Privacy Policy — EtiquetaPro

01In short

• We process only what the system needs to work: your account, the company data and the records the kitchen creates (labels, deliveries, production, temperatures, checklists).
• The server is in the European Union (Frankfurt, Germany).
• No ads, no advertising trackers, no selling of data.

02Who is responsible

Oravance is the controller of the account data of whoever signs up. For the data of people the customer company registers (staff, operators), the customer company is the controller and Oravance acts as processor (Art. 28 GDPR), processing it only to provide the service.

03Data we process

• Account: name, e-mail, language and password (stored only as an irreversible hash).
• Company and sites: legal name, tax ID (CNPJ or Partita IVA), country, time zone.
• Kitchen records: products, labels and check-outs, deliveries (supplier, invoice, batch, temperature), production and ingredients used, temperature readings, checklists. Each record keeps who did it and when, and the operator's name is printed on the label — a food-safety requirement.
• Consent record and, for security, the date of the last password change.

04What we use it for

• Providing the service (legal basis: performance of a contract).
• Sending service e-mails: sign-up confirmation, password recovery and the expiry-alert digest (which each user can switch off).
• Security and abuse prevention (legal basis: legitimate interest).

05Where and with whom

• Server and database: Hostinger VPS in Frankfurt, Germany.
• Backups: daily, kept 14 days on the server and 30 days as an encrypted copy on another Hostinger server.
• E-mail: sent through Hostinger's mail server, from contato@oravance.ai.

We do not share data with third parties other than these infrastructure providers.

06Cookies and browser storage

The system uses no tracking or advertising cookies. The browser only stores the sign-in session and preferences (language, label size, printing) locally.

07How long

For as long as the account is active. When a person is removed, their name, e-mail and password are deleted; the food-safety history (labels, check-outs, temperatures) is kept without identifying anyone, because inspections require it. Backups are replaced within the periods above.

08Your rights (GDPR and LGPD)

• Access and portability: you can download a file with your personal data and activity from within the system.
• Correction: through user settings or by asking your company administrator.
• Erasure: the company administrator removes the person (personal data is deleted as described above); to close the company account, write to us.
• You can lodge a complaint with your data protection authority.

09Contact

Questions about this policy or your data: contato@oravance.ai