Privacy Policy

Who controls your data

Freeflow Plus is the controller of the personal data described here. For any question about this policy, or to exercise the rights listed below, write to privacy@freeflowplus.com. This address reaches the person responsible for data protection (the "encarregado" under LGPD Art. 41).

What we collect

We collect only what the service needs, in three groups.

• Contact details you give us: name, company, email address and telephone number, submitted through the sign-up form or in correspondence with us.
• Account data: the name, email address and role of each user your organisation creates in the application, plus a hashed password and sign-in session records.
• Operational data: the highway, gantry, lane, equipment and vehicle-pass records your organisation loads into or generates within the application, and the health readings its on-site agents report. This is your operational data, not ours.

Why we use it

Each purpose is limited to what it needs — we do not repurpose your data.

• Responding to a sales enquiry and setting up your account.
• Providing, securing and supporting the application.
• Sending service and administrative messages such as password resets and onboarding instructions.
• Meeting our legal, accounting and regulatory obligations.

Our legal basis

We rely on the execution of a contract, or steps taken at your request before entering one, for sales enquiries and for providing the service (LGPD Art. 7, V); on legal obligation for records we are required to keep (Art. 7, II); and on our legitimate interest in securing and improving the service (Art. 7, IX). Where we rely on consent, you may withdraw it at any time.

Who we share it with

We do not sell personal data and we do not share it for advertising. We disclose it only to service providers acting on our instructions — hosting, email delivery and error monitoring — and to authorities where the law compels us. Providers are bound to use it only for the purpose we engaged them for.

How long we keep it

Sales enquiries are kept while the opportunity is open and for up to two years afterwards. Account and operational data is kept for the life of your contract and deleted, or anonymised, within ninety days of its end unless the law requires us to keep it longer.

How we protect it

Access to the application is authenticated per user and isolated per account, passwords are stored only as salted hashes, agent tokens only as digests, and traffic is encrypted in transit with TLS. Access to production data is limited to the people who need it to run the service.

International transfers

Our infrastructure and some providers may process data outside Brazil. Where that happens we rely on the transfer mechanisms permitted by LGPD Art. 33 and require an equivalent standard of protection.

Cookies

We use only the cookies the service needs to work — a signed session cookie that keeps you signed in, a cookie remembering which workspace you last used, and one remembering your language. We do not use advertising or cross-site tracking cookies.

Your rights

Under LGPD Art. 18 you may ask us at any time to:

• Confirm whether we process your personal data, and obtain a copy of it.
• Correct data that is incomplete, inaccurate or out of date.
• Anonymise, block or delete data that is unnecessary, excessive or processed unlawfully.
• Receive your data in a portable format, or have it transferred to another provider.
• Withdraw a consent you previously gave, and be told what happens if you do.
• Object to processing carried out on the basis of our legitimate interest.

How to exercise them

Write to privacy@freeflowplus.com. We will confirm receipt and answer within fifteen days. If you are a user of an account created by your employer, we may need to route your request through that organisation, which is the controller of its own operational data — we will tell you if so. You may also complain to the ANPD, Brazil's National Data Protection Authority.

Changes to this policy

If we change this policy materially we will update the date at the top of this page and, where the change affects how we use data you have already given us, tell you directly.