Privacy Policy
Version 3 (name matching). Named operator: Fernand Levy Silvestre de Assis. This policy describes the implementation; operations, retention and legal review must still be finalized before public operation.
What data is processed
Account: email, public name and authentication. Representatives: CNPJ, partner name in the QSA, business address, public partnership data and temporary local reading of a document image, without biometrics. Community: comments, reports and blocks. Billing: subscription identifiers and validity; we do not store card numbers.
Political declaration and consent
Political opinions may constitute sensitive personal data. Declarations are optional, require specific, prominent consent and can be withdrawn in the dashboard. We do not infer opinions of individuals, customers or employees. We do not sell political data or use documents for advertising.
Documents and comparison
JPEG/PNG images (up to 5 MB and 8 megapixels) are processed by local server-side OCR, without sending them to an external OCR API. The image and recognized text remain only in memory during the attempt: they are not persisted or logged. We do not request a CPF or selfie. The comparison uses only the holder's NOME field and one unique eligible individual partner in the active QSA, without fuzzy matching. Parents' names and typed names are not evidence. The result does NOT authenticate a document, person or ownership and does NOT detect tampering; a fake document with a matching name may pass. Missing QSAs (including MEI) and ambiguous data prevent clearance. You may resubmit or appeal through the dashboard and support.
External services
Accounts, securely hashed passwords, sessions and application data use PostgreSQL, prepared for Google Cloud SQL. Google and Apple verify identity when you choose those sign-in methods; backups are kept in a private bucket. BrasilAPI is the default public CNPJ source. No external provider receives new documents for this comparison. Stripe processes web billing. Apple, Google and RevenueCat process native purchases. The real map loads only after your action and connects your device to Google; navigation links open Google Maps, Waze or Apple Maps. Review contracts, hosting regions and international transfers before publishing.
Storage and location
Favorites are kept on your device. Authentication uses local storage. Your location is requested only when you tap “Near me”, stays in memory and is used to sort distances. There is no continuous tracking or advertising cookies.
Your rights and deletion
Request access, correction, portability or erasure from the operator. Account data export is available in the dashboard. Account deletion immediately hides public content and schedules cancellation of web subscriptions and removal of the profile and active data. Execution waits for the queue's safety delay and may depend on billing provider availability. Legacy KYC references are retained in a privacy queue for manual follow-up: we do not call the previous provider or claim external deletion. Store subscriptions must be canceled separately.
Retention and test environment limitations
Account data and requests remain while the account is active or until deletion is requested. The processor removes rate-limit records after 48 hours, deduplication records after 30 days and operational audit records after 90 days. Backup preparation uses a 30-day lifecycle; additional provider retention must be checked. Pseudonymized financial links may remain to prevent fraudulent reuse of purchases and meet legal obligations. A CNPJ HMAC remains after deletion to prevent repeated free trials, without retaining the document or OCR text. Do not submit real documents until operations, contracts and final retention periods are approved.
Operator contact
Fernand Levy Silvestre de Assis
Requested contact: contact@electormaps.com. The mailbox still requires activation and testing in Google Workspace. Do not send real documents or payments while support and services are not operational.