Privacy Policy
Draft under review. Some points on this page depend on legal validation before final commercial use.
Usometria is a platform for intelligence on the use of workstations, software and digital resources. This policy describes which data we process, why, and how you can exercise your rights. It distinguishes three different situations:
- A — Website visitors (usometria.com.br);
- B — Customer accounts that access the dashboard (app.usometria.com.br);
- C — Telemetry that a customer organization decides to collect in its own environments through the platform.
1. Who we are
Usometria — technology usage intelligence platform. Contact: app@usometria.com.br.
2. Scope of this policy
It applies to the website usometria.com.br (and usometria.com), to the dashboard app.usometria.com.br, to the API used by the agents and to the Usometria browser extension. It does not apply to third-party websites accessed from these services.
3. Which data may be processed
| Situation | Examples of data | Who decides on collection |
|---|---|---|
| A — Website visitor | Technical server records (IP, date and time, page, browser); data sent through the contact form; messages sent by email | Usometria |
| B — Customer account | Name, email, password (hashed), optional profile photo, access and security records | Usometria, to operate the account |
| C — Organization telemetry | Use of workstations, applications, websites and sessions in the customer organization's environments | The customer organization, which contracts and configures the platform |
4. Data provided directly
- Website contact form: name, work email, company, phone/WhatsApp (optional), approximate capacity of the environment, whether there is RDS/Terminal Server, and message (optional); when the form is opened from the pricing calculator, also the calculated environment (workstations, RDS sessions, monitored units and monthly estimate); and the point of the page from which the form was opened. This data is used only to respond to your commercial request. Submitting the form is not consent to marketing: the contact is not added to newsletters, email lists or automations. To prevent abusive submissions, we keep a code derived from the IP address (hash), not the address itself. An internal notification with the submitted data is forwarded to Usometria's commercial mailbox.
- Contact by email: when you write to Usometria, we process your email, name and the content of the message in order to respond.
- Account: name, login email and password. The password is stored only as a cryptographic hash — we do not have access to it in plain text.
- Customer organization registration data: corporate name or name, CNPJ or CPF, state and municipal registrations, address, institutional, financial and tax contacts and, when different, billing data — entered in the dashboard by the organization's administrators and used for contract, billing and tax documents. We only validate the structure of the documents; we do not query external databases.
- Profile photo (optional): the uploaded image is converted into a new 256 × 256 pixel image; the original file is not kept.
- Two-step verification (optional): the authenticator app secret is stored encrypted and the recovery codes only as hashes.
5. Technical and usage data
Website visitors (A)
The web server records IP address, date and time, requested page, browser (user agent) and the result of the request, for operation and security. These records are kept for 14 days. The website does not use audience measurement tools, pixels or third-party cookies.
Customer accounts (B)
To protect accounts, we record security events — login attempts and failures, logout, password changes, activation and deactivation of two-step verification, invitations, profile changes and session terminations — with the IP address and a summarized browser. Active sessions are visible to the user in "My account". These records do not contain passwords, tokens or secrets.
6. Data processed by the platform for customers
When a customer organization installs the Usometria agent on its workstations, the platform may collect, according to the organization's configuration:
- computer name, Windows user and session events (sign-in, sign-out, lock);
- periods in which the workstation is on, in use or idle;
- foreground application and window title;
- with the browser extension: domain and address of the active tab (without query parameters, except those that identify videos), tab title and media playback;
- agent version and technical operating information.
The platform does not collect keystrokes, passwords, screenshots, camera images, microphone audio or file contents.
The customer organization decides to install the platform, defines the purposes and is responsible for having an adequate legal basis and for informing the people who use the workstations when necessary. In these processing activities Usometria acts, as a rule, on behalf of the customer organization, according to the contract entered into. Requests from data subjects regarding this data should preferably be addressed to the organization; Usometria supports the organization in handling them.
7. Purposes of processing
- operate the website, the dashboard and the API;
- authenticate users and protect accounts;
- provide the service contracted by the customer organization;
- respond to contacts and requests;
- ensure security, prevent abuse and investigate incidents;
- comply with legal and regulatory obligations.
8. Security
We adopt technical and organizational measures to protect data, including: encrypted communication (TLS 1.2 or higher), passwords stored only as hashes, optional two-step verification, encrypted secrets, profile-based access control, separation of data by organization and logging of security events. No system is immune to failures; we review these measures continuously.
9. Sharing and processors/suppliers
We do not sell personal data. We use suppliers that process data on our behalf, only to provide the services:
- DigitalOcean — hosting of the servers, located in Frankfurt, Germany;
- Google (Google Workspace) — sending of the platform's emails (such as password reset and invitations), internal notification of contacts received through the website form, and the contact mailbox.
Because the servers are located outside Brazil, there is an international transfer of data. Data may also be shared with authorities when there is a legal obligation or a court order.
10. Retention
| Data | Current period |
|---|---|
| Web server records | 14 days |
| Technical application records | 90 days |
| Workstation operation signals | 30 days |
| Password reset and invitation links | 30 minutes and 7 days, respectively; single use |
| Contacts submitted through the website form | To be defined |
| Account data | While the account is active |
| Organization registration and billing data | While there is a relationship with the organization and for the applicable legal periods (to be defined) |
| Organization telemetry | Kept while the customer organization uses the service, according to the contract |
| Security records | To be defined |
11. Cookies and similar technologies
We use only essential, first-party cookies. Details in the Cookie Policy.
12. Data subject rights
Under the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados, Law 13.709/2018), you may request: confirmation of the existence of processing; access to the data; correction of incomplete, inaccurate or outdated data; anonymization, blocking or deletion of unnecessary data or data processed in non-compliance; portability; information about sharing; and review of decisions, when applicable.
For data in situations A and B, write to app@usometria.com.br. For telemetry (situation C), contact the organization that uses Usometria; we will help as needed.
13. Contact
Privacy and data protection: app@usometria.com.br.
14. Changes to the policy
This policy may be updated to reflect changes in the services or in the legislation. The date of the last update appears at the top. Relevant changes will be communicated through the appropriate channels.