PRIVACY POLICY

1. Introduction

ENVECON, LDA, having its registered office at Alameda fonte velha 22 quinta da beloura Sintra 2710-694, Lisbon, Portugal ("Envecon", "Company", "we", "our", or "us") is committed to protecting the privacy and personal information of users accessing or using the Centraa Cloud Platform ("Platform"). This Privacy Policy explains how Envecon collects, uses, stores, processes, discloses, and protects Personal Data and other information obtained through the Platform.

This Privacy Policy forms an integral part of the Terms of Service governing the use of the Platform. By accessing or using the Platform, the User acknowledges that they have read, understood, and agreed to this Privacy Policy.

2. Scope

This Privacy Policy applies to:

• the Centraa Cloud Platform;
• associated web portals and mobile applications;
• APIs and system integrations;
• AI-enabled functionalities;
• support services; and
• all related products and services provided by Envecon.

3. Information We Collect

Depending upon the nature of the Services, Envecon may collect the following categories of information:

4. Purpose of Processing

Envecon processes information for the following purposes:

• providing access to the Platform;
• user authentication and authorization;
• delivering ERP and cloud-based services;
• providing AI-enabled functionalities;
• maintaining system security;
• monitoring system performance;
• troubleshooting technical issues;
• responding to customer support requests;
• performing analytics and reporting;
• improving products and services;
• preventing fraud and unauthorized access;
• complying with legal and regulatory obligations;
• protecting the rights and legitimate interests of Envecon and its Users.

5. Lawful Basis of Processing

Where applicable, Envecon processes information on the basis of:

• User consent;
• performance of contractual obligations;
• compliance with legal obligations;
• legitimate business interests; and
• other lawful grounds permitted under applicable laws.

6. Data Storage

Information collected through the Platform may be stored on secure cloud infrastructure, databases (including MySQL or equivalent systems), backup systems, and disaster recovery environments managed either by Envecon or authorized service providers.

7. Data Security

Envecon implements commercially reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, misuse, destruction, or loss.

However, no electronic system, software application, cloud environment, or method of transmission over the Internet can be guaranteed to be completely secure. Accordingly, Envecon does not warrant absolute security of any information transmitted to or stored on the Platform.

8. Data Sharing and Disclosure

Envecon may disclose information to:

• affiliated entities;
• cloud hosting providers and infrastructure providers;
• AI service providers;
• technology vendors and integration partners;
• professional advisers and auditors;
• regulatory authorities and law enforcement agencies; or
• other entities where disclosure is required by applicable law or legal process.

Envecon does not sell Personal Data.

9. AI Features

The Platform may include artificial intelligence and automated processing capabilities. AI-generated outputs are based on information, configurations, and instructions provided by Users.

Envecon does not warrant that AI-generated outputs will be complete, accurate, error-free, or suitable for any regulatory, operational, legal, or commercial purpose. Users remain solely responsible for independently reviewing and validating all AI-generated outputs before relying upon them.

10. User Responsibilities

Users are responsible for ensuring that:

• information uploaded to the Platform is lawful and accurate;
• they possess all necessary rights and permissions to upload such information;
• confidential information is uploaded only where authorized;
• they maintain the confidentiality of login credentials; and
• they immediately notify Envecon of any suspected unauthorized access.

11. Data Retention

Envecon retains information only for as long as necessary to:

• provide the Services;
• comply with applicable legal and regulatory requirements;
• resolve disputes;
• enforce contractual rights;
• conduct audits;
• maintain security records; and
• preserve evidentiary records.

Following expiry of applicable retention periods, information may be securely deleted, anonymized, or archived in accordance with applicable law.

12. User Rights

Subject to applicable laws, Users may have the right to:

• request access to their Personal Data;
• request correction of inaccurate information;
• request deletion of Personal Data where legally permissible;
• withdraw consent where processing is based upon consent;
• object to certain processing activities; and
• submit complaints regarding privacy activities.

Requests may be made using the contact details provided below.

13. Cookies and Analytics

The Platform may use cookies, session identifiers, analytics tools, and similar technologies to authenticate Users, maintain user sessions, improve functionality, monitor usage, enhance security, and generate analytics.

Users may manage certain cookie preferences through their browser settings; however, disabling cookies may affect Platform functionality.

14. Third-Party Services

The Platform may integrate with third-party services, APIs, software, cloud infrastructure providers, analytics providers, or AI providers. Envecon is not responsible for the privacy practices or policies of such third parties. Users are encouraged to review the applicable privacy policies of those third-party providers.

15. Cross-Border Data Transfers

Where required for service delivery, system operations, disaster recovery, support, or cloud hosting, information may be processed or transferred to jurisdictions outside the User's location, subject to appropriate safeguards and applicable legal requirements.

16. Children's Privacy

The Platform is intended solely for business and enterprise use and is not directed toward children. Envecon does not knowingly collect Personal Data from children in violation of applicable laws. If such information is identified, Envecon will take reasonable steps to delete it.

17. Changes to this Privacy Policy

Envecon reserves the right to modify or update this Privacy Policy at any time. The updated version shall become effective upon publication on the Platform unless otherwise specified. Continued use of the Platform following publication constitutes acceptance of the revised Privacy Policy.