A Minha Empresa · MAQ
Privacy policy
Understand which information A Minha Empresa processes, why it is used and how to exercise your rights.
Who operates the service
A Minha Empresa is operated by MAQ COMERCIO E SERVICOS DIGITAIS, Brazilian CNPJ 43.653.399/0001-12. The data protection officer and person coordinating privacy and incidents is Marco Aurélio, available at marco@alomaq.com.br.
MAQ determines processing for access, administration and security of its own service. For merchant operational data processed under its instructions, MAQ acts as processor within the contracted scope, and the merchant is responsible for the purposes and lawful bases of that data.
Information and purposes
We receive information from the company and its users, authorized integrations and records necessary to operate the service.
| Category | Purpose |
|---|---|
| Account and team: name, email, identifiers, role and authentication records | Enable access, manage permissions and provide support. |
| Company and store: identification, marketplace and connection credentials | Link operations and run the authorized integration. |
| Orders, products and costs: identifiers, status, dates, SKU, quantity and amounts | Organize operations and calculate indicators with source and history. |
| User-submitted text and attachments | Support the operational purpose specified by the company; content may contain personal data. |
| Technical and audit records | Maintain operation, diagnose failures and investigate access and security events. |
For service management, the applicable basis may be performance of a contract where the person is a party, compliance with a legal duty, or legitimate interests for security following assessment. Each operation must have documented purposes and grounds. Consent is requested where necessary and can be withdrawn.
Sensitive personal data is outside the product's normal purpose. Avoid submitting it in text or attachments. MAQ does not reuse order data for sale, advertising or model training.
Integrations and sharing
Connections use official APIs and require store authorization, availability and approvals required by the marketplace. The pilot offers Mercado Livre; Shopee and TikTok follow availability and activation conditions for their respective flows. Preparing the TikTok integration does not mean a real store authorization or import has already occurred.
The prepared TikTok flow selects operational order fields for persistence. This projection has no dedicated buyer-name, address, telephone, identity-document or payment-card fields. API responses may contain personal data received and temporarily processed to execute the integration.
Only necessary information is shared with the authorized marketplace, infrastructure vendors and people authorized to operate the service, or when legally required. Primary hosting is provided by Hostgator in São Paulo, Brazil. Marketplaces have their own notices and may process information in other countries; vendors, copies and transfers must be assessed and recorded before new uses.
Service usage and platform administration
To understand adoption, improve the service and diagnose difficulties, we record authenticated workspace opens, the accessed module and periodic activity signals while the page is visible and focused. Each event contains its type, module, server time and user and company identifiers.
This collection is sent to our own service. It does not include typed text, searches, order contents, financial values, files, credentials, URLs, IP addresses, browser identifiers, screen recordings or session replay. We do not use external analytics providers for this collection.
Platform administration can consult registration metadata, name, email, access role, company and usage and integration indicators. This access is exclusive to the authorized owner account, verified by the server, and does not change users access to each company data.
Usage events have a 90-day retention window, with periodic incremental removal of expired records from the active database. Backups follow the separate retention and restore process still under implementation. Requests about this processing can be sent to marco@alomaq.com.br.
Required cookies
The application uses session cookies for authentication and temporary security cookies in authorized marketplace connections. They are necessary for those flows; blocking them may prevent access or connection. The institutional website and these pages do not add advertising cookies or trackers. Any new non-essential use must be assessed and disclosed before adoption.
Safeguards
Public access and official API calls use HTTPS. The service restricts access by company and role and applies specific protection to integration credentials, passwords and sessions. Operations must follow the access, handling and incident-response policies.
Broader authentication controls, full infrastructure and copy protection, key management and monitoring are under implementation and must be verified. Publishing these rules is not a certification or a guarantee of absolute security.
Retention and erasure
Accounts and history are kept while needed for the service, company instructions or applicable obligations. Necessity is reviewed annually, at termination and upon request; additional retention requires documented grounds and limits.
Disconnecting a store deletes its local credential and preserves operational history. It does not delete the account or orders or revoke authorization at the marketplace. You may request an erasure assessment through the privacy contact.
The definitive retention schedule, technical erasure and backup expiry and restore controls are under implementation. Requests are assessed individually and receive a response describing actions, any mandatory retention and limits or steps applicable to copies.
Your rights
You may request confirmation and access, correction, anonymization, blocking or erasure where applicable, portability under the relevant regulation, information on sharing and consent, withdrawal of consent, and review of exclusively automated decisions affecting your interests. You may also object to unlawful processing and petition ANPD.
Send requests free of charge to marco@alomaq.com.br, describing your relationship with the service and what you need. The officer may proportionately verify identity or representation. If the customer company is the controller, we will coordinate referral to its responsible person.
Confirmation or access receives an immediate simplified response or complete statement within 15 days under the applicable rule. Other requests receive individual assessment; if immediate fulfilment is not possible, we will explain the factual or legal reason.
Incidents and changes
Incident reports may be sent to the same contact. Marco Aurélio coordinates recording, containment, assessment and communication. When MAQ acts as processor, it informs the controller without undue delay; mandatory notices to affected people and ANPD follow MAQ's role, risk and applicable legal deadlines.
The procedures were adopted on 9 October 2026. This version was updated on 14 October 2026 to disclose usage collection and platform administration. Review occurs quarterly and after incidents, material changes or new processing. The version and date remain visible on this page.
Contact us about your data
Send rights requests, questions and incident reports free of charge to the data protection officer, Marco Aurélio:
Reviewed quarterly and after incidents or material changes. Next scheduled review: 9 January 2027.