PDV Open privacy policy

Your privacy matters to us. This policy explains what data PDV Open collects, what we use it for and how you can exercise your rights.

1. Who we are

PDV Open is developed and maintained by MAT Tecnologia LTDA, CNPJ 49.180.424/0001-74, a company based in Brazil, which is responsible for processing your personal data. For any privacy matter, write to us at [email protected].

2. Data we collect

• Purchase data: your name and email address, to issue the licence and send you the activation key.
• Activation data: a technical identifier of the computer on which the licence or the free trial is activated, and the IP address of the request, to link the licence to that computer and prevent abuse of the free trial.
• Payment data: payment is processed by Hotmart, the payment platform through which we sell PDV Open, and it is Hotmart that receives your billing details. We do not receive or store your card or bank account details: from the purchase, Hotmart sends us your name, your email, the product and the payment status. Hotmart handles that data under its own privacy policy.

3. Your business data

PDV Open runs on your shop's computer. Stock, sales, customer, credit and report data is stored locally on that computer. We have no access to it: we do not collect it or see it. If you switch on the automatic backup, a copy is sent to your own Google Drive account, as explained in section 4.

4. Google Drive backup (Google account data)

The automatic backup is optional and is only switched on when you connect your Google account and authorise access. The application asks for two permissions:

• Google Drive, drive.file scope: allows the application to create and manage only the backup files it generates. It does not read, list or access your other files.
• Google account email, userinfo.email scope: used only to show, inside the application, which account is connected to the backup.

Backups stay in your Google Drive; we do not keep copies on our servers. Google credentials are stored on your shop's computer; our server only brokers the exchange and renewal of those credentials with Google and does not store them. You can revoke access in the application or at myaccount.google.com/permissions.

The use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

5. What we use your data for

• Delivering and validating the software's activation key.
• Providing technical support when you ask for it.
• Sending you important notices about your purchase and system updates.
• Measuring which advert the purchase came from, as described in section 6.

We do not sell your data, we do not use it for third-party advertising (measuring our own adverts is covered in section 6) and we do not use Google data to train artificial intelligence models.

6. Cookies, measurement and adverts

On our website (not in the shop application) we use cookies and measurement tools to know which pages and adverts bring visits, trials and purchases: Google Analytics, with Google signals, which add to the visit data aggregated information — such as age, gender and interests — about people signed in to their Google account who have allowed ad personalisation; the Meta Pixel and Conversions API (Facebook and Instagram); and the OpenAI Measurement Pixel (adverts on ChatGPT). They record the pages visited, clicks on download, buy and WhatsApp, the purchase and the campaign or advert it came from. When you buy, the email and phone number of the order may be sent to Google, Meta and OpenAI encrypted (hashed), only to link the purchase to the advert and to build advertising audiences.

You can switch off ad personalisation at adssettings.google.com and in Meta's ad preferences, block Google Analytics with the opt-out browser add-on or clear your browser's cookies. The data Google links to your account can be seen and deleted in My Activity.

7. Who we share data with

We only share data with Hotmart, to process the payment, with the measurement and advertising tools in section 6, and when the law requires it. Data obtained from Google APIs is never shared with third parties.

8. Security and retention

We keep data for as long as needed to keep your licence active and to meet legal obligations. We protect it with reasonable measures against loss and unauthorised access, and all communication between the application, our servers and Google uses an encrypted connection (HTTPS).

9. Your rights

You can at any time exercise your rights of access, correction, deletion and objection, and withdraw your consent, by writing to [email protected]. We will reply within 20 business days at most.

10. Changes to this policy

We may update this policy to reflect changes to the product or to the law. The date of the last update appears at the top of this page.