Privacy Notice

                                                                                                                                              WHAT WE DO WITH YOUR INFORMATION

We've done our best to explain clearly and simply what personal information we'll need from you and what we'll do with each piece of it. Therefore, we've outlined the most important points below, which can also be read in full detail on our [link to relevant website/page]. Privacy Notice.

Furthermore, thisWe are always available to answer any questions you may have through an environment for opening and interacting with support tickets. Call Center. 

To discuss the User's personal data specifically, we have a dedicated channel: dpo@goevo.com.br

• Who is responsible for data processing?

We control the processing of personal data relating to our clients; that is, once the contracting company chooses to use our services, we will request some information and make decisions in order to provide our service in the best and safest way possible.

We are data processors handling the personal data of third parties entered into our solutions by the Contracting Company; in other words, we process data based on the decisions of our clients, the data controllers.

The Contracting Company is fully responsible for determining the purposes of the data that will be processed through the platform, for defining the most appropriate legal bases for this processing, and for informing data subjects in advance about the sharing of their data with the [Company Name]. GOEVO. The Contracting Company shall not include any data or information on the platform without the knowledge and/or specific consent (when applicable) of the data subject and/or their legal representative. Likewise, the Contracting Company will be responsible for deleting the personal data it enters on the platform while the account is active, and must directly respond to requests from data subjects, so that... GOEVO He will follow your instructions.

In addition, there are also some operators and/or sub-operators contracted by GOEVO which may process personal data, such as legal counsel, developers, technology partners, servers, among others. Sub-operators may have access to the personal data of Users and/or third parties related to the Contracting Company's business only to enable part of the solution of GOEVO provided by them and following the same rules set forth here. 

• How will we keep your data secure?

A GOEVO We are very concerned about the security of your personal data. Therefore, we implement suggested measures that include a variety of security technologies and procedures to help protect your information.

• What information do you need to provide us in order to use our platform?

To register and use our services, you will need to provide:

• Administrator User and other Users: Name, Phone Number, Email, and Department. 
• Contracting Company: Company Name, Trade Name, Address, CNPJ (Brazilian tax ID), Phone Number, Mobile Phone Number, Email, Name of Legal Representative and CPF (Brazilian individual tax ID) of Legal Representative.

A GOEVO Depending on the functionality of the service, we may request additional information, such as usage preferences, transaction history, payment information (if applicable), and data related to the type of access or service contracted.

• For what purposes do we use your personal data?

All your data is processed for specific purposes and in accordance with the General Data Protection Law. We may process this information for:

• To provide our service; and
• To provide support and customer service;

To better understand what we do with your information, we have provided a table in our Privacy Notice.

• Who do we share your personal data with?

We will share your data with strictly necessary third parties in the cases mentioned in the Privacy Notice, with the legal consent of the data subject, and by court order or legal determination.

• Will your login logs be collected?

When you access our platform, we collect your login logs, which are a set of information regarding the date and time of use of a particular internet application from a specific IP address. This information will be kept by [Company Name]. GOEVO,under secrecy, in a controlled and secure environment, for a minimum period of 06 (six) months, pursuant to Law No. 12.965/2014, and article 7, II, of Law No. 13.709/18.

• Will personal data be collected indirectly?

In addition to access logs, we may also collect some information indirectly, according to our... Cookie Policy. 

• Will communication records be stored?

We will also store any conversations you have with us through our communication channels, as this will improve your service, make it more efficient, and serve as evidence/proof of the service provided. 

• What are your rights?

Even if you have already provided us with your personal data, you have the full right to request from the controller, at any time: confirmation of the existence of processing of your data; access to your data; correction of your data; anonymization of your data; Blocking or deleting unnecessary, excessive, or unlawfully processed data; data portability to another provider; deletion of data, except for data required by law; information about who the data is processed with. GOEVO This information includes: shared data usage; information about the possibility of not providing consent and the consequences of refusal; and the option to withdraw and revoke consent.

