Privacy Policy

GRV Software values the privacy and security of data for everyone who interacts with our websites, products, services and recruitment processes. This Privacy Policy explains clearly what information is collected, by whom, for what purposes, and how data subjects can exercise their rights under the Brazilian General Data Protection Law (Law No. 13.709/2018 — LGPD).

By accessing any page on the grvsoftware.com.br domain, submitting forms, applying for a job, requesting a demo or hiring our services, you declare that you have read and are aware of this policy.

We only collect the information necessary for the specific purpose of each interaction. Data may include:

Identification and contact data: name, e-mail, phone, company name, job title, city, ZIP code and state, voluntarily provided in contact, demo, newsletter or registration forms.

Professional and recruitment data: résumé, work history, education, salary expectations, home ZIP code, referral source and additional information provided when applying.

Technical browsing data: IP address, browser type, operating system, pages visited, time spent, traffic source and language preferences, collected automatically through cookies and similar technologies.

We do not collect sensitive data as defined in art. 5, § II of LGPD, except when expressly required and based on adequate legal grounds (for example, occupational health information during onboarding processes, with specific consent).

We use cookies and analytics tools to improve browsing experience, understand page performance and personalize communications. Cookies can be classified as:

Essential: necessary for the basic operation of the site, such as security, authentication and language preferences.

Analytics and performance: help measure audience, most visited pages and navigation errors (e.g., Google Analytics, internal analytics tools).

Marketing: used to display more relevant content and campaigns, respecting the browser's privacy settings.

You can manage, block or delete cookies at any time in your browser settings. Disabling essential cookies may affect some features.

Personal data is used for the purposes stated at the time of collection and for compatible legitimate purposes, including:

Responding to contact, demo, support and quote requests;

Managing contracts, billing, implementation and customer success;

Processing applications, evaluating profiles, conducting interviews and communicating job opportunities;

Sending institutional communications, newsletters, events and content about digital transformation and Industry 4.0, when there is consent or legitimate interest;

Improving products, services, information security and user experience;

Complying with legal, regulatory and contractual obligations and defending rights in judicial or administrative proceedings.

GRV Software does not sell personal data. Sharing only occurs when strictly necessary and with adequate contractual protections, in the following situations:

Service providers: hosting, cloud, e-mail, analytics, recruitment and support, hired under confidentiality and data protection clauses;

Public authorities: when required by law, court order or competent regulator;

Business partners: with the data subject's express consent, when necessary for contract execution or delivery of integrated solutions.

When there is international data transfer, we adopt the safeguards provided by LGPD, such as transfer contracts or adequacy of protection level.

We adopt technical and organizational measures to protect personal data against unauthorized access, leaks, changes, destruction or misuse. Measures include encryption in transit and at rest, role-based access controls, incident monitoring, redundant backups and internal security policies aligned with market best practices.

Although we employ reasonable commercial efforts to ensure security, no system is completely invulnerable. In the event of a security incident that may affect your data, we will notify authorities and data subjects as required by applicable law.

We keep personal data for as long as necessary to fulfill the purpose of collection, comply with legal, contractual or regulatory obligations, and resolve potential disputes. After this period, data is anonymized or securely deleted, unless the law requires retention.

Résumés received through recruitment processes are kept in the Résumé Bank for future opportunities, unless the data subject requests deletion.

Under LGPD, you have the following rights regarding your personal data:

Confirm the existence of processing and request access to your data;

Correct incomplete, outdated or inaccurate data;

Request anonymization, blocking or deletion of unnecessary, excessive or unlawfully processed data;

Revoke consent at any time, when processing is based on that legal ground;

Request data portability to another service or product provider, respecting commercial and industrial secrets;

Request information about public and private entities with which we share your data;

Oppose processing based on legitimate interest, provided you present a justification;

Not be subject to decisions based solely on automated processing of personal data.

To exercise any of these rights, send an e-mail to dpo@grvsoftware.com.br describing your request and attaching an identification document.

GRV Software is the controller of the personal data collected through its digital channels.

Legal name: GRV Software LTDA

CNPJ: 005.107.093/0001-71

Address: Rua Odair Rotella, 90, Vinhedo/SP, CEP 13.280-140, Brazil

Contact e-mail: vendas@grvsoftware.com.br

DPO e-mail: dpo@grvsoftware.com.br

This Privacy Policy may be updated periodically to reflect changes in legislation, service operations or data processing practices. The date of the last update will always be indicated at the top of this document.

We recommend that you review this page regularly. Significant changes will be communicated through notices on the website or by e-mail, when applicable.

To exercise your rights, ask questions about this policy or file a privacy-related complaint, please contact our Data Protection Officer:

E-mail: dpo@grvsoftware.com.br

Address: GRV Software — Rua Odair Rotella, 90, Vinhedo/SP, CEP 13.280-140, Brazil.

We will respond within 15 (fifteen) business days, as required by LGPD.