PRIVACY AND DATA PROTECTION
Privacy Policy
1. Who is responsible for your data
Tervali, with an office at Avenida Paulista, 1106, Suite 01, 16th floor, Bela Vista, São Paulo, SP, 01310-914, Brazil, is the controller of the personal data processed through this website under Brazil’s General Data Protection Law (Law 13,709/2018, LGPD).
You can reach our data protection officer at privacidade@tervali.com.br.
2. What this policy covers
This policy applies to tervali.com.br, in Portuguese and English, to messages sent to Tervali’s email addresses from the site, and to applications for the opportunities on our careers page.
It does not apply to third-party sites reached through links, such as Instagram, LinkedIn or Google Maps, which have their own policies.
3. What data we process, why, and on what legal basis
| Situation | Data | Purpose | Legal basis (LGPD) |
|---|---|---|---|
| Browsing the site | IP address, date and time of access, requested page, browser and operating system, logged by our hosting provider | Serve the pages, keep the site secure and retain access logs as required by law | Legal obligation (art. 7, II), under art. 15 of Brazil’s Internet Civil Framework, and legitimate interest (art. 7, IX) |
| Visit statistics, only if you accept | Page visited, referring site, country, device type, browser and language, in aggregate and without cookies | Understand which content is useful and improve the site | Consent (art. 7, I), which you can withdraw at any time |
| Preferences in your browser | Your cookie choice, saved in your browser’s local storage | Remember your choice between visits | Legitimate interest (art. 7, IX), as strictly necessary for the feature you requested |
| Contact form and quick assessment | Name, role, organization, email, topic, message and assessment answers | Reply to your inquiry, understand your needs and, where relevant, prepare a proposal | Pre-contractual steps at the data subject’s request (art. 7, V) and legitimate interest (art. 7, IX) |
| Messages sent by email | Whatever you include in your message, such as name, organization, contact details and a description of your situation | Reply, understand your needs and, where relevant, prepare a proposal | Pre-contractual steps at the data subject’s request (art. 7, V) and legitimate interest (art. 7, IX) |
| Job applications | Name, contact details, résumé, work history, professional license and anything else you choose to send | Assess your profile for the opportunity and contact you about the process | Pre-contractual steps at the data subject’s request (art. 7, V) |
We do not ask for sensitive personal data, such as health information, racial or ethnic origin, religion, political opinions or biometric data. Please do not include it in messages or résumés. If it is sent, it will be disregarded and deleted.
The site does not process patient data.
4. Who we share data with
We do not sell or rent personal data. We share it only with processors that provide services to Tervali, to the extent needed for each purpose:
- Fly.io, Inc.: website hosting and technical access logs.
- Umami Software, Inc.: aggregate visit statistics, only if you accept.
- Resend, Inc.: delivery of the emails generated by the contact form and the quick assessment.
- Tervali’s email provider: receiving and storing messages and applications sent to our addresses.
- Public authorities: when required by law, court order or a request from a competent authority.
5. International transfers
Some processors run infrastructure outside Brazil, which may involve international data transfers. In those cases, transfers take place under the grounds in art. 33 of the LGPD, with contractual safeguards consistent with Brazilian law and the ANPD’s rules on international transfers.
6. How long we keep data
- Contact form and quick assessment: the same periods as business inquiries, described below.
- Application access logs: 6 months, as required by art. 15 of Brazil’s Internet Civil Framework, or longer if a court order or authority request requires it.
- Visit statistics: kept only in aggregate, without identifying the visitor.
- Browser preferences: until you clear your browser data. We ask for your cookie choice again after 12 months.
- Business inquiries: for the duration of the conversation and up to 2 years after the last contact, unless a contract is signed, in which case the applicable legal periods apply.
- Job applications: for the duration of the process and up to 12 months afterwards, for future opportunities. You can ask us to delete them sooner.
When these periods end, data is deleted or anonymized, except where art. 16 of the LGPD allows it to be kept.
7. Your rights
Under art. 18 of the LGPD, you can ask us at any time for:
- confirmation that we process your data, and access to it;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of data that is unnecessary, excessive or processed unlawfully;
- portability of your data to another provider, subject to trade secrets;
- deletion of data processed on the basis of your consent;
- information about the entities we share data with;
- information about the option of not giving consent and its consequences;
- withdrawal of consent;
- objection to processing based on another legal ground, where the LGPD is not being followed;
- review of decisions made solely by automated processing. Tervali does not make automated decisions about you.
To exercise your rights, write to privacidade@tervali.com.br. We may ask for information to confirm your identity first. We reply immediately in simplified form, or within 15 days with a full statement, as set out in art. 19 of the LGPD.
You may also file a complaint with Brazil’s National Data Protection Authority (ANPD).
9. Security
We use technical and administrative measures to protect data against unauthorized access and accidental or unlawful events, such as encrypted connections (HTTPS), restricted access to our mailboxes and collecting only what is needed. No system is fully immune to incidents. If an incident may cause significant risk or harm, we will notify affected data subjects and the ANPD, as required by art. 48 of the LGPD.
10. Children and adolescents
The site and the opportunities published here are intended for professionals and organizations. We do not knowingly collect data from anyone under 18.
11. Changes to this policy
We may update this policy to reflect changes to the site, our services or the law. The date of the last update is shown at the top of the page. If a change affects cookies or statistics, we will ask for your choice again.
12. Contact
Questions, requests and complaints about this policy or your data: privacidade@tervali.com.br.