Privacy Policy · Frivya

1. Who we are

This Policy explains how we handle personal data on the frivya.com website, the app.frivya.com platform, the Frivya apps, and the messages we send.

Data Protection Officer (LGPD): privacy@frivya.com.

2. Our role

We are the controller of website data, demo requests, marketing, platform login accounts, and our business relationship with customers and partners.
We are a processor of the data our customers handle on the platform: vehicles, location, drivers, camera footage, and end customers. We process that data on the customer's behalf and under their instructions. The customer is the controller and is responsible for the legal basis of that processing. Requests from individuals about that data are forwarded to the responsible customer.

3. Data we collect

Demo requests: name, work email, company, country, mobile number (optional), type of operation, fleet size, interests, your consent choice, page, language, visit source (such as campaign parameters and referring site), and date and time.
Website browsing: cookieless aggregate statistics (Cloudflare Web Analytics); with your consent, Google Analytics 4 with cookies; and technical data such as IP address and browser, for security and bot protection (Cloudflare Turnstile).
Platform account: name, email, phone, job title, login credentials, access logs (IP, browser, date and time), and notification preferences.
Operational data, as a processor: device position and telemetry, camera events and video clips, vehicle and driver data, and commands sent to devices.
Communications: messages you exchange with us by email, SMS, WhatsApp, or phone.

4. How we use it and our legal basis

Responding to your demo request and sales inquiries — steps taken at your request before entering into a contract.
Providing the platform, authenticating users, and sending verification codes, alerts, and account and billing notices — performance of a contract.
Security, fraud and abuse prevention, and improving the website and product — legitimate interests, always balanced against your rights.
Marketing by email and SMS — consent, which you can withdraw at any time.
Analytics with cookies (Google Analytics 4) — consent.
Keeping records required by law and meeting tax and regulatory obligations — compliance with a legal obligation.

5. SMS and email messages

Frivya messaging programs: (a) verification codes; (b) platform alerts; (c) account and billing notices; (d) marketing, with news and offers, only with your consent.
How you opt in: marketing is accepted through the consent checkbox on the website form, which is unchecked by default. Service messages (a, b, and c) are accepted during platform sign-up.
Frequency: message frequency varies based on your use and settings.
Costs: Message and data rates may apply, depending on your mobile carrier plan.
How to opt out: reply STOP to any SMS (we also accept PARAR, CANCELAR, and SAIR). For help, reply HELP or email support@frivya.com. In marketing emails, use the unsubscribe link included in every message. Email alerts and notices can be turned on and off in the platform's preferences.
STOP applies per number: replying STOP blocks all messages from the number that received it. That is why marketing and service messages come from different numbers, so opting out of marketing does not stop security alerts.
We do not sell or share your mobile number, SMS opt-in data, or consent with third parties or affiliates for marketing or promotional purposes. This data is shared only with the providers that send messages on our behalf.
Consent to marketing is not a condition of purchase.

We do not sell personal data. We share data only with:

service providers acting on our behalf, under contract and bound by confidentiality: hosting and cloud, content delivery and security, email, SMS delivery, maps and geocoding, storage and backups, monitoring, payments, customer relationship management, and artificial intelligence providers used in platform features;
the Frivya partner serving the customer, when the contract is signed through that partner;
public authorities, when required by law or court order;
successors, in the event of a corporate reorganization, who remain bound by the same protections.

7. International transfers

Some providers are located outside Brazil, particularly in the United States. For these transfers we use the mechanisms provided by the LGPD, such as the standard contractual clauses approved by Brazil's data protection authority (ANPD). For individuals in the European Economic Area, we use the equivalent GDPR mechanisms.

8. How long we keep data

Demo requests: the technical copy of the form is deleted 30 days after it reaches our customer relationship system. There, the record is kept while there is a business relationship and for up to 24 months after the last contact, unless you ask us to delete it sooner.
Platform access logs: at least 6 months, as required by Brazil's Internet Civil Framework (Marco Civil da Internet).
Platform audit logs: 1 year.
Operational data: as set by the customer's contract and plan. Video is kept for a maximum of 90 days.
Tax and contract data: for the periods required by law.

9. Your rights

Under the LGPD, you can request: confirmation that we process your data; access; correction; anonymization, blocking, or deletion of unnecessary or excessive data; portability; deletion of data processed based on consent; information about who we share it with; withdrawal of consent; and review of decisions made solely by automated processing. You can also object to processing based on other legal grounds.
In the European Economic Area, you have your rights under the GDPR, including the right to lodge a complaint with your local data protection authority.
In the United States, residents of states with privacy laws can request access to, correction of, and deletion of their data. We do not sell personal data.
How to exercise your rights: email privacy@frivya.com. We respond within 15 days. You can also file a complaint with Brazil's data protection authority (ANPD).

10. Security

We use encryption in transit, role-based access control, tamper-protected audit logs, and encrypted backups. If a security incident occurs that may create significant risk or harm, we will notify the ANPD and the affected individuals, as required by law.

11. Cookies

Cloudflare Web Analytics: measures the website without cookies.
Google Analytics 4: loaded only after you accept cookies.
Your choice is stored in your browser. You can change it at any time under "Cookie preferences" in the website footer.

12. Children

Our services are intended for businesses and for people 18 and older. We do not knowingly collect data from children or minors.

13. Changes to this Policy

When this Policy changes, we will post the new version here with a new date. We will announce significant changes by email or on the platform.

14. Contact

privacy@frivya.com