Privacy Policy

1. Who we are

Opivoty is a company specialized in building and operating in-house media hubs for performance-driven brands. In this document, "Opivoty," "we," and "our" refer to the company responsible for processing your personal data.

To exercise any rights described in this policy or ask questions, contact us at privacy@opivoty.com.

2. Data we collect

When you fill out the contact form on our website, we collect:

• Full name
• Corporate email address
• Phone number (optional)
• Company name (optional)
• Message — a description of your need or media operation

We also automatically collect browsing data — such as IP address, device type, and pages visited — through analytics tools (Google Analytics and Google Tag Manager) for statistical and site improvement purposes.

We do not collect sensitive data (health, racial origin, religious beliefs, financial data) or data from individuals under 18 years old.

3. How we use your data

The data we collect is used to:

• Respond to your contact request or media operation assessment
• Record and manage the business relationship in our CRM platform
• Send communications related to Opivoty's services, if you have consented
• Improve our website and user experience based on aggregated browsing data
• Schedule meetings or presentations per your interest

We do not use your data to send unsolicited communications (spam), create automated profiles, or make decisions based solely on automated processing.

4. Legal basis (LGPD)

The processing of your personal data is based on the following legal grounds under Brazil's General Data Protection Law (LGPD — Law No. 13,709/2018):

• Consent (Art. 7, I) — by filling out and submitting the form, you consent to the processing of your data for the purposes described
• Legitimate interest (Art. 7, IX) — for analytics and site improvement, provided it does not harm your fundamental rights and freedoms

5. Data sharing

Your data is not sold, rented, or shared with third parties for commercial purposes.

We may share your data only with:

• Pipedrive Inc. — our CRM platform for customer relationship management. Data is stored on servers in the United States with adequate contractual protections
• Google LLC — for analytics and tag management (Google Analytics, Google Tag Manager). See Google's privacy policy
• Competent authorities, when required by law or court order

6. Data retention

We retain your data for as long as necessary to:

• Manage the business relationship initiated by your contact
• Meet legal and regulatory obligations (minimum 5 years under Brazilian tax and civil law)

If you request deletion of your data, we will process your request within 15 business days, except where retention is required by law.

7. Your rights as a data subject

Under the LGPD (Art. 18), you have the right to:

• Access — know what data we hold about you
• Correction — update incomplete, inaccurate, or outdated data
• Anonymization or deletion — request that unnecessary data be erased
• Portability — receive your data in a structured format
• Withdrawal of consent — revoke your consent at any time, without affecting prior processing
• Information on sharing — know with whom we share your data
• Objection — object to processing carried out on the basis of legitimate interest

8. Cookies

We use essential cookies for the operation of the site, and analytics cookies (via Google Analytics and Google Tag Manager) to understand how visitors interact with our content. By continuing to browse the site, you agree to the use of cookies as described in this policy.

9. Data security

We adopt appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration, or improper disclosure, including encrypted communications (HTTPS) and restricted access controls. In the event of a security incident that could affect your rights, we will notify you and Brazil's National Data Protection Authority (ANPD) within the legally required timeframes.

10. Changes to this policy

This policy may be updated periodically. When it is, the "last updated" date at the top of this page will be revised. The latest version will always be available at opivoty.com/en/privacy-policy.

11. Contact and Data Protection Officer (DPO)

For questions related to this policy or the exercise of your rights:

• Email: privacy@opivoty.com
• Website: opivoty.com
• National Data Protection Authority (ANPD): www.gov.br/anpd