art. 41) is Thiago Adriano Buchele. Contact him at [email protected] for any request or question about your personal data.

Inside the platform, each customer company is the controller of its own customers' data and answers their requests; Gerivia acts as the processor.