This agreement is part of the Terms of service and governs the processing that La Guayaba LLC ("processor") performs on behalf of the customer ("controller") on the personal data of subscribers, leads and contacts the customer uploads to UltraGIS.
1. Subject matter and scope
- Data subjects: subscribers, prospects (leads), customer contacts and the customer's field staff.
- Data: name, ID document, phone, email, service address and location, plan, power levels and connection status, report photos and signatures.
- Purpose: providing UltraGIS (feasibility, installation, operation and support of the network) according to the customer's instructions.
- Duration: the subscription term plus the 60 read-only days before the purge.
2. Controller's instructions
We process data only according to the customer's documented instructions, which are these terms, its company settings and its written requests. If an instruction seems unlawful to us, we will say so. The customer warrants that it obtained the data subjects' authorizations (Law 1581, LGPD, LFPDPPP).
3. Confidentiality
Only La Guayaba staff who need it to provide the service have access, under confidentiality commitments. Support sessions inside a company require the customer's authorization, are read-only unless expressly approved and are audited.
4. Security measures
Envelope encryption of PII with keys in a KMS, per-company isolation with Row Level Security, role-based masking, an immutable hash-chained audit log, encrypted backups and restore tests. The summary is in Security.
5. Subprocessors
The customer authorizes the published subprocessors. We will notify by email at least 30 days before adding or replacing one; the customer may object on reasonable grounds and, if no solution is found, cancel without penalty. Each subprocessor is bound by measures equivalent to this agreement.
6. Data subject rights
If a data subject writes to us directly, we forward the request to the customer without answering it ourselves. The app provides tools to view, correct, export and delete subscriber data; if more help is needed, we provide it without delay.
7. Security incidents
We will notify the customer of any incident affecting its personal data without undue delay and no later than 48 hours after we confirm it, with the information available so it can meet its notices to the authority and data subjects.
8. Return and deletion
When the service ends, the customer can export all its data for 60 days. Afterwards, following three warning emails, we delete it from the database and storage; backup copies are removed when their retention cycle ends (12 months at most).
9. Audits
We make available to the customer the information needed to demonstrate compliance with this agreement. On-site audits are agreed with 30 days' notice, once a year and at the customer's cost, unless there is an incident.
10. Transfers and governing law
International transfers are made with the safeguards in the Privacy policy. This agreement is governed by the same law and jurisdiction as the Terms: Governing law and Jurisdiction and competent venue. Contact: privacy@ultragis.io.