Privacy Policy

• What are Siteware’s main products?
• What are Siteware’s other products?
• What information do Siteware products collect? How is it used and shared?
• What may be considered personal data? How is it used and shared?
• How information is accessed in Siteware’s applications? Who has access?
• How is your information protected in Siteware’s applications?
• For how long does Siteware’s applications retain information?
• What other data collection tools Siteware’s applications uses?

Siteware’s main products are STRATWs One and Valorae. Both software enable the execution of strategic management and the monitoring of goals in order to improve business management (from C-level to the shop floor). These systems are distinguished from the perspective in which they approach the theme of management by results and for that reason they are grouped in different modules, as can be seen below:

Those modules are seamlessly integrated. The adoption of these tools is flexible. They share the same philosophy and a common core. Our clients usually start by using 2 or 3 STRATWs One or Valorae modules then gradually hire others.

Our product portfolio is constantly evolving, but in essence consists of legacy applications similar to STRATWs One and/or Valorae, which are derived from on-premises platforms, such as PortalSIM, or due acquisitions Siteware have made over time, such as the M3 Stratws.

We are committed to maintaining those legacies systems, which work similarly to STRATWs One and Valorae. However, we recommend that our customers migrate to our premium SaaS offer by the time of contract renewal, guaranteeing exclusive features.

Basically, business performance data is collected, essentially to help company’s leaders to track corporate performance. It’s shared only into the organizations that contract us and through corporate formal communication channels (email, internal reports, dashboards, meetings, etc.).

Due to the nature and purpose of our products, most of the data is corporate. Typical Information are: goals, KPIs, tasks, performance, action plans and meeting minutes.

It is important that clients and users know that some personal data is handled into our software, mostly related to the user’s corporate roles and its accountability within business performance.

Once the user enters a valid user name and password into a web browser connected to the internet, a secure connection is established using HTTPS (Hypertext Transfer Protocol Secure). Clients can access company business units that have permissions granted by the system administrator.

Once the user enters a valid name and password, in a web browser, a secure connection is established using Hypertext Transfer Protocol Secure (HTTPS). After authentication, the user can access the business units of the company that are granted permission by the system administrator on the client.

Siteware applications can only be accessed by a valid corporate email / ID. The login can use the client’s single sign-on mechanism (in the SaaS cloud exclusive version with federated identity). Only authorized employees and contractors can access the system.

Siteware may eventually access the customer’s environment for support and maintenance purposes. Access is restricted to some support team members (for investigation of specific issues) and by product team members (for fixes and updates). Access is also restrained by Siteware’s role-based access controls. Both accesses are logged.

Siteware treats client and user’s information as confidential and adopts high security standards to protect customers’ data. We implement security measures across several layers.

Siteware applications provide world-class security technologies and all data is encrypted (in transit and at rest). In addition, our customers can contract: geographic database replication, web application firewall with DDoS protection, among other options. The software goes regularly through vulnerability analysis and  invasion tests.

Siteware takes extra measures to protect client’s data from unauthorized or illegal processing, accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse and any other unlawful form of data processing in our possession.

In case of any security breach on client’s environment, we will provide every legally-required disclosure. Security breach is understood as the possibility of information exposure that compromises confidentiality or integrity of your stored data. It is worth mentioning that all data exchange happens through a secure communication channel SSL encrypted with digital signatures.

The information is retained in the software for an indefinite period of time, as long as the client has a contract with Siteware. In case of contract termination, the information remains available for download for 30 days. After this period, data will be backed up. Onward, the entire SaaS instance (application, database and storages) will be shut down and deleted. For security, this backup is retained for a year, then it is destroyed.

STRATWs One uses cookies to collect data and improve user experience in our web application. Siteware also uses third-party analytics tools (such as Google Analytics, PowerBI, Mixpanel, etc.) to measure system engagement.

Cookies used by Siteware solutions collect and encrypt application context information, such as the last business unit accessed by the web client application to improve company and user experience. Authentication cookies are also used to validate the secure connection.