• What does the Privacy Notice contain?

The following Privacy Notice is divided as follows to facilitate your access to the information:

1. Date the Text Was Made Available;
2. Explanation of Technical Terms or Terms in a Foreign Language;
3. Treatment Agents;
4. Information Security;
5. Data Collection;
6. Processing of Personal Data;
7. Cancellation of the Platform, Account Access, and Data Deletion;
8. Rights of the Personal Data Subject;
9. Changes to the Privacy Notice;
10. Privacy Communication Channel;
11. Contact us for general inquiries.          

                                                                                                                                                                      PRIVACY NOTICE

Before accessing the platforma GOEVO, it is It is important that you read, understand, and freely, unequivocally, and knowingly accept this Privacy Notice.

This platform, whose name is GOEVO, It is owned and maintained by TPRIME TECHNOLOGY LTDA, a private legal entity constituted as a Limited Liability Company, registered with the CNPJ under number 06.906.517/0001-20, with address at Avenida Industrial, No. 1680, Tower 2 – Room 1210, Campestre neighborhood, municipality of Santo André, São Paulo/SP, ZIP code: 09.080-500.

This document aims to provide information about the collection, use, and storage ("processing") of data provided by Users and is in accordance with Law No. 12.965/2014 (Brazilian Internet Bill of Rights) and Law No. 13.709/18 (Brazilian General Data Protection Law).

1. DATE THE TEXT WAS MADE AVAILABLE

1.1. This document was drafted and made available on June 3, 2026.

2. EXPLANATION OF TECHNICAL TERMS OR TERMS IN A FOREIGN LANGUAGE

2.1. Below are the meanings of technical nomenclatures and terms in the English language: 

• Controller: The contracting company responsible for decisions regarding the processing of personal data.
• Purchasing Management: a feature on the platform that automates the entire procurement cycle for goods and services.
• CookiesThese are small text files that are saved on the user's computer and can be retrieved by the website that sent them during browsing. They are mainly used to identify and store information about users.
• Cryptography: a set of principles and techniques for encrypting writing, making it unintelligible to those who do not have access to the agreed-upon conventions.
• Personal data: information relating to an identified or identifiable natural person.
• Sensitive personal data: personal data concerning racial or ethnic origin, religious beliefs, political opinions, membership of a trade union or religious, philosophical or political organization, data concerning health or sex life, genetic or biometric data, when linked to a natural person.
• Data Protection Officer (DPO): a person appointed by the controller and processor to act as a communication channel between the controller, data subjects, and the National Data Protection Authority (ANPD).
• IP (or Internet ProtocolA unique identifier for each computer connected to a network.
• Operator: a natural or legal person, governed by public or private law, who processes personal data on behalf of the controller.
• Data processing: any operation performed with personal data, such as those relating to collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, elimination, evaluation or control of information, modification, communication, transfer, dissemination or extraction.
• User(s): the person(s) who use the platform's services.

2.2. Types of Platform Users:

2.2.1. Contracting Company: legal entity that contracts the services of GOEVO and chooses which applications/features will be used.

2.2.2. Master User is the person chosen by the Contracting Company to have access to all contracted applications and through whom they can create and manage other Users, as well as manage their access to the contracted applications.

2.2.3. Collaborator Users: Individuals linked to the Contracting Company who have access to the contracted applications, according to the access definitions of the Master User.

3. TREATMENT AGENTS

3.1. We are the controllers of the processing of personal data relating to our clients, that is, once the Contracting Company chooses to use our services, we will request some information and make decisions in order to provide our service in the best and safest way possible.

3.2. We are operators of the processing of personal data of third parties entered into our solutions by the Contracting Company, that is, we carry out data processing based on the decisions of our clients, the controllers.

3.2.1. The Contracting Company is fully responsible for determining the purposes of the data that will be processed through the platform, for defining the most appropriate legal bases for this processing, and for informing the data subjects in advance about the sharing of their data with the [Company Name]. GOEVO. 

