Privacy Policy

Last updated: December 19, 2025

1. Introduction

Sutram D. S. Ltda. ("we", "our", or "us") operates the sutram.io platform. This page informs you of our policies regarding the collection, use, and disclosure of personal information when you use our Service.

2. Data We Collect

2.1 Account Information

  • Email: Used for authentication and communication
  • Name: For personalization and identification in projects
  • Avatar: Profile image (optional)
  • Preferences: Language, theme, and notification settings

2.2 Project Data

  • Files: Documents, images, videos, and other files you upload
  • Messages: Conversations in projects
  • Metadata: Information about files (name, size, type, date)

2.3 Usage Data

  • Access and navigation logs
  • Device and browser information
  • IP address and approximate location

3. How We Use Your Data

  • Provide and maintain the service
  • Authenticate and protect your account
  • Send notifications about project activities
  • Improve our services
  • Comply with legal obligations

4. Storage and Security

Your data is stored on secure servers:

  • Files: Amazon Web Services (AWS S3) - East United States region
  • Database: AWS RDS - East United States region

We implement technical and organizational security measures to protect your data, including encryption in transit (TLS) and at rest.

5. Cookies

We use the following cookies:

  • sutram_locale: Stores your language preference
  • sutram_cookie_consent: Records your cookie consent
  • _sutram_key: Session cookie for authentication

6. Data Sharing

We do not sell your personal data. We may share data with:

  • Infrastructure providers: AWS, Fly.io (to host the service)
  • Email providers: For sending notifications
  • Legal authorities: When required by law

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

  • Access your personal data
  • Rectify inaccurate or incomplete data
  • Request erasure of your data ("right to be forgotten")
  • Restrict processing of your data
  • Data portability
  • Object to processing
  • Withdraw consent at any time

To exercise these rights, contact us at: privacy@sutram.io

8. Data Retention

  • Active account: Data retained while account exists
  • After deletion: Data removed within 30 days
  • Backups: Retained for up to 90 days for recovery

9. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of significant changes via email or a notice on the service.

10. Contact

For questions about this policy or your personal data:

Ver em Português