Last Updated: 02/03/2025

MZTEC SERVIÇOS EM TECNOLOGIA LTDA (“QualityStorm”), registered under CNPJ 23.768.129/0001-40, headquartered at Rua Ponta Grossa, 1642, MD 01, Room 02, Centro district, in the city of Apucarana, state of Paraná, ZIP code 86.800-030, and developer of the QualityStorm application, is committed to transparency, privacy, and the security of its users' personal data.

This document aims to inform how data is collected, used, stored, and shared in compliance with the General Data Protection Law (LGPD), the European Union's General Data Protection Regulation (GDPR), and other applicable legislation.

If you have any questions, please contact us at suporte@qualitystorm.com.br.

1. DEFINITIONS

1.1. Anonymization: Process by which data loses the possibility of identifying an individual.

1.2. Cloud Computing: Technology for storing data on remote servers accessible via the internet.

1.3. Cookies: Small files stored on devices to enhance the user experience.

1.4. Personal Data: Information that allows identifying a natural person.

1.5. Sensitive Personal Data: Data that requires special handling, such as ethnic origin, political opinions, health information, among others.

1.6. Data Protection Officer (DPO): The person responsible for managing privacy-related matters within the company.

1.7. Data Processing: Any operation performed with personal data, including collection, storage, and sharing.

2. DATA CONTROLLER

MZTEC SERVIÇOS EM TECNOLOGIA LTDA, registered under CNPJ 23.768.129/0001-40, is the controller of the data processed through the QualityStorm platform.

3. NOTICE FOR USERS UNDER 16 YEARS OLD

3.1. The use of the QualityStorm platform is exclusively intended for individuals over 16 years old. We do not intentionally collect personal data from minors under this age.

3.2. If a child under 16 has provided personal information, we request that a legal guardian contact us so we can delete such data.

4. DATA COLLECTION, USAGE, AND SHARING

We collect and use personal data as described below:

4.1 Collected Data and Purposes

• Name, email, and company: Used for user identification and authentication.
• Signature (when applicable): Used to validate actions within the platform.
• IP address, browser type, operating system version, and language: Used for platform security and monitoring.
• Cookies and session identifiers: Used to personalize the user experience.
• Data from external integrations (Google Analytics, Microsoft Clarity): Used for platform usage analysis.

4.2 Data Sharing

We do not sell personal data. However, data may be shared with:

• Technology and storage providers: To securely host the platform.
• Legal authorities: When necessary to comply with laws and regulations.
• Analytics partners: To monitor platform performance while ensuring data protection.

All third parties with whom we share data follow strict confidentiality and security agreements.

5. DATA SECURITY AND PROTECTION

To ensure data security, we adopt measures such as:

• Encryption of data at rest and in transit to prevent unauthorized access.
• Strict access controls to limit who can view or modify data.
• Continuous monitoring of suspicious activities to detect and mitigate cyber threats.
• Regular security audits and tests to enhance data protection.

6. DATA RETENTION AND DELETION

Data is stored for the necessary period to fulfill the purposes outlined in this policy. The minimum retention period follows these guidelines:

• Access logs: 6 months (as per Article 15 of the Brazilian Internet Civil Framework - Law 12.965/2014).
• Account data: While the user remains active on the platform.
• Support data: Up to 5 years after account termination.

Users may request the deletion of their data by sending an email to suporte@qualitystorm.com.br. Some data may be retained as required by law.

7. USE OF COOKIES

We use cookies to optimize the user experience. The types of cookies include:

• Essential Cookies: Necessary for the platform to function properly.
• Analytical Cookies: Used for performance monitoring and improvements.
• Advertising Cookies: Used to personalize ads and recommendations.

Users can manage their cookie preferences directly in their browser settings.

8. DATA STORAGE AND SECURITY

We implement security measures to protect your data:

• Encryption of data at rest and in transit.
• Restricted access control to authorized personnel only.
• Continuous monitoring for vulnerability detection and mitigation.

9. USER RIGHTS

Under the LGPD, you have the right to:

• Access your personal data.
• Correct outdated information.
• Request the deletion of your data.
• Withdraw consent for data processing.

To exercise these rights, please send an email to suporte@qualitystorm.com.br.

10. DATA RETENTION AND DELETION

Data is stored for the necessary period to fulfill the purposes outlined in this policy. The minimum retention periods are as follows:

• Access logs: 6 months (as per Article 15 of the Brazilian Internet Civil Framework - Law 12.965/2014).
• Account data: While the user remains active on the platform.
• Support data: Up to 5 years after account termination.

11. CHANGES TO THE PRIVACY POLICY

This Privacy Policy may be updated periodically. Users will be notified of any relevant changes.

12. ACKNOWLEDGMENT AND AGREEMENT WITH THIS PRIVACY NOTICE

By using the features of our platform, you confirm and declare, freely and expressly, that you have carefully read this Privacy Policy, agree with the terms stipulated herein, and consent to the processing of your data as described above.

13. CONTACT

If you have any questions or requests related to this policy, please contact us:

• Email: suporte@qualitystorm.com.br
• Address: Rua Ponta Grossa, nº 1.642, MD 01, Sala 02, Centro, ZIP Code 86.800-030, Apucarana, Paraná, Brazil.

Our Security Policy establishes guidelines to protect data and ensure compliance with LGPD.

Information Security

We implement controls to protect data against unauthorized access, loss, or alterations. These include:

• Complex and rotating passwords.
• Lockouts after failed login attempts.
• Role-based access segregation as needed for operations.

Access Management

Access is granted based on the principle of least privilege, with all activities logged for auditing.

Incident Monitoring and Response

Regular audits are conducted, and incident response plans are implemented to mitigate risks.

Our Code of Ethics guides the practices of employees, partners, and clients, promoting integrity and compliance with LGPD.

Ethical Principles

We act with integrity, responsibility, and transparency in all operations.

Privacy and Confidentiality

We handle personal data with confidentiality and only for legitimate and authorized purposes.

Internal Conduct

Employees are instructed to report incidents and use data exclusively for corporate purposes.

Partnerships

We require partners and suppliers to adhere to the same ethical and security standards adopted by QualityStorm.

Contact

Any questions or requests regarding the terms of this Notice can be clarified by contacting the email: suporte@qualitystorm.com.br.