3.2.2. The Contracting Company shall not include any data or information on the platform without the knowledge and/or specific consent (when applicable) of the data subject and/or their legal representative. 

3.2.3. Similarly, the Contracting Company will be responsible for deleting the personal data it enters on the platform while the account is active, and must directly respond to requests from data subjects, so that the GOEVO He will follow your instructions.

3.2.4. Furthermore, the Contracting Company must establish data protection compliance processes, which includes, but is not limited to, the preparation of essential documents and the processing of data in accordance with the law, the regulations published by the National Data Protection Authority (ANPD), and the regulations relating to its activities.

3.2.5. Thus, the Parties undertake to respect and act in accordance with the duties imposed on data processing agents by Law No. 13.709/2018, being solely responsible for their actions, with the innocent Party having the right of recourse in cases of non-compliance and penalties, including judicial penalties and those applied by the National Data Protection Authority (ANPD).

3.4. Some operators/sub-operators are necessary for the platform to be available. Therefore, they will have access to User data for the following purposes:

3.3.1. Upper Stack: Support for cybersecurity tools within AWS.

3.2.1. Google Ads: since it is the tool used to create ads;

3.2.2. SendGrid: since it is the tool used to send marketing emails;

3.2.3. WhatsApp: since it is the tool used for sending messages to customers and visitors, and for communicating with them. 

3.5. NOur contracting processes always prioritize the secure handling of User information. Therefore, from the moment these companies have access to this data, they become responsible for the security, handling, and appropriate sharing of this information., You may not disclose them for other purposes, in violation of current legislation or this Privacy Notice, under penalty of being held liable for all sanctions, especially those of a civil and criminal nature, and those applied by the National Data Protection Authority. 

3.6. TInternational transfer: the servers used bya GOEVO, which are equipped with mechanisms capable of ensuring the security of your data, are located outside of Brazil, More precisely, in the United States, and they are used so that the GOEVO so that it can perform its service properly, as determined by article 33, IX, of Law No. 13.709/18.

4. INFORMATION SECURITY

4.1. A GOEVO We are very concerned about the security of your personal data. Therefore, we implement all the measures suggested by the National Data Protection Authority (ANPD) in its Guidance Guide for Small Data Processing Agents, which includes a variety of technologies and security procedures to help protect your information.

4.1.1. In addition, we have effective measures and controls in place to prevent or reduce Information Security risks, with an approach focused on the Principles of the subject, in order to prevent, detect, respond to, and recover quickly from a threat to protect the confidentiality, integrity, and availability of technological assets and information.

4.2. All access logs, a set of information relating to the date and time of use of a particular internet application from a specific IP address, will be maintained by GOEVO, under secrecy, in a controlled and secure environment, for a minimum period of 06 (six) months, pursuant to Law No. 12.965/2014, and article 7, II, of Law No. 13.709/18.

4.3. A GOEVO [The company] is committed to preserving the stability, security, and functionality of the platform through technical measures compatible with international standards and by encouraging the use of best practices. However, no service available on the internet has a complete guarantee against illegal intrusions. In cases where unauthorized third parties illegally invade the system, [the company]... GOEVO We will do our best to find the person responsible for the illegal activity, but we are not liable for any damages caused by them.

5. DATA COLLECTION 

5.1. For registration and use of the services of GOEVO The following information will be required:

5.1.1. Administrator User and other Users: Name, Phone Number, Email, and Department. 

5.1.2. Contracting Company: Company Name, Trade Name, Address, CNPJ (Brazilian tax ID), Phone Number, Mobile Phone Number, Email, name of legal representative and CPF (Brazilian individual tax ID) of legal representative.

5.2. A GOEVO Depending on the functionality of the service, we may request additional information, such as usage preferences, transaction history, payment information (if applicable), and data related to the type of access or service contracted.

