1. Who we are

Endro LTDA, CNPJ 60.415.161/0001-78, headquartered in Curitiba/PR, Brazil, is the controller of the personal data processed in this document. The Data Protection Officer (DPO) can be contacted at contato@endro.com.br.

2. Data we collect

• Registration data: name, email, phone, company and billing information;
• Usage data: screens accessed, features used, access logs and session time;
• Agronomic data: information about properties, plots, harvests, technical visits and costs entered by users;
• Payment data: processed exclusively by Asaas, not fully stored by Endro.

3. How we collect

We collect data through registration and contact forms, through the use of the Platforms, through session cookies (strictly necessary) and through internal usability analytics, which anonymously records how features are used.

4. Legal basis

We process data based on the legal bases provided for in LGPD, especially: performance of a contract, compliance with a legal obligation, legitimate interest and consent, when applicable.

5. Purposes of processing

• Provide, operate and maintain the Platforms;
• Process subscriptions and charges via Asaas;
• Provide technical support and respond to requests;
• Improve the experience and usability of the Platforms;
• Comply with legal, tax and regulatory obligations.

6. Sharing with third parties

We share data only with third parties necessary for the operation: Asaas (payment processing), cloud hosting providers and service providers strictly linked to the operation. We do not sell or transfer personal data to third parties for commercial purposes.

7. International transfer

Some cloud providers may process data outside Brazil. In such cases, we adopt contractual clauses and adequate safeguards, as required by LGPD.

8. Data subject rights

The data subject may request confirmation, access, correction, anonymization, blocking, deletion, portability and information about the sharing of their data by contacting contato@endro.com.br. We will respond within the legal deadlines.

9. Retention and deletion

We keep registration data while the account is active and for up to 5 (five) years after closure, to comply with legal obligations. Tax data is kept for 5 (five) years. Access logs are kept for at least 6 (six) months, in accordance with the Brazilian Civil Rights Framework for the Internet.

10. Information security

We adopt technical and administrative measures to protect data against unauthorized access, loss, alteration or destruction. These include: encryption in transit, access control, monitoring and internal security policies.

11. Cookies

We use only session cookies, necessary for the operation of the Platforms, and internal usage analytics. We do not use advertising cookies or third-party tracking.

12. Contact

Questions about this Policy or requests related to your data may be sent tocontato@endro.com.br.