Privacy Policy
This Privacy Policy explains how Innoveel Software Estatistico LTDA, São Paulo, Brazil ("Innoveel", "we") processes personal data when you use EiS — Evolution in Sight™ ("EiS", the "Service"), our Microsoft Excel add-in and website. We are the data controller for this processing under the Brazilian General Data Protection Law (LGPD, Law 13.709/2018). Contact: support [at] innoveel.com.
1. Data we collect
- Account data — name and email address, collected through our sign-in provider when you create an account.
- Billing data — country, billing address, whether you subscribe as an individual or a company, company name and tax identifiers where applicable (CPF/CNPJ, VAT, EIN or similar). Card details are collected and stored by our payment processor, Stripe; we never see full card numbers.
- Data you submit for analysis — the spreadsheet ranges you select and send to our servers. This data may contain personal data depending on what your spreadsheet contains; you are responsible for having the right to submit it.
- Usage data — counts and sizes of the analyses you run, used to enforce plan limits and for billing.
- Consent records — when you accept our Terms of Service and Privacy Policy, we record the accepted version and the time of acceptance (at sign-up, through our sign-in provider; at a plan upgrade, on your billing record).
- Technical data — logs and error reports (including IP address and add-in version) used to keep the Service secure and working.
2. Why we process it
- To provide the Service (performance of contract) — running the analyses you request, managing your account, plan limits and payments.
- To comply with legal obligations — issuing fiscal documents (nota fiscal) and keeping tax and accounting records required by Brazilian law.
- Legitimate interest — securing the Service, preventing abuse, and diagnosing errors.
- Consent — where required; you may revoke it at any time.
We process the data you submit for analysis only to provide the analysis you request. We do not use it to train models for other customers, we do not use it for advertising, and we do not sell personal data.
3. Sharing and processors
We share personal data only with service providers who process it on our behalf, and where the law requires it:
- Amazon Web Services — cloud hosting (United States).
- Stripe — payment processing.
- Clerk — account sign-in and authentication.
- Error-monitoring provider — crash and error reports for diagnosing problems.
- Large-language-model provider (currently Google's Gemini) — when you use the Explain or Forecast features, the analysis context needed to generate the explanation or forecast is sent to the LLM service, solely to fulfil that request. Plans that support a customer-configured LLM backend send it to the backend you designate instead.
- Fiscal-document provider and tax authorities — billing details required to issue Brazilian fiscal documents.
4. International transfers
Our servers are hosted in the United States (AWS). Where personal data is transferred internationally, we rely on the transfer mechanisms provided for in art. 33 of the LGPD and on our providers' safeguards and certifications.
5. Retention
- Account and billing data are kept while your account exists and afterwards for as long as Brazilian tax, accounting and consumer law require.
- Data submitted for analysis is kept only as long as necessary to provide the Service, including returning and troubleshooting your results.
- Technical logs and error reports are kept for a limited period and then deleted.
6. Your rights
Under the LGPD (art. 18) you may request confirmation of processing, access, correction, anonymisation or deletion of your personal data, portability, information about sharing, and you may revoke consent. Write to support [at] innoveel.com and we will respond within the legal timeframe. You may also lodge a complaint with the Brazilian data protection authority (ANPD). We honour these rights for every user, wherever you are located.
7. Security
Data is encrypted in transit, access is restricted to what operating the Service requires, and our infrastructure is protected by network isolation and access controls. No system is perfectly secure; if a breach affecting your personal data occurs, we will notify you and the authorities as required by law.
8. Cookies and local storage
The add-in and website use only the cookies and browser storage needed to keep you signed in and remember your session (for example your authentication token and current plan). We do not use advertising or cross-site tracking cookies.
9. Children
The Service is not directed at persons under 18 and we do not knowingly collect their data.
10. Changes to this policy
We may update this policy from time to time. For material changes we will notify you (for example by email or in the add-in) before they take effect. The current version is always available at this address.