Privacy Policy

We, at Dotted, value the privacy of our clients and users. This Privacy Policy adheres to Law No. 13.709/2018 – General Data Protection Law, and other applicable laws –, reaffirming our commitment to protecting your privacy and personal data. We describe how we collect, process, and protect your information.

By using our Services, you agree to the practices outlined in this Notice, which incorporates the Cookie Policy. Please read it carefully to understand how we collect, use, and share your data.

Before addressing specific terms, we would like to share information about our mode of operation.

Dotted is a platform that reduces our clients' cloud costs (AWS) by buying and selling AWS discount instruments (Saving Plans and Reserved Instances) and using the concept of collective purchasing where the total consumption of our clients offers lower rates for everyone in the group. You can find more details at https://help.usedotted.com/general-faq.

  1. DATA COLLECTED, COLLECTION METHODS, AND PURPOSE

    1. What data we collect

      • Personal identification information: Name, phone number, and email address.

      • Data related to Service access, such as organization name, login credentials, and feedback related to the Service.

      • Usage statistics of Amazon Web Services (Server Usage) and the amount spent to access such services.

      • During registration, we may request financial documents solely for credit analysis. They will be used exclusively for this purpose and will not be shared without your consent, except as required by law. By agreeing to this notice, you expressly authorize the use of your financial documents for this purpose.

      • We use cookies and similar technologies on our website to record information about usage, including:

        • Browser and device data: IP address, device type, operating system, browser type, screen resolution, name and version of the operating system, device manufacturer and model, language, plugins, and addons.

        • Usage data: Time spent on the site, pages visited, links clicked, language preferences, and sources that directed you to our site.

      • We may also collect information about your online activities on other sites and devices over time, using Google Analytics for analysis, technical diagnosis, and improvement of our website. Failure to provide the necessary information may result in the inability to subscribe to our product.

    2. How we use the data we collect

      • Maintaining customer account records for the administration of our business.

      • Importing and displaying infrastructure information using infrastructure provider access credentials.

      • Record keeping related to our clients for effective business administration.

      • Customer relationship management, communication, and updates about new features and services offered.

      • Handling complaints and resolving disputes to address customer concerns.

      • Ensuring compliance with Dotted policies, service security, and monitoring compliance with Terms of Use.

      • Detecting and preventing fraud to protect Dotted and its users against fraudulent activities.

      • Conducting analysis to identify potential improvements in services and measure engagement in advertising campaigns.

      • In addition to these purposes, we process personal data when required by law, such as maintaining accounting records.

  2. SHARING

    We ensure that your information will only be shared in certain circumstances, as explained below:

    • Internally: Among our employees, for efficient service provision and identification of data subject needs.

    • Service providers: With service provider companies (cloud storage, database, email, marketing, payment gateways) to improve our business operations.

    • Other companies, organizations, or third parties external to Dotted, with your consent: We will always request permission to share sensitive information.

    • For legal reasons: In legal cases, such as to comply with legislation, court orders, respond to legal proceedings, ensure national security, protect legitimate interests and property, or deal with fraud and security issues.

    In all situations, the recipients of the information must use the data consistently with the purposes for which they were collected, as established in this Privacy Policy in accordance with applicable privacy laws.

    We commit not to sell, rent, or transfer your information to third parties without your consent.

  3. DATA STORAGE AND DELETION

    Your personal data will be kept for the time necessary to fulfill the purposes for which they were collected. Once these purposes are achieved, the data may be deleted.

    You have the right to request the deletion of your data, except in cases where maintenance is necessary to fulfill legal or regulatory obligations, as well as for exercising rights in judicial, extrajudicial, or administrative proceedings. We are committed to ensuring that your data is managed in accordance with applicable laws and that you can exercise your privacy rights.

  4. THIRD-PARTY LINKS

    Our website may include links to third-party websites whose privacy practices may differ from ours. Therefore, when you access our site, you may be redirected to some of our pages on social networks:

  5. PRIVACY POLICY When using third-party sites, their policies apply, not ours. We recommend reviewing the privacy policy of each site visited. If you choose to use third-party products and services alongside ours, we will consider it as your consent to their terms.

  6. SECURITY MEASURES We take utmost care of your data security, following best practices and legal standards. We adopt precautions such as protection against unauthorized access, strict access control, commitment to confidentiality by employees and partners, as well as access restrictions. Although we do our best to preserve privacy, it is important to note that no transmission of information is entirely secure. In case of incidents, we strive to fully remedy the consequences.

  7. YOUR RIGHTS We are committed to complying with the standards set forth in the General Data Protection Law (LGPD), respecting the principles and rights of data subjects, especially the principles of lawfulness, loyalty, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality. Additionally, the following rights are guaranteed to data subjects under the LGPD:

    • Right to confirmation and access: the data subject's right to obtain from Dotted confirmation as to whether personal data concerning them are being processed and, if so, the right to access their personal data upon request through the website or email contact@usedotted.com.

    • Right to rectification: the data subject's right to obtain from Dotted, without undue delay, the rectification of inaccurate personal data concerning them.

    • Right to erasure of data: the data subject's right to have their data erased from Dotted's systems provided that this request is supported by the LGPD, or there is no legal reason justifying its maintenance, even if anonymized.

    • Right to data blocking: the data subject's right to have the use of their unnecessary, excessive, or improperly processed personal data blocked by Dotted.

    • Right to anonymization or data blocking: the data subject's right to have their personal data directly or indirectly dissociated from them, using reasonable and available technical means at the time of processing.

    • Right to limit data processing: the data subject's right to limit the processing of their personal data, which can be obtained when challenging the accuracy of the data, when the processing is unlawful, when Dotted no longer needs the data for the proposed purposes, and when they have objected to the data processing and in the case of unnecessary data processing.

    • Right not to be subject to automated decisions: the data subject's right not to be subject to any decision based solely on automated processing, including profiling, that produces legal effects concerning them or significantly affects them in a similar manner. The data subject will be informed in case of rectification or deletion of their data.

    These rights are guaranteed and may be exercised as provided for in the LGPD, exclusively by the data subject or their legal representative, if applicable, by email to be sent to contact@usedotted.com with the following information:

    • Full name of the data subject.

    • ID or CPF number of the data subject.

    • Legal representative status, if applicable.

    • Description of the request.

    • Other information or attachment of documents for request fulfillment.

    Out team will be ready to handle any requests!

  8. PRIVACY NOTICE CHANGES When we decide to change how we treat the collected data, we will update this Privacy Notice. We reserve the right to make changes, maintaining compliance with the law. We ensure transparency by disclosing relevant changes on our website. We recommend accessing this Notice regularly to stay informed. If there are changes that require your consent, we will ask for your approval. By continuing to use our services after a change, you agree to the new conditions, but you can express disagreement through our customer service channels if necessary.

  9. LEGAL ADHERENCE This Policy was developed to comply with and in accordance with Federal Law No. 13.709/2018 (General Data Protection Law), Federal Law No. 12.965/2014 (Internet Civil Rights Framework), and Federal Law No. 8.078/1990 (Consumer Protection Code), without prejudice to compliance with other applicable laws to Dotted.

  10. CONTACT

For more information about this Privacy Notice, Users can contact the Data Protection Officer (DPO) of Dotted at the email address: contact@usedotted.com.

Effective from: February 2024.

Atualizado