Privacy Policy

1. Who we are and to whom this policy applies

The Advocacy Platform. Website is developed and operated by EngCompSolutions (CNPJ 08.326.960/0001-58), the entity responsible for the application published in application stores. This policy applies to the law website. website and platform app.

EngCompSolutions is the controller of the data collected on the institutional website, in the registration and operation of the platform. The data that each client office inserts on its own customers and processes are the responsibility of the respective office, which acts as controller of this data.

2. Data we collect

We collect only the data necessary to operate the service:

• Contact and registration: name, email and telephone informed on forms and registration;
• Account and authentication: access credentials (password stored only as hash), session tokens and two-step verification codes;
• Recovery: contracted plan and payment data processed by the payment processor (we do not store the full card number);
• Use and device: screens and pages accessed, device type, operating system, IP address and access records (logs);
• Press notifications: the device's registration identifier (token), when you authorize receipt of notifications;
• Cookies and similar technologies as described in the Cookie Policy.

3. How we use the data

• Provide, operate and improve the platform and application;
• Authenticate access and protect your account;
• Process payments and issue collections;
• Send service-related communications and notifications (including push);
• Prevent fraud and abuse and ensure security;
• Fulfill legal and regulatory obligations.

4. Data Sharing

We do not sell personal data and do not share it for third party advertising. We share data only with operators necessary for the provision of the service, always under contract and with adequate safeguards, in the following categories:

• Payment processor (for collection of plans);
• E-mailing provider (for transactional messages);
• Press notifications provider (to deliver notifications to the device);
• Cloud infrastructure and hosting providers;
• Integrations with courts and public services, when you choose to use them;
• Public authorities, when required by law or court order.

5. Press notifications

With your permission, the application can send notifications (e.g. alerts of deadlines and drives). You can disable notifications at any time in the device or application settings.

• To exercise your rights, write to contact@advocacia. website.

6. Security

We have adopted technical and organizational measures to protect data, including transit encryption (TLS) and sensitive data at rest, two-step authentication, access control and encrypted backups.

7. Data retention

We keep the personal data while your account is active and for the time necessary for the purposes described in this policy. Once the relationship is closed, the data is deleted or anonymized, except for those which the law requires to retain (e.g. tax records of payments), which are maintained only by the legal deadline and then eliminated.

8. Exclusion of account and data

You can request the deletion of your account and personal data associated at any time, by three ways: (a) by the option "Delete my account" within the application or panel; (b) by the public exclusion request page, in law. website/data exclusion, no login required; or (c) writing to our Officer (DPO) in lgpd@advocacia. website.

After confirmation, the account enters a 30-day grace period, during which the request can be undone; at the end, the data are anonymous or deleted. When the request comes from a client of a platform user office, we forward the request to the responsible office (controller of this data) under the terms of LGPD.

Unsubscribe does not automatically delete your data — deletion needs to be requested. Some data may be retained only for the period required by legal obligation (e.g. tax records) and, after that, will be deleted.

9. Your rights (LGPD)

You can request confirmation of treatment, access, correction, anonymization, portability and deletion of your data, as well as withdraw consents.

• To exercise your rights, talk to our Officer (DPO) at lgpd@advocacia. website.

10. Children

The platform is intended for professionals and is not aimed at children under 18. We did not intentionally collect data from children or adolescents.

11. Changes to this policy

We can update this policy periodically. Relevant changes will be communicated by the service channels, and the latest update date at the top of this page reflects the latest revision.

12. Contact and Charged (DPO)

Responsible for the Processing of Personal Data (DPO): lgpd@advocacia. website. For other privacy matters: contact@advocacia. website. Controller: EngComp Solutions, CNPJ 08.326.960/0001-58.