Privacy Policy
This Policy explains, transparently, what data Getsimplan collects, how we use it, who we share it with, and what your rights are — in line with Brazil's General Data Protection Law (Law No. 13,709/2018 — LGPD).
1.Who is the data controller
Getsimplan is operated by AM Inteligência e Planejamento Ltda., registered under CNPJ No. 66.242.586/0001-09, headquartered in Curitiba/PR, Brazil ("we"). For anything related to privacy and data protection, contact our Data Protection Officer (DPO) at support@getsimplan.com.
2.What data we collect
- Account data: email and password (your password is stored encrypted — hashed — by our authentication provider; we do not have access to your password in plain text).
- Schedule files you upload (.mpp, .xer, .xml and equivalent formats): used only to generate your dashboard — see the special handling in item 4.
- Generated dashboards: the result (S-Curve, Gantt, Critical Path, DCMA diagnostics) that you choose to save to your account.
- Technical and usage data: minimal operational and security data, such as IP address, access logs and session information, needed to keep the service running and protected.
3.How we use your data (purposes)
- Create and authenticate your account;
- Process your schedule and generate/store your dashboards;
- Operate, maintain, protect and improve the service;
- Send important notices, support and product updates;
- Comply with legal and regulatory obligations.
4.Special handling of the uploaded file
🗑️ Your schedule does not stay with us. When you upload a file, it is temporarily processed on the server only to generate the dashboard and is then deleted immediately after the dashboard is generated. We do not store the original file. Only the resulting dashboard — if you choose to save it — is kept in your account, isolated and accessible only by you.
Transparency (and why we don't promise more than this): to generate the dashboard, the server must, during processing, read the file's content. That's why we do not claim that not even our team can ever access the data — that level would require end-to-end (zero-knowledge) encryption, which is incompatible with server-side processing. What we guarantee is the immediate disposal of the file, isolation per account, and encryption in transit and at rest.
5.Legal bases (LGPD, art. 7 and 11)
- Performance of a contract — to provide the service you request (generate and save dashboards);
- Consent — when you join the waitlist or authorize communications;
- Legitimate interest — for security, fraud prevention and service improvement, always respecting your rights;
- Compliance with a legal obligation — when required by law.
6.Sharing and processors
We do not sell your data. We share data only with service providers (processors) strictly necessary to operate the platform, who process the data on our behalf and under confidentiality and security obligations:
| Processor | Purpose |
|---|---|
| Supabase | Account authentication and database for the dashboards |
| Cloudflare | Site delivery (CDN), DNS and protection |
| Hostinger | Hosting of the server that processes the schedules |
We may also share data to comply with a court order or legal obligation.
7.International transfer
Some processors may process data on servers located outside Brazil. In such cases, we adopt the safeguards provided by the LGPD to ensure an adequate level of protection. By using the service, you are aware of this possibility.
8.How long we keep it
- Uploaded file: not retained — discarded right after processing.
- Saved dashboards: while your account exists or until you delete them.
- Account data: while the account is active and for the applicable legal periods after closure.
- Technical and security data (logs, IP, session): kept for a limited and proportionate period (generally up to 12 months) for security and legal-compliance purposes, then discarded or anonymized.
9.Information security
We adopt technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, per-account access control (each user only sees their own data on the platform) and immediate disposal of uploaded files. Regarding our team's operational access for processing and support, see item 4. No system is 100% immune, but we work continuously to reduce risks.
10.Your rights (LGPD, art. 18)
At any time, you may request to:
- Confirm the existence of processing and access your data;
- Correct incomplete, inaccurate or outdated data;
- Anonymize, block or delete unnecessary data or data processed in non-compliance;
- Port your data and get information about who we share it with;
- Withdraw consent and delete your account.
To exercise any right, write to support@getsimplan.com. We will respond as soon as possible.
11.Cookies
We use only essential cookies and local storage for functionality (for example, keeping you signed in during your session). We do not use advertising cookies.
12.Minors
The service is intended for people aged 18 or older and is not directed at children or adolescents.
13.Changes to this Policy
We may update this Policy to reflect improvements or legal changes. The current version will always be on this page, with the update date at the top.
14.Contact
Questions about privacy and data protection: support@getsimplan.com.