Privacy policy
Draft, October 2026
Draft for legal review. Bracketed fields will be filled in with the company's details. The Portuguese version prevails.
1. About this policy
This policy explains how [Legal name] ("Team Connect") handles personal data on the website, in contracting and in the service, under Brazil's General Data Protection Law (LGPD, Law 13,709/2018).
2. Data we handle as controller
Website contact: name, email, company, team size and message, to answer the contact (consent), kept for up to 12 months if no contract follows.
Contracting: billing details of the company and of the person who subscribes, to perform the contract and meet legal obligations. Card details stay with the payment processor and never go through our servers.
The website uses no tracking or advertising cookies.
3. Data in the service
In the hosted service, data entered by the customer company and its people (profiles, messages, files, agent transcripts) is processed by us as an operator, following the instructions of the customer company, which is the controller.
Self-hosted, that data stays on the customer company's infrastructure.
4. Sharing
We use vendors for hosting, email and payments ([list of sub-processors]). LLM providers are chosen and contracted by the customer company.
5. Your rights
You can request confirmation, access, correction, anonymization, portability and deletion of your data, and withdraw consent, at [dpo@...].
Data protection officer (DPO): [name and contact].
6. Security
We use encryption in transit and at rest for secrets, access control and audit. Relevant incidents are reported as the LGPD requires.