Privacy Policy

1. Who is responsible for this data

EkipeOS is operated by Maltarolo LLC, a limited liability company organized in the Commonwealth of Massachusetts, United States, with its principal office at 14 Park St, Oxford, MA 01540. This company is responsible for the processing described on this page.

For any privacy matter — a question, a correction, a deletion or an export request — write to maltarolo.group@gmail.com. We reply within 30 days, and usually much sooner.

2. What this website collects

Today, nothing. The page you are reading sets no cookies, loads no third-party trackers, has no forms and stores nothing in your browser. The videos and images are served from our own server — none of them call YouTube, Vimeo or any social network.

Like any server on the internet, ours keeps a technical access log: IP address, date and time, the page requested and the browser type. We use it to keep the site running and to respond to abuse, and we delete it after 30 days.

If you leave us your email

Once the waitlist goes live, you will be able to leave an email address to receive a link to the product. In that case we keep the email address and proof of which consent text you read — nothing else. No name, no phone number, no profile. Leaving the list takes one click in any message, and leaving deletes the record.

3. What the product handles, and why

This section applies to everyone who uses EkipeOS — the owner of the cleaning business, their team and the clients they serve.

4. Who owns what

The distinction matters more than it seems:

• The business owner is responsible for client and team data. They decide what goes in, what comes out and how long it stays. We are the tool: we process that data on their instructions and only to run the service — never for our own purposes.
• We are responsible for the business owner's own account and billing data: that is our commercial relationship with them.

If you are a client of a company that uses EkipeOS and want to correct or delete something, the quickest route is to contact that company. If you would rather contact us, we will pass your request along and follow up.

5. Who the data passes through

We do not sell, rent or trade data. It passes only through the providers that make the product work, and each one gets the minimum it needs:

All of them operate in the United States or the European Union. We also disclose data when the law requires it — a court order, a subpoena, a tax authority. When that happens and the law allows us to say so, we notify the business owner.

6. Messages, consent and how to opt out

EkipeOS sends automated messages: job confirmations, "your team is on the way" notices, payment requests, receipts and review requests.

Before the first message, the end client gives written consent at sign-up. We keep the date, the time and the exact version of the text they read — not just an "accepted" flag, but proof of what was accepted. We do this because U.S. law requires it, and because without that proof the business owner is exposed.

To stop receiving messages, reply STOP (or SAIR, in Portuguese) to any message. Opting out takes effect immediately. Security messages — a gate code change, an incident — may still reach you: they are not marketing, they are notices.

7. Artificial intelligence

Severina, the EkipeOS AI assistant, reads messages to understand what is being asked and to translate between Portuguese and English. Three rules govern this:

• Sensitive data is masked first. Gate codes, alarm codes and the like are replaced with placeholders before any text leaves our server for the AI model. The model never sees the real value.
• None of your content trains any model. The providers we use process the text and return a result, under contracts that prohibit training on what passes through them.
• The AI proposes; the business owner decides. For decisions that affect someone — rescheduling, canceling, billing — the AI suggests and waits for the owner's "yes". When a lawyer, a subpoena or a tax authority is involved, the AI does not reply at all: it escalates to a person.

8. How we protect it

• One company never sees another. The separation is enforced in the database, not on the screen — it does not depend on the app remembering to filter.
• Gate codes and house keys are stored encrypted and shown masked. Every time someone reveals one, we record who revealed it and when.
• Sensitive data never travels in the body of a message. What is sent is a signed link that works once and expires quickly.
• The audit trail cannot be changed. It rejects edits and deletions — including from inside our own team.
• When someone leaves, they are really gone. When a cleaner is let go, their sessions are revoked on every device the same day, and the codes of the homes they served are flagged to be changed.
• All traffic is encrypted (HTTPS), and backups are stored separately, in a format that cannot be deleted before the retention period ends.

If a breach puts anyone at risk, we will notify the people affected and the appropriate authorities, with what we know and what we are doing about it — without waiting until we have every answer.

9. How long we keep it

When a dispute or investigation is under way, the related material is kept until it ends, even if the commercial retention period has already expired. Legal retention always overrides commercial retention.

When an account is closed, the business owner has 90 days to export everything. After that, we delete what the law allows us to delete and archive what it requires us to keep.

10. Your rights

At any time, you can:

• Know what data we hold about you and where it came from;
• Correct anything that is wrong;
• Take it with you — we export it in an open format that opens in any spreadsheet;
• Delete whatever is not bound by a legal retention period;
• Opt out of automated messages;
• Complain to the authority in your state or country if our answer does not resolve the issue.

Just write to maltarolo.group@gmail.com. We do not charge for this, and asking will never make your service worse.

11. Minors

EkipeOS is a work tool and is not intended for anyone under 18. We do not knowingly collect data from children. If we find out that we have, we delete it.

12. Changes to this policy

When something materially changes, we update the date at the top and notify business owners through the channel they already use — WhatsApp — before the change takes effect. A new version does not erase the old one: we keep previous versions, because what applied at the time matters later.

13. How to reach us

Privacy, corrections, deletion, exports or any question about this page: maltarolo.group@gmail.com.

Real people read and reply. If an answer takes longer than 30 days, follow up — the delay is our failure, not our policy.

This policy is also available in Portuguese.