Privacy Policy
Last updated: March 2026
1. Who we are
Geru Tecnologia Ltda., Geru Tecnologia Ltda., registered under CNPJ no. 24.077.504/0001-78, headquartered at Rua Arnaldo Quintela, nº 96, 8º andar, CEP 22280-070, Botafogo, Rio de Janeiro, is the controller of personal data collected on this website, operating commercially under the OpenCo brand.
Our Data Protection Officer (DPO) can be contacted by email at privacidade@open-co.com.
2. Scope and applicable legislation
This Privacy Policy applies to all personal data processed in connection with access to and use of this informational website. We strictly follow the Brazilian General Data Protection Law (LGPD — Law no. 13.709/2018) and other rules issued by the National Data Protection Authority (ANPD).
3. What data we collect
On this website, we collect personal data exclusively for commercial purposes, i.e., so that our team can contact those interested in OpenCo's solutions. The data collected are:
- Full name
- Email address
- Phone number
- Message / description of interest (when voluntarily provided)
We may also collect, in an automated and aggregated manner, browsing data (pages visited, session time) through analytical cookies, as described in our Cookie Policy.
We do not collect sensitive personal data (as per art. 5, II, of the LGPD), such as biometric, health, racial, religious or sexual orientation data.
4. Purposes and legal basis
| Purpose | Legal basis (LGPD) |
|---|---|
| Responding to contact requests and commercial prospecting | Legitimate interest (art. 7, IX) / Consent (art. 7, I) |
| Sending commercial communications and product/solution updates | Consent (art. 7, I) |
| Statistical analysis of website usage (improving experience) | Legitimate interest (art. 7, IX) |
| Compliance with legal or regulatory obligations | Compliance with legal obligation (art. 7, II) |
5. Data sharing
Your personal data is not sold to third parties. We may share it in the following situations:
- Service providers (processors): companies acting on our behalf for CRM, email marketing and infrastructure operations, always bound by contract to the same obligations of this Policy.
- Legal obligations: when required by law, regulation, court order or competent authority.
- Corporate restructuring: in the event of merger, acquisition or asset transfer, with prior notice to the data subject.
6. Data retention
We retain your data for as long as necessary to fulfil the purpose for which it was collected, subject to applicable legal deadlines. Commercial contact data is retained for up to 5 (five) years from the last interaction, unless the data subject requests deletion or a longer legal deadline applies.
7. Your rights as a data subject
Under art. 18 of the LGPD, you have the right to:
- Confirmation of the existence of processing of your data;
- Access to the data we hold about you;
- Correction of incomplete, inaccurate or outdated data;
- Anonymisation, blocking or deletion of unnecessary data or data processed in non-compliance with the LGPD;
- Portability of data to another service provider, in accordance with ANPD regulations;
- Deletion of data processed on the basis of consent;
- Withdrawal of consent at any time;
- Information about the sharing of data with third parties;
- Objection to processing carried out on legal grounds other than consent.
To exercise your rights, contact our DPO: privacidade@open-co.com. We will respond within 15 (fifteen) calendar days.
8. Information security
We adopt adequate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or improper disclosure, in accordance with our Cybersecurity Policy.
In the event of a relevant security incident, we will notify the ANPD and affected data subjects within the deadlines established by the LGPD.
9. International data transfers
When we use infrastructure providers with servers outside Brazil, we ensure that transfers comply with art. 33 of the LGPD, through specific contractual clauses or when the destination country offers an equivalent level of protection to that provided under Brazilian legislation.
10. Cookies
This website uses cookies. Please see our Cookie Policy for details on the types of cookies used and how to manage your preferences.
11. Changes to this Policy
This Policy may be updated periodically. We will publish the revised version on this page with the update date. We recommend that you review it periodically.
12. Contact and DPO
Data Protection Officer (DPO):
Geru Tecnologia Ltda. — OpenCo
Email: privacidade@open-co.com
You can also exercise your rights through the contact page.