This page applies to the paperboat.ia.br site and to the platform. Every property is the controller of its operation's data; Neves Tech is the processor.
The property decides which data it collects and what for: it is the controller. Neves Tech processes that data only to make the platform work, following the property's instruction: it is the processor.
The service contract includes the processing clauses (what the data protection law calls the controller–processor agreement), and the property appoints its own officer. Our privacy contact is contato@nevestech.com.br.
Access, export, correction, deletion and withdrawal of consent come in as a request inside the platform, with the legal deadline of fifteen days counted and in plain sight. Whoever has no access to the panel asks through the e-mail above.
Answering a deletion does not erase the property's record: it removes the data subject's identification and keeps the fact, because the fact belongs to the property's stewardship.
Every property has its own data instance. The password is stored as a cryptographic derivation, never as text. The infrastructure is Cloudflare (D1 database and Workers), and transactional e-mail goes out through Brevo or Resend — those are the only processors besides us. There is no third-party tracker, no data selling and no advertising.
When the contract ends, the property takes everything in a spreadsheet and the data is deleted within 30 days, except what the law requires us to keep.