Privacy Policy

1. Who we are

Operent is a financial operations platform for rental operations, starting with short-term rentals.

Controller for our own purposes: Operent Tecnologia Ltda. CNPJ: 65.250.603/0001-97 Vitória, Espírito Santo, Brazil Privacy and data protection channel: [email protected]

When customers use Operent to process personal data of guests, owners, operators, suppliers, internal team members, or other third parties, the customer is generally the controller and Operent acts as a processor, according to the applicable Terms of Service and Data Processing Agreement.

2. Personal data we collect

We may collect personal data such as name, email address, phone number, company or business name, country, type of operation, number of properties, role or job title, language and time zone preferences, early-access or contact form information, and information you provide about financial or operational workflows.

When you use the platform, we may also process account data, authentication data, login identifiers, technical logs, IP address, browser, device, operating system, usage events, audit trails, support messages, settings, and data entered by customers into the platform.

If third-party authentication is enabled and you choose to use it, we may receive account identification data from that provider, such as email address, provider user ID, display name, and profile picture URL when provided.

We do not intentionally request sensitive personal data through our website or early-access forms. Users and customers should not submit sensitive personal data unless strictly necessary and authorised under applicable law.

3. How we collect personal data

We collect personal data directly from you, through website and early-access forms, during account creation and platform use, through support or commercial communications, through technical logs, cookies, local storage, and necessary service providers.

4. How we use personal data

We use personal data to respond to early-access requests, contact potential users, customers, partners, or investors, evaluate product fit, create and manage accounts, authenticate users, operate and improve the platform, validate workflows with early users, provide support, send operational communications, maintain security, prevent misuse or fraud, comply with legal obligations, and exercise or defend legal rights.

5. Legal bases for processing

Depending on the context, we process personal data based on consent, performance of a contract or pre-contractual steps, legitimate interests in developing, operating, improving, and securing Operent, compliance with legal or regulatory obligations, and the regular exercise of rights.

6. Sharing personal data

We may share personal data with trusted service providers and subprocessors that help us operate the website, forms, authentication, database, hosting, email, deployment, DNS, security, support, analytics when applicable, and product infrastructure.

A list of current subprocessors and infrastructure providers is available on our Subprocessors page.

We do not sell personal data. We may also share information if required by law, regulation, legal process, public authority, or to protect Operent, users, customers, or third parties.

7. International transfers

Operent may use technology providers located outside Brazil or operating global infrastructure. This may involve international transfers of personal data.

When this happens, we aim to use appropriate contractual, technical, and organisational safeguards in accordance with applicable data protection laws, including the LGPD.

8. Data retention

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Early-access and contact data may be retained while we evaluate product fit, communicate with you, maintain business records, or comply with legal, security, or operational obligations.

9. Your rights

Depending on your location and applicable law, you may have the right to confirm whether we process your personal data, access your personal data, correct incomplete, inaccurate, or outdated data, request anonymisation, blocking, or deletion of unnecessary or excessive data, request portability when applicable, withdraw consent, object to certain processing activities, request information about data sharing, and request review of decisions made solely by automated processing when applicable.

To exercise your rights, contact us at [email protected].

10. Cookies and local storage

Our website and platform may use cookies, local storage, and similar technologies to operate the service, maintain authenticated sessions, remember functional preferences, protect access, and improve the user experience.

As of this version, Operent does not identify advertising cookies, behavioural remarketing, marketing pixels, or third-party advertising analytics enabled by default in the platform.

You can manage cookies through your browser settings. Blocking essential cookies or local storage may prevent login, session maintenance, or proper platform functionality.

11. Security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

However, no system is completely secure, and we cannot guarantee absolute security.

12. Children and minors

Operent is not directed to children or minors. We do not knowingly collect personal data directly from children through our website or early-access forms.

13. Updates to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new “Last updated” date.

14. Contact

If you have questions about this Privacy Policy or how Operent handles personal data, contact us at:

[email protected]