Privacy Policy

This policy explains how the Avila Ops app and Avila Ops websites, portals, integrations and services handle personal data, including data received when you sign in with your Google account.

Last updated: October 8, 2026

1. Who we are

Avila Ops (Avila Ops Tecnologia, Ribeirão Preto, SP, Brazil) is the controller of the data covered by this policy. We operate https://avilaops.com, the Avila Ops app with single sign-on at https://auth.avilaops.com, the management dashboard at https://app.avilaops.com and the systems we build and operate for our customers, such as CRM, online stores and Saúde Pet.

We provide digital presence, websites, automation, CRM, WhatsApp, Instagram, Meta Ads, payments and operational support for businesses.

For privacy questions or to contact the person responsible for data processing, email [email protected].

2. The Avila Ops app

The Avila Ops app is the single account that gives access to our systems. You create an account once and use it to sign in to any Avila Ops system with email and password or a sign-in provider such as Google.

Sign-in identifies you, opens the correct system and applies your account’s permissions. Sign-in data is not used for any other purpose.

3. Data received from Google

When you use “Sign in with Google” in the Avila Ops app, we request only the openid, email and profile scopes from Google. These provide your Google account identifier, name, email address, confirmation that Google has verified the email and your profile photo.

We do not request access to Gmail, Google Drive, Google Calendar, Contacts, YouTube or any other data or service in your Google account, and we do not read, send or change anything in it.

4. How we use Google data

We use this data only to authenticate you; create your account on first access or link it to an existing account with the same email; display your name and photo in our systems’ interfaces; and send messages about the account itself, such as security alerts and account recovery.

We do not use data received from Google for advertising, creating marketing profiles, selling to third parties, credit assessment or training artificial intelligence models.

Avila Ops’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We store the Google account identifier, name, email and photo address in the account service database, protected by authentication and restricted access. The access token issued by Google is used only once, at sign-in, to read your profile and is not stored. We do not store refresh tokens.

This data is passed only to the Avila Ops systems that you sign in to yourself, which receive your name, email and photo to identify your session, and to the hosting and database providers operating our infrastructure under contract. We do not sell or transfer Google data to third parties except when required by law or a court order.

6. Other data we may collect

Data you provide directly, such as name, email, phone number, company, CPF/CNPJ when needed for operational registration, messages sent through forms, sales inquiries and support information.

When a customer connects an integration, we may process technical data authorized by that customer, such as identifiers of pages, Instagram accounts, ad accounts, lead forms, campaigns, metrics, webhook events and data needed to perform the contracted integration.

Technical browsing data, such as IP address, pages visited, traffic source, conversion events and device information, when needed for security, measurement or service improvement.

7. How we use data in general

We use data to provide contracted services, operate integrations, record requests, organize customer service, process payments, measure results, prevent fraud, maintain security and meet legal obligations.

Data from Meta, Facebook, Instagram, WhatsApp or other providers is used only for the purposes authorized by the user or customer, such as asset synchronization, lead capture, campaign tracking and operational support.

The legal bases under Brazil’s General Data Protection Law (Law 13,709/2018) are performance of a contract and preliminary procedures, compliance with legal obligations, legitimate interest in keeping services secure and operational and, where applicable, your consent.

We may share data with suppliers essential to operations, such as hosting, database, transactional email, payment, analytics and automation providers, and with APIs authorized by the customer. These suppliers process data only to provide the contracted service.

We do not sell personal data or use data obtained through third-party integrations for purposes incompatible with the authorization granted or the contracted service.

Some suppliers maintain servers outside Brazil. In these cases, transfers follow the LGPD’s rules on international data transfers.

9. Cookies

The Avila Ops app uses a session cookie on the avilaops.com domain to keep you signed in across our systems. It is necessary for sign-in to work and is deleted when you sign out or the session expires.

The website may use measurement tools such as Google Analytics to understand page usage in aggregate. You can block or delete cookies in your browser settings.

10. Security and retention

We apply technical and organizational controls proportionate to risk, including encrypted connections (HTTPS), authentication, optional second-factor authentication, encryption of sensitive tokens when stored, audit logs and restricted administrative access.

Account data, including data received from Google, is retained while the account exists. When an account is deleted, we erase this data within 30 days, keeping only what the law requires, such as access logs required by Brazil’s Internet Civil Framework (Marco Civil da Internet).

Other data is retained for the time needed to perform the service, meet legal obligations, resolve disputes and fulfill legitimate deletion or correction requests.

11. Your rights and how to delete your data

You can request confirmation of processing, access, correction, updates, portability, withdrawal of consent and data deletion, as provided by applicable law.

To delete your Avila Ops app account and data received from Google, email [email protected] with the subject “Exclusão de dados” (Data deletion) or follow the instructions at https://avilaops.com/exclusao-de-dados/.

You can also remove Avila Ops’ access to your Google account at any time at https://myaccount.google.com/permissions. After that, Google sign-in stops working until you authorize it again.

12. Children

Our services are intended for companies and their professionals and are not directed at children. We do not intentionally collect children’s data.

13. Changes to this policy

This policy may be updated to reflect changes in services, integrations, legal obligations or security practices. The current version will always be available on this page with the date of the latest update. Material changes to the use of Google data will be communicated before they take effect.