Privacy Policy

A SpeakSafely ("we", "our") takes your privacy seriously. This Privacy Policy describes how we collect, use, store, and protect your personal data in accordance with Brazil’s General Data Protection Law (LGPD) — Law 13.709/2018.

This English version is a convenience translation. For Brazilian legal and compliance purposes, the Portuguese text is the reference version.

1. Who we are

SpeakSafely is a whistleblowing and corporate ethics-hotline platform operated by a company based in Porto Alegre, Rio Grande do Sul, Brazil. For privacy questions, contact us via WhatsApp.

2. Data we collect

We collect personal data in the following situations:

• Website visitors: browsing data (cookies, IP address, pages visited) via Google Analytics and Google Tag Manager for statistics.
• Leads and contacts: name, email, phone, and company when you request a demo or contact us.
• Platform customers: access data (email, name), product-usage data, and billing data.
• Reporters (via the platform): only the data the reporter chooses to provide. When the reporter chooses anonymity, no identifying data is collected.

3. How we use your data

• Provide the contracted services
• Communicate product updates and usage tips
• Improve the platform using aggregated usage data
• Meet legal obligations

4. Legal basis

SpeakSafely’s processing of personal data is based on: (a) performance of a contract; (b) legal obligation; (c) legitimate interest; (d) consent, when applicable.

5. Data sharing

SpeakSafely does not sell personal data. We share data only with: (a) essential service providers (cloud infrastructure, payments) under confidentiality agreements; (b) public authorities when required by law.

6. Your rights (LGPD)

You have the following rights over your personal data:

• Access to the data we hold about you
• Correction of inaccurate data
• Data portability
• Deletion of your data
• Withdrawal of consent
• Information about sharing

To exercise your rights, contact us on WhatsApp.

7. Cookies

We use analytics cookies (Google Analytics) and marketing cookies (Google Tag Manager). You can disable cookies in your browser settings.

8. Security

We implement technical and organizational measures to protect your data, including encryption in transit (TLS), role-based access control, and continuous security monitoring.

9. Data retention

We keep personal data for as long as needed to provide the services or meet legal obligations. After a contract ends, data is deleted within 90 days, unless the law requires retention.

10. Changes to this policy

This policy may be updated periodically. The latest version is always available at speaksafely.com/en/privacy.