Privacy Policy

1. Introduction

Baristta ("we", "our", or "Baristta") operates the web infrastructure monitoring platform available at app.baristta.tech. This Privacy Policy describes how we collect, use, store and protect the information provided by our customers when using our FTP monitoring, page verification, database backup and FTP backup services.

Baristta does not collect personal data from end users. We collect data from our clients' systems (FTP servers, websites, databases) and, indirectly, from our clients' customers' systems when they are monitored through the platform.

2. Data We Collect

2.1. Client Account Data

• Company name
• Registration email address
• Notification email address
• Country and timezone

2.2. System Credentials

To perform monitoring and backups, we collect access credentials for the client's systems, including FTP passwords, database passwords and website access passwords. All credentials are stored using AES-256 encryption and are never displayed in plain text after registration.

2.3. Monitoring Data

• File hashes (for change detection)
• Web page content snapshots
• Backup files (databases and FTP)
• Incident records and verification results

2.4. Payment Data

Payments are processed entirely by Stripe. Baristta does not store, process or have access to credit card data. For more information, please refer to Stripe's Privacy Policy.

3. How We Use Data

We use the collected data exclusively to:

• Execute the monitoring, verification and backup services contracted by the client
• Send notifications about incidents and alerts configured by the client
• Maintain the operation and security of the platform
• Process billing and manage subscriptions
• Communicate important service updates

4. Data Sharing

Baristta does not sell, rent or share client data with third parties for marketing purposes. Data may be shared only in the following situations:

• Stripe: for payment processing
• Infrastructure providers: for secure backup storage and service execution
• Google Analytics: for anonymized website usage data collection (see section 6)
• Legal obligation: when required by law, regulation or court order

5. Data Security

We implement technical and organizational measures to protect our clients' data:

• AES-256 encryption for all stored credentials
• Communication exclusively via HTTPS/TLS
• Backups stored in cloud infrastructure with SHA-256 integrity verification
• Restricted data access following the principle of least privilege

6. Cookies and Usage Analytics

The Baristta platform (app.baristta.tech) uses only session cookies, necessary for platform operation and user authentication. We do not use behavioral tracking cookies or third-party advertising cookies on the platform.

The marketing website (baristta.tech) uses Google Analytics to collect anonymized usage data, such as pages visited, visit duration and traffic source. This data is used exclusively to improve the website experience and is not associated with personally identifiable information. Google Analytics uses its own cookies for this purpose. For more information, see Google's Privacy Policy.

7. Data Retention

• Free plan: monitoring data is retained for 30 days
• Paid plans: data is retained for the duration of the active subscription
• Cancellation: data is deleted within 30 days after account cancellation, unless legally required to retain

8. Your Rights

Under applicable data protection laws (including Brazil's LGPD and GDPR where applicable), you have the right to:

• Access the data we hold about your account
• Request correction of inaccurate data
• Request deletion of your data
• Request data portability
• Withdraw consent at any time

To exercise any of these rights, please contact us at privacy@baristta.tech.

9. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated by email or notice on the platform. Continued use of the services after publication of changes constitutes acceptance of the updated policy.

10. Contact

For questions about this Privacy Policy or about how we handle your data, please contact us:

Baristta — Macchiatto Tecnologia
Email: privacy@baristta.tech
Website: baristta.tech