Who we are and scope
Orktus Technology provides a business orchestration suite for documents, processes, employees, access, and operational journeys. This policy covers visitors, customer representatives, authorized users, and participants invited through secure portals or links.
When a customer determines what data is collected and why, it generally acts as controller and Orktus as processor. Orktus may act as controller for account, security, billing, commercial relationship, and its own channel data.
Data we may process
The data depends on the contracted module and customer configuration.
- Identity and contact details.
- Professional, employment, department, role, manager, and corporate access data.
- Documents, files, answers, and information submitted to requests or processes.
- Account, permission, authentication, activity, device, IP address, and security log data.
- Support and commercial communications.
Purposes and legal grounds
We process data to provide and secure the platform, authenticate users, run requests, receive and review documents, coordinate employee and access journeys, provide support, perform agreements, meet legal obligations, prevent fraud, investigate incidents, and improve service reliability.
Where Orktus is controller, legal grounds may include contract performance, legal obligations, legal claims, legitimate interests, or consent, as applicable.
Sharing and service providers
We may engage infrastructure, private storage, authentication, communications, monitoring, and support providers required to deliver the services. Access is limited by purpose and subject to security and confidentiality obligations.
We may also disclose data to comply with law, competent authority orders, protect rights, or support a corporate reorganization with appropriate safeguards. We do not sell personal data.
Security and retention
We use technical and organizational measures including access controls, company isolation, private files, traceable actions, and protected communications. No environment is risk-free, and relevant incidents will be handled under applicable law.
Data is retained as needed for the stated purposes, contract term, legal compliance, and legal claims. Customer-controlled content retention may be governed by the agreement and service settings.
International transfers
Technology providers may process data outside Brazil. Where applicable, we use mechanisms and safeguards consistent with Brazilian data protection law.
Your rights
Under applicable law, you may request confirmation, access, correction, anonymization, restriction, deletion, portability, sharing information, review of automated decisions, and withdrawal of consent, where applicable.
- For customer-submitted data, contact that customer first as the usual controller.
- For data controlled by Orktus, use the official channel listed on the website or agreement. Identity verification may be required.
- You may also contact Brazil's data protection authority under its official procedures.
Cookies, changes, and contact
We use necessary storage for sessions, security, and preferences. On the public website, Google Analytics loads only after you accept optional metrics. It measures page visits and clicks on modules and commercial buttons using cookies and browser identifiers. Google may process these data outside Brazil. These events do not include names, emails, customer company data, documents, tokens, or URL parameters. Authenticated pages and personal-link portals are excluded. You can reject or withdraw consent through Metrics preferences. Your choice is saved in this browser for up to 180 days.
We may update this policy to reflect legal, operational, or service changes. The current version and date will be published here. Contact us through the official website or contractual channels.