5.3. Contact history: a GOEVO It stores information about all interactions already carried out with Users, such as through the platform.  GOEVO, in Call Center, Because this will improve your service, make it more efficient, and can be used as evidence/proof of the service provided.

5.4. Information we collect indirectlyIn addition to access logs, we may also collect some information indirectly, as outlined in our Cookie Policy.

6. PROCESSING OF PERSONAL DATA

6.1. By accepting this Privacy Notice, the User understands that the collection and processing of the personal data below are necessary for the execution of the contract with the company. GOEVO, as per the information presented below.

7. CANCELLATION OF THE PLATFORM, ACCESS ACCOUNTS AND DATA DELETION

7.1. Cancellation of access accounts by GOEVOa GOEVO It may, at its sole discretion, block, restrict, disable or prevent any User's access to the platform whenever inappropriate conduct is detected.

7.2. Cancellation of access accounts by the User: to cancel services and request the deletion of the access account, the User must make the request via the link. Call Center.

7.3. When the purpose of data processing ends or upon request via email (dpo@goevo.com.br), the User will have all their data deleted immediately and permanently, except for data whose maintenance is mandatory by law or regulation, data necessary for the regular exercise of rights in judicial, administrative or arbitration proceedings, such as access logs, which will be kept confidential in a controlled and secure environment, in accordance with Law No. 12.965/2014 and with the legal basis of art. 7, II, of Law No. 13.709/18.

8. RIGHTS OF THE PERSONAL DATA SUBJECT  

8.1. The holder of personal data has the right to obtain from the controller, in relation to the data processed by it, at any time and upon request:

8.1.1. Confirmation of the existence of data processing.

8.1.2. Access to data.

8.1.3. Correction of incomplete, inaccurate, or outdated data.

8.1.4. Anonymization, blocking or deletion of unnecessary, excessive or processed data in violation of the provisions of Law No. 13.709/2018.

8.1.5. Portability of data to another service or product provider, upon express request, in accordance with the regulations of the national authority, observing commercial and industrial secrets. 

8.1.6. Deletion of data processed with the consent of the data subject, except in the cases provided for in Law No. 13.709/2018. 

8.1.7. Information on public and private entities with which the controller has shared data.

8.1.8. Information about the possibility of not providing consent and the consequences of refusal.

8.1.9. Revocation of consent.

8.2. Case a GOEVO Upon receiving a request to exercise rights from data subjects, the Controlling User will be responsible for directly responding to the data subject.

9. Changes to the Privacy Notice

9.1. A GOEVO The platform may unilaterally add to and/or modify any clause contained in this Privacy Notice. The updated version will apply to platform use from the date of its publication. Continued access to or use of the platform after publication will confirm the validity of the new Privacy Notice for Users. 

9.2. If the change made requires User consent, You will be given the option to freely, unequivocally, and knowingly accept the new text or reject it. 

9.3. If the User does not agree with the change, they may choose not to consent to specific actions or may terminate their relationship with the company entirely. GOEVO. However, this termination will not exempt the User from fulfilling all obligations assumed under previous versions of the Privacy Notice.

10. Privacy Communication Channel

10.1. A GOEVO The email address dpo@goevo.com.br is indicated, in accordance with article 41 of the General Data Protection Law, to accept complaints and communications from data subjects and the National Data Protection Authority, provide clarifications and take appropriate measures.

10.2. A GOEVO It has a specific text to regulate the usage license, rights, duties, guarantees, and general provisions: Terms of use. All of these documents form an inseparable part of this Privacy Notice.

10.3. If the communication concerns third-party data entered into the platform by the User, the User must provide a communication channel for this purpose, and in the event of receiving a request, the GOEVO will adopt the measures agreed upon in accordance with the contract signed between the Parties.

11. CONTACT US FOR GENERAL INQUIRIES

11.1. A GOEVO provides the following channel to resolve any questions you may have through an environment for opening and interacting with support tickets. Call Center.