1. Who the controller is
uinspect Tecnologia, CNPJ 58.074.174/0001-89, headquartered at Av. Andrômeda, 723, 27º andar, Alphaville Empresarial, Barueri/SP, 06473-000, Brazil, is the controller of the personal data processed under this policy.
2. Data we collect
2.1. Data you provide directly
- Identification: name, email, phone, job title, company
- Platform user registration: credentials, role, workspace access
- Inspection content: photos, videos, audio, sketches, reports, expenses, notes
- Payment data: handled by an external processor (we do not store card numbers)
2.2. Data collected automatically
- Technical identifiers: IP address, device identifier, browser, operating system
- Usage metadata: pages visited, actions performed, session time
- Geolocation: when applicable and authorized, for on-site and remote inspections
- Cookies and similar technologies: see section 9
3. What we use the data for
- Provide the contracted service (run and store inspections and reports)
- Authenticate users, keep accounts secure and detect fraud
- Communicate product updates, support and billing
- Comply with legal and regulatory obligations and court orders
- Improve the product (aggregate usage analysis, with no individual identification)
- Direct marketing, always with an appropriate legal basis and an opt-out option
4. Legal basis
The processing of personal data by uInspect relies on one or more of the legal bases in article 7 of the LGPD: performance of a contract with the data subject, compliance with a legal obligation, regular exercise of rights, legitimate interest, or consent, as the case may be.
5. Sharing
We share personal data only with:
- Contracted processors (cloud, payment processing, email delivery), under contracts with data protection clauses
- Corporate clients that contracted the service, when the data was collected in inspections they configured
- Public authorities, when required by law or court order
We never sell personal data to third parties.
6. Retention
We keep personal data for as long as necessary to fulfill the purposes described here, observing applicable legal and regulatory retention periods. Inspection data is kept while the corporate client has an active contract, with an additional period for audit and dispute purposes when applicable.
7. Data subject rights
As the subject of your data, you have the right to:
- Confirm that processing takes place
- Access your data
- Correct incomplete, inaccurate or outdated data
- Anonymize, block or delete data that is unnecessary or processed in violation of the law
- Data portability
- Deletion of data processed with consent
- Information about data sharing
- Withdraw consent
To exercise any of these rights, write to privacidade@uinspect.com.br.
8. Security
We adopt technical and organizational measures to protect personal data against unauthorized access, loss, alteration or destruction. Details of our security posture are at /en/legal/security.
9. Cookies
We use essential cookies (authentication, security) and analytics cookies (aggregate usage statistics). You can manage cookies through your browser settings. Detailed listing and management options are being finalized.
10. International transfers
Some processors we contract have infrastructure outside Brazil. When that happens, we ensure the level of protection meets what the LGPD requires, through contractual clauses and internationally recognized standards.
11. Data Protection Officer (DPO)
The Data Protection Officer (DPO) can be contacted at dpo@uinspect.com.br.
12. Updates to this policy
This policy may be updated to reflect changes in the service, in legislation or in our practices. Material changes will be announced 30 days in advance.
Legal review pending. This policy is being validated by external counsel specialized in the LGPD. This page is a courtesy translation of the Portuguese original, which prevails in case of divergence.