Privacy Policy

1. Scope

This policy applies to all corporate customers and authorized users who access Datalysis App, as well as to data processed in the context of modules and developments enabled for each client.

2. Data We Collect

• Basic identification: full name.
• Contact: institutional email (required) and phone (optional).
• Profile: position or role in the company (optional).
• System usage: activity logs and records (dates, modules used, relevant actions, IP addresses).
• Integrated third-party data: when a client enables integrations (e.g., Intuit), we process only the data strictly necessary to provide the contracted service.

We do not request or process special categories of personal data unless explicitly required by the client and with legal and contractual justification.

3. Purposes of Processing

• Authentication, session management, and role-based access control.
• Audit and action traceability for security and compliance.
• Provision of modules and functionalities contracted by each client.
• Improvement, support, and maintenance of the platform.
• Operational communication related to the service (security notices, maintenance, relevant changes).
• External integrations (e.g., Intuit): ingestion, transformation, and operational storage of data to maintain dashboard continuity and resilience against external provider failures.

4. Legal Basis

We process data based on: (i) execution of contracts with our clients; (ii) legitimate interest in ensuring security, integrity, and service improvement; and (iii) compliance with applicable legal obligations.

5. Cookies and Similar Technologies

We use essential session cookies to maintain your authentication and security preferences. We do not use tracking cookies for advertising purposes.

6. Data Retention

We retain personal data while the client's account is active or as necessary to provide the service and fulfill legal and contractual obligations. Logs are retained for reasonable periods for security and audit purposes.

7. Sharing and Processors

• We do not sell personal data.
• We may share data with vendors and sub-processors who provide us services (hosting, security, monitoring, integrations), under contracts requiring confidentiality and security measures.
• In integrations enabled by the client (e.g., Intuit), we process and store data necessary for dashboard operability, with access controls, client segregation, and activity logging.
• We may disclose information when required by law or to protect rights, security, or integrity of the service.

8. International Transfers

When necessary to provide the service through infrastructure or providers located in other countries, we will adopt appropriate safeguards for data protection in accordance with applicable regulations and contracts with our clients.

9. Information Security

• All traffic is transmitted via HTTPS.
• Authentication controls, role-based authorization, and logical segregation by client.
• Hardening practices, monitoring, and logging of relevant events.
• Technical, administrative, and organizational measures aligned with industry standards to prevent unauthorized access, disclosure, alteration, or loss of information.

10. User Rights

Users may request access, rectification, or deletion of their personal data, as well as limit or oppose certain treatments when appropriate. Requests are managed through the contracting client or directly with Datalysis Group.

11. Minors

Datalysis App is intended for authorized corporate users. It is not directed at minors.

12. Changes to this Policy

We may update this policy to reflect legal, technical, or operational changes. We will publish the current version on this page indicating the "Last updated" date.

13. Contact

If you have questions or requests related to privacy, contact us: +503 7986 6450.