Privacy Policy

Data we process

We process only the data needed to run the service:

• Account: name, email, and password (stored as a cryptographic hash — never in plain text). If you sign in with Google, Microsoft, or Apple, we receive your name and email from the provider you choose.
• Uploaded content: the quote files (PDF, spreadsheet, image, or text) you upload and the items extracted from them.
• Payment: the data needed for billing is processed by Stripe. We receive back only limited information, such as the card brand and last digits, never the full number.
• Usage: technical access logs, token consumption, and usage events, for security, support, and billing.

How we use data

We use your data to: provide and maintain the service; process the extraction and comparison of quotes; charge for plans, trial, and credits; provide support; ensure security; and comply with legal obligations. We may also send communications about your account and, where you consent, product news.

Artificial intelligence and your documents

Extraction and organization of quotes use artificial intelligence models provided by specialized providers. For this, the content of the files you upload is securely transmitted to the AI provider solely to process your request and return the result to you. Upon request through the contact below, we will disclose the specific AI provider we use.

We send the AI only what is necessary for extraction. You should avoid uploading documents with sensitive personal data that is not needed for the quote.

Who we share with (processors)

We do not sell your data. We share data only with providers that help us operate the service, to the extent necessary:

• Stripe — payment processing;
• Artificial intelligence providers — AI processing of the documents you upload;
• Google, Microsoft, and Apple — social login (SSO), when you choose to sign in through them;
• Mautic (hosted by us) — sending transactional and marketing emails;
• Google Ads — campaign and conversion measurement, when enabled; may set Google cookies in your browser;
• YouTube (Google) — the video embedded on the homepage may record data from your browser when played, per YouTube's policies.

Cookies and measurement

We use cookies and equivalent technologies needed to keep your session logged in, remember preferences (such as language), and protect against fraud. We may use usage measurement to understand and improve the product. You can control cookies in your browser settings.

Security

We adopt technical and organizational measures to protect your data, including encryption, controlled access, and daily backups. Your files are private: only the account owner can access, download, or preview them.

No system is 100% immune. If we identify a material security incident, we will act to contain it and will notify those affected and the competent authority where the law requires.

Retention and deletion

We keep your data while your account exists and for as long as needed to meet legal, accounting, and security obligations. You can delete files and items within the product and request account closure. A flow's main file cannot be deleted on its own, as it is the basis of the extraction — it is removed together with the flow or the account.

Your rights (LGPD)

As a data subject, you may at any time request: confirmation that we process your data; access to the data; correction of incomplete or outdated data; anonymization, blocking, or deletion of unnecessary data; portability; information about whom we share with; and withdrawal of consent.

To exercise your rights, contact us using the details below. You may also file a complaint with the National Data Protection Authority (ANPD).

International transfer

Some of our providers (such as Stripe and our artificial intelligence providers) may process data outside Brazil. In these cases, we adopt the safeguards required by the LGPD to protect your data in international transfers.

Changes to this policy

We may update this Policy to reflect changes in the service or the law. We will notify you of material changes through the platform or by email, and the "last updated" date at the top always indicates the current version.

Data protection officer and contact

For privacy questions, to exercise your rights, or to reach the person responsible for data processing, write to:

contato@orbitquote.com