Privacy Policy
This policy explains how SquidCore ERP collects, uses, shares and protects personal data, in line with the Brazilian General Data Protection Law (Law 13.709/2018).
1. Who the controller is
The controller of data processed in SquidCore ERP is [PREENCHER: razão social], registered under [PREENCHER: CNPJ], with offices at [PREENCHER: endereço]. Questions about this policy and requests regarding personal data can be sent to [email protected].
2. What data we process
Account registration data (name, email, phone, document and company details); usage data (access logs, IP address and actions performed); and the data you enter to run your business, including your customers, products, sales and tax documents.
3. What we use it for
To provide the contracted service, authenticate access, issue tax documents on your behalf, process payments, provide support, comply with legal obligations and improve the product. We do not sell personal data and do not use it for third-party advertising.
4. You control your customers' data
For the data you enter about your own customers, SquidCore acts as processor and you as controller. It is up to you to have a legal basis for that processing and to answer data subjects.
5. Who we share with
With providers necessary to the operation: cloud infrastructure, our accredited e-invoicing provider, payment gateways, messaging providers and AI model providers, always limited to what is needed. We also share when required by law or court order.
6. Artificial intelligence
When you use the AI agents, the conversation content and the data needed to run the tools are sent to the chosen model provider. Agents operate under the same permissions as the user who invoked them.
7. How long we keep it
For the duration of the contract and for the applicable legal periods, particularly tax and accounting periods, which may require documents to be kept for five years or more.
8. Security
We use role and scope based access control, encryption of sensitive fields at rest, access logging and per-organization data isolation. No system is immune to incidents; we will notify data subjects and the authority whenever the law requires.
9. Your rights
You may confirm processing, access, correct, anonymize, port or delete data, withdraw consent and object to processing, under the applicable law. Write to [email protected].
10. Cookies
This site uses only necessary cookies: your language preference and your theme preference. There is no advertising cookie and no third-party tracking.
11. Changes
We may update this policy. Relevant changes will be communicated through the account's contact channels before they take effect.