Aproova Privacy Policy

1. Controller and roles

Aproova is operated by TRADEIVE SOLUÇÕES DIGITAIS LTDA, CNPJ 66.108.722/0001-72, Blumenau/SC, Brazil.

Tradeive may act as controller for account, authentication, billing, security, and support data. For data added by a customer to a workspace, that customer may be the controller and Tradeive/Aproova may process data on its behalf.

2. Data we process

We may process account, profile, workspace, invitation, project, review, version, file, comment, decision, notification, billing, and support data.

Technical records may include IP address or its hash, user agent, timestamps, security logs, and operational metadata.

3. Third-party data

Customers may add names, email addresses, and permissions for participants and external reviewers. The customer must have a valid legal basis or authorization to share this data.

4. Purposes and legal bases

We use data to create and protect accounts, operate workspaces, process files, send notifications, provide support, manage billing, prevent abuse, and meet legal duties.

Legal bases may include contract performance, legitimate interests, legal obligations, legal claims, and consent when required.

5. Sharing and providers

Data may be shared with authorized participants and with providers for infrastructure, authentication, storage, hosting, email, payments, security, and customer-configured integrations.

6. International transfers

Some providers may operate outside Brazil. International transfers follow applicable contracts and data protection requirements.

7. Retention and security

We keep data as long as needed to provide the service, meet obligations, resolve disputes, protect security, and preserve required operational records.

We use reasonable technical and organizational safeguards, but no system can guarantee zero risk.

8. Your rights

Depending on applicable law, you may request access, correction, deletion, portability, restriction, or objection. Contact privacy@aproova.co. Requests about data added by an organization may need that organization's validation.

9. Changes

This policy may change as the product, providers, law, or processing practices change. The published version replaces earlier versions.