Privacy Policy

This Privacy Policy describes how Wattiq Tecnologia Ltda. (“Wattiq”, “we”) collects, uses, stores and protects your personal data when you access or use our management platform for the solar energy industry.

This policy applies to all users, visitors, installers, EPC contractors and consultants who interact with our services, whether through the web platform, the app or our APIs.

Brazilian General Data Protection Law (LGPD) — Law No. 13,709/2018. By using Wattiq’s services, you confirm that you have read and understood this policy, in full compliance with Brazilian data protection legislation.

If you have questions about this policy, contact our Data Protection Officer (DPO) at privacidade@wattiq.com.br.

We collect different categories of data depending on your account type and the features you use:

* Financial data is processed by PCI-DSS certified providers. Wattiq does not store full credit card numbers.

We use your personal data strictly for the purposes described below:

• Service delivery

  To provide every contracted feature: CRM, quoting, proposals, sizing and financing.

• Transactional communications

  Account confirmations, security alerts, due-date notifications and automated reports.

• Security and fraud prevention

  Monitoring of suspicious access, anomaly detection and protection of your account.

• Product improvement

  Aggregated, anonymized usage analysis to improve features and the user experience.

• Legal and regulatory obligations

  Compliance with the tax, accounting and regulatory requirements that apply to our business.

• Marketing (with consent)

  With your express authorization: news, educational content and personalized offers.

All data processing by Wattiq is grounded in the legal bases expressly set out in article 7 of Law No. 13,709/2018:

• Art. 7, V

  Performance of a Contract

  Processing required to perform the service agreement to which you are a party.

• Art. 7, II

  Compliance with a Legal Obligation

  When required by tax or labor legislation, or by regulation applicable to the industry.

• Art. 7, IX

  Legitimate Interest

  For product improvement, platform security and relationship communications.

• Art. 7, I

  Consent

  For marketing communications and other purposes for which you gave express authorization.

We share your personal data only in the following contexts and with the appropriate contractual safeguards:

• Infrastructure Providers: Cloud computing, storage and data processing services (AWS, Google Cloud).
• Payment Processors: PCI-DSS certified intermediaries for the secure processing of financial transactions.
• Analytics Tools: Anonymized usage analytics platforms for product improvement, always with aggregated data.
• Legal Authorities: When required by a judicial or administrative decision or by a competent authority (e.g. the Brazilian Federal Revenue Service, the ANPD).
• With Your Consent: Integrations with third-party systems that you expressly authorize in your account settings.

We do not sell, rent or trade your personal data. Every supplier we work with is bound by data protection clauses equivalent to or stricter than those required by the LGPD.

We apply robust technical and organizational measures to protect your data against unauthorized access, loss, alteration or disclosure:

• Encryption in transit

  TLS 1.3 across all communications.

• Encryption at rest

  AES-256 on stored data.

• Access control

  RBAC with least-privilege principle.

• Regular audits

  Penetration testing and code reviews.

• Incident response

  Formal plan with notification within 72h.

• Continuous monitoring

  SIEM and anomaly detection 24/7.

In the event of a security incident that poses a relevant risk to data subjects, we will notify the ANPD and the affected users within the deadlines set by the LGPD.

Under article 18 of Law No. 13,709/2018, you have the following rights regarding your personal data:

1. 01Confirmation and Access: Confirm whether we process your data and access a complete copy of it.
2. 02Correction: Request the correction of incomplete, inaccurate or outdated data.
3. 03Anonymization or Blocking: Request the anonymization, blocking or deletion of unnecessary or excessive data.
4. 04Portability: Receive your data in a structured, interoperable format.
5. 05Erasure: Request the deletion of data processed on the basis of your consent. See the dedicated page.
6. 06Information on Sharing: Know which public and private entities we share your data with.
7. 07Withdrawal of Consent: Withdraw your consent at any time, without prejudice to prior processing.
8. 08Objection: Object to processing that is not carried out in compliance with the LGPD.

To exercise any of the rights above, go to our Data Deletion page or send an e-mail to privacidade@wattiq.com.br. We respond within 15 business days.

We use cookies and similar technologies to keep the platform working properly, analyze usage and personalize your experience:

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or new product features.

In the event of material changes that affect your rights, we will notify you at least 30 days in advance by e-mail and/or through a prominent notice on the platform. The “last updated” date at the top of this page indicates the most recent version.

Continued use of the platform after the changes take effect implies acceptance of the new policy. If you do not agree with the updated terms, you may close your account and request the deletion of your data.

For matters related to privacy, the processing of your data or the exercise of your rights, get in touch:

DPO e-mail

privacidade@wattiq.com.br

We respond within 15 business days

Address

Wattiq Tecnologia Ltda.

Brazil

Brazilian National Data Protection Authority (ANPD) — You may also file a complaint directly with the ANPD if you believe your rights have not been properly addressed. Visit www.gov.br/anpd.