People BCPPeopleBCP

Privacy Policy

Last updated: September 15, 2026

This Privacy Policy explains how MAP-PeopleBCP ("we", "us", the operator of People BCP) collects, uses, and protects personal data when you visit this website or use the People BCP product.

1. Who we are

MAP-PeopleBCP, registered under CNPJ 31.231.620/0001-65, operates the People BCP platform and the website at peoplebcp.com.

You can reach us about any privacy matter at privacy@peoplebcp.com.

2. What we collect

On this marketing website: basic access logs (IP address, browser, pages viewed) generated by our hosting infrastructure, your chosen language preference, and, only if you consent, analytics identifiers described in our Cookie Policy.

When you request a demo or contact us: the name, email, company, and message you choose to submit.

Inside the product (for customers): account and profile data managed by our authentication provider, and the organizational data your workspace administrator chooses to register — people, roles, processes, and daily records.

3. Why we process it

To operate and secure this website and the product.

To respond to demo requests and support inquiries.

To improve the site and product based on aggregated usage patterns, where you have consented to analytics.

To comply with legal, tax, and accounting obligations applicable to a Brazilian company.

4. Legal basis

Where the LGPD or GDPR applies, we rely on: legitimate interest to operate and secure the website; consent for analytics cookies; contract performance for product customers; and legal obligation for tax and accounting records.

5. Sharing with third parties

We use infrastructure and service providers to operate the website and product, including cloud hosting and storage providers, a dedicated identity and authentication provider, and, only inside the authenticated product, an AI service provider for AI-assisted features processed server-side.

We do not sell personal data. Providers process data on our behalf under their own security commitments and only for the purposes described here.

6. International transfers

Our infrastructure providers may process data in regions outside Brazil. Where that happens, we rely on the safeguards those providers offer (contractual and technical) consistent with LGPD requirements for international transfer.

7. Retention

Website access logs are retained for the period required by applicable law and then deleted or anonymized.

Demo and contact requests are retained while the commercial relationship is being evaluated and for a reasonable period afterward, unless you ask us to delete them sooner.

Product data is retained for as long as the customer's workspace is active, per the applicable service agreement.

8. Your rights

Depending on applicable law, you may request confirmation that we process your data, access to it, correction, anonymization, portability, deletion, or information about entities we've shared it with, and you may withdraw consent at any time.

To exercise any of these rights, write to privacy@peoplebcp.com. We will respond within the timeframe required by applicable law.

9. Changes to this policy

We may update this policy as the product or applicable law evolves. Material changes will be reflected by the "last updated" date above.