Privacy Policy

1. Scope and application

This Privacy Policy applies to the IDB360 corporate website and to the interactions carried out through it, including contact forms, demonstration requests, and other digital channels made available. The processing of data in the operational context of the platform IDBCONNECT, when provided to client companies, is governed by the specific contracts and agreements entered into with each organization, in which IDB360 acts as a data processor under the instruction of the respective controller.

2. Data we collect

We collect only the data necessary for the purposes described in this policy:

• Data provided by you: name, company, job title, email, phone, and information submitted through forms, business requests, or messages.
• Browsing data: IP address, device and browser type, pages accessed, access source, and interactions, collected through cookies and similar technologies.
• Communication data: contact records and service history when you interact with our teams.

3. How we use the data

We use personal data to:

• respond to requests, questions, and demonstration inquiries;
• manage the commercial and institutional relationship;
• improve the website, the browsing experience, and our content;
• ensure the security, integrity, and proper functioning of our systems;
• comply with applicable legal and regulatory obligations.

4. Legal bases

The processing of personal data is carried out on the legal bases set forth in the LGPD, in particular: consent, performance of a contract or preliminary procedures, compliance with a legal obligation, and legitimate interest, always respecting the rights and freedoms of the data subject.

5. Sharing

IDB360 does not sell personal data. Sharing occurs only when necessary and is limited to the purposes of this policy, with:

• service providers and technology vendors that support the operation of the website and our solutions, under confidentiality and security obligations;
• public authorities, when required by law, court order, or legitimate request;
• third parties involved in potential corporate transactions, subject to appropriate safeguards.

6. International transfer

As a globally reaching platform, some data may be processed or stored in infrastructure located in other countries. In such cases, we adopt appropriate safeguards to ensure a level of protection consistent with the LGPD.

7. Information security

We adopt technical and administrative measures to protect personal data against unauthorized access, loss, alteration, or improper disclosure, including access controls, encryption in transit, monitoring, and sound governance practices. No system is entirely immune to risks, but we work continuously to reduce and mitigate vulnerabilities.

8. Retention and disposal

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, respecting legal, regulatory, and contractual periods. Once the need has ended, the data is securely deleted or anonymized.

9. Data subject rights

Under the LGPD, you may, at any time, request:

• confirmation of the existence of processing and access to your data;
• correction of incomplete, inaccurate, or outdated data;
• anonymization, blocking, or deletion of unnecessary data or data processed in noncompliance with the law;
• portability and information about sharing;
• withdrawal of consent, where applicable.

To exercise your rights, please contact us through the channels indicated at the end of this page.

10. Cookies

We use cookies and similar technologies to enable the website to function, analyze performance, and enhance the experience. You can manage your preferences as detailed in our Cookie Policy.

11. Updates to this policy

This policy may be reviewed periodically to reflect legal, technical, or operational changes. The current version will always be available on this page, along with its respective update date.

12. Contact

For questions, requests regarding personal data, or the exercise of rights, please contact us: