Privacy Policy · BreezeAuth

1. Who we are

BreezeAuth is an identity provider operated by Breeze Tecnologia LTDA, enrolled with the Brazilian corporate taxpayer registry (CNPJ) under no. 69.212.422/0001-27, with registered offices at RUA RIO GRANDE DO NORTE, 1436, SALA 813 - SAVASSI, BELO HORIZONTE - MG, 30130-138. For the purposes of applicable data protection law, BreezeAuth acts as the processor of the personal data managed by your organization and as the controller of the data related to your own account.

2. Data we collect

Account data (name, e-mail, authentication factors), organization data (domains, users, groups, applications, policies), technical data (IP address, device and browser information) and activity records (audit logs).

3. How we use data

To provide and secure the Service, to authenticate users, to enforce the policies configured by your organization, to communicate with you and to meet legal obligations.

4. Legal bases

Performance of a contract, compliance with legal obligations, legitimate interest in the security of the Service and, where applicable, your consent.

We share data only with infrastructure and service providers that are necessary to operate the Service, under contractual confidentiality and security obligations, or when required by law.

6. Retention

Data is retained for as long as your account or organization is active and for the period required to fulfil legal obligations, after which it is deleted or anonymized.

7. Your rights

You may request confirmation, access, correction, anonymization, portability or deletion of your personal data, as well as information about sharing, in accordance with the LGPD.

8. Security

We apply technical and organizational measures such as encryption in transit and at rest, multi-factor authentication and access logging to protect your data.

9. International transfers

Where data is processed outside Brazil, we ensure appropriate safeguards as required by applicable law.

10. Contact

Requests related to this policy, and any matter concerning your personal data, can be sent to our data protection officer (“encarregado”, article 41 of the LGPD) at [email protected]. General enquiries can be sent to [email protected].