Introduction
We, at Elephan Soluções em Tecnologia Ltda, a private legal entity, enrolled with the CNPJ do MF under No. 55.386.224/0001-75, with headquarters at Rua Harmonia, No. 445, apartment No. 102, Sumarezinho district, CEP 05.435-000, in the city of São Paulo, State of São Paulo (“Elephan”), take your privacy and the protection of your data seriously, which is why this Privacy Notice (“Notice”) publicly explains how we process your Personal Data, what your rights are, and how you can exercise them.
This Notice is part of our Compliance Program with the Lei Geral de Proteção de Dados Pessoais and other sector-specific laws on the matter and, therefore, must be read and interpreted together with the current data protection laws.
From the content presented, you will be able to understand by which means personal data are collected and/or processed, how such collection or processing and use occur, among other processing activities that are carried out. After all, Elephan is the Data Operator (Operadora de Dados), and is responsible within the limits of its respective obligations.
1. Basic Concepts: What do you need to know to understand this Notice?
For the sole purpose of facilitating the reading of this Privacy Notice, Elephan presents below some useful definitions for its interpretation and full understanding:
2. How and which personal data are collected and/or received?
The types of Personal Data and the way in which Elephan collects or processes them depend on how you, as a data subject, relate to the company’s activities and why. In other words, the Personal Data collected and/or processed will differ depending on whether you are a candidate for a job opening or a customer who has contracted or intends to contract the services provided by Elephan.
If you have any questions about this item, please contact us; we will be happy to assist you through our contact channels made available at the end of this Notice.
3. With whom does Elephan share your data?
In certain situations, we need to share your Personal Data with third parties that provide services on our behalf. Below, you will identify the situations in which we may share your Personal Data.
Elephan further declares that it does not share data with third parties for the purpose of training public artificial intelligence models, nor for commercial analysis, marketing, or any purposes not related to the performance of its services.
4. How long are your personal data stored?
Following the guidelines of the Lei Geral de Proteção de Dados, Elephan stores your Personal Data only for as long as necessary to fulfill the purposes for which they were collected, unless there is any other reason for their retention, such as compliance with legal or contractual obligations, among others permitted by law, as per the illustrative table below:
5. What are the rights of Data Subjects?
Your Personal Data belong to you, and Brazilian law guarantees you a series of rights related to them. We are committed to complying with these rights and, in this section, we will explain what these rights are and how you can exercise them.
On this subject, it is emphasized that you are not required to provide the Personal Data we request; however, if you choose not to provide them, we may not be able to assist you with our services or answer your questions. For your security, whenever you submit a request to exercise your rights, Elephan may request additional information and/or documents in order to prevent fraud.
In some cases, Elephan may have legitimate reasons not to comply with a request to exercise rights. Such situations may occur where the disclosure of specific information could violate Elephan’s or third parties’ intellectual property rights or trade secrets.
When requests are eligible to be met, they may not be answered immediately. However, Elephan undertakes to respond to all requests within a reasonable time and always in accordance with applicable law.
If you wish to submit a request, contact Elephan’s Data Protection Officer (DPO) via e-mail at henrique@elephan.ai.
6. How does Elephan protect your Data?
Our responsibility is to take care of your Personal Data and use them only for the purposes described in this Notice. To ensure your privacy and the protection of your Personal Data, we adopt advanced technological resources to ensure the security of all data processed by Elephan.
Among the security measures implemented are network and systems access controls, antivirus and firewall adoption, as well as the promotion of national and international best practices in Information Security.
Despite all the attention devoted to the privacy of your data, we cannot guarantee total security. Unauthorized access and use by third parties of your information, hardware or software failures beyond Elephan’s control, and other external factors may compromise the security of your Personal Data.
Your role is essential to maintaining a safe environment for everyone. Therefore, if you identify or become aware of any factor that compromises the security of your data in your relationship with Elephan, please contact us.
Data Incidents and Notifications
The Lei Geral de Proteção de Dados defines a “personal data breach” as a security breach that leads to accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Personal Data transmitted, stored, or otherwise processed.
In the event of an information security incident involving destruction, loss, alteration, unauthorized access, or an incident involving Personal Data that causes relevant harm to the Data Subject (after assessment), we will communicate the incident to the Data Subject and/or the ANPD, at minimum using the requirements and information set out by the Autoridade Nacional de Proteção de Dados.
8. Questions? Talk to our officer in charge
If you believe that your Personal Data have been processed in a manner incompatible with this Notice or with your choices as the Data Subject of your Personal Data, if you have learned of any incident involving Personal Data processed by Elephan, or if you have questions, comments, or suggestions related to this Notice and how we process your Personal Data, please contact us. We have a Data Protection Officer available at the following contact address:
Data Protection Officer (DPO): Henrique Machado.
Contact e-mail:
henrique@elephan.ai
Mailing address:
Rua Harmonia, No. 445, Sumarezinho district, in the city of São Paulo/SP, CEP: 05.435-000
9. Changes to the Privacy Notice
As we are always seeking to improve our services and the way we operate, this Notice may be updated to reflect improvements made. Therefore, Elephan recommends visiting this page periodically so that you are aware of any changes implemented!
Last updated date: September 8, 2025