OneGrid respects your privacy and is committed to protecting your personal data in accordance with the Brazilian General Data Protection Law (Law No. 13.709/2018 — LGPD). This policy covers both the onegrid.jonnpo.com.br website and the MedGrid app — OneGrid's product for monitoring environments and equipment, operated by OneGrid Sistemas S.A.
1. Data we collect
1.1 On the website
We collect the data you voluntarily provide through the forms on this site (name, e-mail, phone number and message), along with browsing data collected via cookies for analytics purposes.
1.2 In the MedGrid app
At sign-up, we collect your full name, e-mail, phone number (used for SMS/one-time-code verification) and password (stored encrypted; we never have access to the plain-text value).
Automatically, we collect a push-notification device identifier (Firebase Cloud Messaging token), account usage data (the environments/companies/branches you have access to, configured alert level, alert-acknowledgment history) and nearby Bluetooth (BLE) device identifiers — only when you manually trigger scanning in the app to set up sensors. We do not collect your geographic location.
The app does not collect: geographic location (GPS), photos, camera, microphone, device contacts, or patient health data.
2. How we use your data
- To respond to enquiries and commercial requests made through the website;
- To send updates on energy efficiency and company news (with your consent);
- To improve the experience and performance of the website;
- To authenticate MedGrid users and control their access level (company, branch, environment);
- To send alert notifications about out-of-range conditions in environments monitored by MedGrid;
- To comply with legal and information-security obligations.
3. Legal basis (LGPD)
On the website, data processing is based on your consent and on our legitimate interest in responding to enquiries received. In the MedGrid app, processing is based on the performance of a contract between OneGrid and the company/institution you are affiliated with (Art. 7, V, of the LGPD) and on the data subject's consent, obtained explicitly at sign-up.
4. Sharing
We neither sell nor rent your data. On the website, sharing occurs only with service providers required to operate the site, always under confidentiality obligations. In the MedGrid app, data is processed and stored by Google Firebase / Google Cloud Platform (authentication, database, push notifications) and Amazon Web Services (AWS) (part of the backend infrastructure), always under contract and with adequate security safeguards. We do not share personal data with third parties for marketing or advertising purposes.
5. Retention and deletion
Data is retained while your account or relationship with OneGrid is active, or as required to meet legal and contractual obligations. You may request deletion of your account and associated data at any time via the contact below.
6. Your rights (LGPD)
Upon request, you may:
- Confirm the existence of processing of your data;
- Access, correct or update your data;
- Request anonymization, blocking or deletion of unnecessary data or data processed in violation of the LGPD;
- Revoke previously granted consent;
- Request portability of your data to another service provider.
7. Data Protection Officer
Questions, requests or complaints related to this Policy can be sent to contato@onegrid.co.
8. Changes to this policy
This Policy may be updated periodically. The last-updated date is shown at the top of this document. Material changes affecting the MedGrid app will be communicated to you through the app itself.
This is a courtesy translation. In case of any discrepancy, the Portuguese version prevails, as the LGPD is Brazilian legislation.