Privacy Policy

1. Who we are

Vorix7 is an operational intelligence platform developed and operated by GM7 Trade & Marketing Ltda, headquartered in Campinas, SP, Brazil. We offer two integrated modules: Video Analytics, for physical audience analysis, and Datasign, a cloud-based Business Intelligence platform.

2. Data we collect

2.1. Customer and platform user data

When contracting our services or creating a Datasign account, we collect: full name, corporate email, company, job title, phone number, and billing information required for service delivery.

2.2. Data processed by Video Analytics

The Video Analytics module processes images from cameras installed at the customer's physical environment. All processing happens on the device installed on site — what we call edge processing — in the following flow: the image is captured, analyzed in memory, converted into statistical metadata, and immediately discarded.

No video frame, image, or biometric data is recorded, stored, or transmitted to the cloud. Only aggregated metadata is sent: people count, dwell time, estimated age range, predominant expression, and attention indicators. No individual is identified, and the system performs neither facial recognition nor matching against image databases.

2.3. Website browsing data

When accessing vorix7.com, we automatically collect: a truncated IP address converted into an irreversible hash — the original address is never stored — browser and device type, language, pages visited, traffic source, and approximate location derived from the IP (country, state, and city). This data is used for security, abuse prevention, and service improvement.

2.4. Contact forms

When filling out the "Schedule a Demo" form, we collect name, email, and company for commercial contact purposes.

3. How we use your data

We use collected data to: deliver and improve our services, process payments and contracts, send service-related communications, respond to support requests, generate aggregated analytical reports for clients, and comply with legal obligations. We do not sell, rent, or share personal data with third parties for advertising purposes.

4. Legal basis (LGPD/GDPR)

Vorix7's data processing is based on the following legal grounds under Brazil's General Data Protection Law (LGPD — Law No. 13,709/2018) and the EU General Data Protection Regulation (GDPR): contract performance, legitimate interest, legal obligation, and where applicable, data subject consent.

5. Video Analytics and privacy by design

Our architecture was designed from the ground up with privacy by design. Image processing occurs exclusively on the customer's edge device. Data transmitted to the cloud consists exclusively of aggregated and anonymized metrics. No identifiable image, video, or biometric data is stored or transmitted. The system complies with LGPD (Brazil) and GDPR (European Union).

6. Data sharing

We may share data with: cloud infrastructure providers (under confidentiality agreements), payment processors, and authorities when required by law. All sub-processors are contractually required to maintain the same data protection standards we adopt.

7. International data transfers

Vorix7 uses cloud infrastructure providers whose servers are located outside Brazil, primarily in the United States: Vercel (website hosting), Cloudflare (DNS, protection, and content delivery), Supabase (database), and Amazon Web Services (AWS). This means personal data collected through the website and operational metadata may be transferred to and stored abroad.

These transfers are necessary to deliver the service. We select providers that offer contractual data protection safeguards and hold internationally recognized security certifications.

8. Data retention

Retention periods vary by data type:

• Video Analytics metadata: 60 days.
• Website browsing data (pages, source, approximate location): 60 days.
• Contact data submitted through forms: 24 months from the last interaction, for commercial follow-up.
• Contractual and tax data: 5 years after contract termination, as required by Brazilian law.

Once these periods end, data is irreversibly deleted or anonymized. Deletion of browsing data and Video Analytics metadata is carried out by automated routines.

9. Your rights

Under LGPD and GDPR, you have the right to: confirmation of data processing, access to your data, correction of incomplete or inaccurate data, anonymization or deletion of unnecessary data, data portability, information about sharing, withdrawal of consent, and objection to processing. To exercise your rights, contact us at: privacy@vorix7.com

10. Security

We adopt appropriate technical and organizational measures to protect your data, including: encryption in transit (TLS 1.3) and at rest (AES-256), role-based access control, multi-factor authentication for administrative access, continuous security monitoring, and an incident response plan.

11. Cookies

The vorix7.com website does not use tracking, advertising, or third-party cookies. We do not profile visitors and we do not share browsing data with ad networks.

For basic functionality, the site keeps a temporary session identifier in the browser's memory, discarded when the tab is closed, which cannot identify the person. The usage statistics we collect are aggregated and do not rely on cookies.

12. Changes to this policy

We may update this policy periodically. We will notify active customers by email with at least 15 days' notice for material changes. The last updated date will always be shown at the top of this document.

13. Contact

GM7 Trade & Marketing Ltda — Vorix7

Campinas, SP — Brazil

Email: privacy@vorix7.com

Phone: +55 (19) 3251-4742