Transparency
Privacy Policy
How AlphaOps processes personal data on this website and in OpsGIS, under the Brazilian General Data Protection Law (LGPD, Law 13,709/2018). Written to be read, not to hide anything.
Who we are
Alpha Ops Ltda · CNPJ 69.301.618/0001-98 ("AlphaOps") develops and operates OpsGIS, the autonomous operations platform for ArcGIS Enterprise. In this policy, "we" means AlphaOps; "you" means whoever visits this website, uses OpsGIS, or the customer organization.
On this website
- We use no cookies, trackers, pixels or visitor analytics. We only store the language you picked in your browser.
- There is no form: contact is by email. If you write to us, we keep the message and your address to reply and keep the conversation history.
- Our hosting provider logs technical access data (such as IP address, date and time, and browser) for security and operation, for a short period.
In OpsGIS: who decides and who operates
In OpsGIS, the customer organization is the controller of the data from its environment and its users, and AlphaOps is the processor: we process that data on the customer's behalf, following its instructions and the contract. For data about our own business contacts, AlphaOps is the controller.
Requests from data subjects about data in a customer's environment (for example, a Portal user of that organization) are handled together with the customer, who decides about them.
Which data we process in OpsGIS
| Category | Examples | Source |
|---|---|---|
| OpsGIS users | Name, email, role, permissions, access records, IP address and approximate location | Registration by the customer and use of the platform |
| Technical environment | Configuration and health of servers, services, databases and certificates; installed versions and updates | Component installed by the customer |
| ArcGIS usage and security | Portal and Server usernames, logons, access to items and services, IP address and approximate location, system security events | Logs and administrative interfaces of the customer's environment |
| Data protection on the Portal | Signs of personal data in a public item, stored only in masked form | Check of public items, as an anonymous visitor would see them |
| Communications | Recipients and content of alerts by email, Teams, Telegram or voice | Customer configuration |
Approximate location from IP is calculated without sending the IP to third parties. Passwords and keys the customer registers are encrypted and never shown again.
Why we use it and on which legal basis
- Running the contracted service: monitoring, recommending and executing authorized actions, alerting the right people and producing reports (performance of contract).
- Security and fraud prevention: protecting the platform and customer environments and detecting improper access (legitimate interest and performance of contract).
- Proof and audit: keeping the trail of what was done, by whom and when (legitimate interest, performance of contract and compliance with legal or regulatory obligations).
- Support and relationship: answering contacts and providing support (legitimate interest and pre-contractual steps).
We do not sell data, we do not use it for advertising and we do not use it to train artificial intelligence models.
With whom we share
Only with suppliers needed for the service to work (sub-processors), under contract and with the minimum data:
| Supplier | Purpose | Where |
|---|---|---|
| Supabase | Database and authentication for each customer | Brazil (São Paulo) |
| Vercel | Hosting of the platform and this website | Brazil (São Paulo) for the platform; global network for static content |
| Cloudflare | Distribution of installation and update files | Global network; no customer personal data |
| Google (Gemini) | Artificial intelligence: explaining and translating technical text and answering the assistant | United States |
| Channels chosen by the customer (Microsoft 365, Teams, Telegram, voice) | Sending the alerts the customer configured | According to the provider the customer chose |
We may also share data when required by law or by a competent authority.
Artificial intelligence and transfers outside Brazil
OpsGIS data stays in Brazil. The exception is sending snippets of technical text to the artificial intelligence provider, when that feature is on. We use the paid tier of the service, under which the provider commits not to use the content to train its models. We send the minimum necessary and apply the safeguards set out in the LGPD.
The customer can ask for artificial intelligence to be turned off in its environment. OpsGIS keeps working, without the automatic explanations and translations.
How long we keep it
- Environment data and audit trail: for the duration of the contract, because they are the proof of what was done. Detailed metrics are summarized or discarded over time.
- End of contract: we hand the full history to the customer, if wanted, and delete the data within 6 months, unless the law requires us to keep it. During that period the environment is switched off and inaccessible.
- Business contacts: while the relationship lasts or until you ask for deletion.
Your rights
Under the LGPD you may request: confirmation that we process your data; access; correction of incomplete, inaccurate or outdated data; anonymization, blocking or deletion of unnecessary or excessive data; portability; information about whom we share it with; review of automated decisions; and withdrawal of consent, where that is the basis. You may also complain to the Brazilian Data Protection Authority (ANPD).
To exercise them, write to contato@alphaops.com.br with the subject "Privacy". We may ask you to confirm your identity. If the request is about data in a customer's environment, we forward it to the customer and follow up on the answer.
How we protect it
A separate database per customer, encryption in transit and at rest, passwordless access, fine-grained permissions and a trail that cannot be erased. More in Information security.
Changes to this policy
When we change something relevant, we update the date at the top and notify customers by email before the change takes effect.
Contact and data protection officer
Privacy questions and data subject requests: contato@alphaops.com.br, subject "Privacy". This is also the channel of AlphaOps' data protection officer.