Privacy Policy
Last updated: May 20, 2026
1. Who we are
MyChatCRM is the conversational automation and CRM platform available at mychatcrm.com.br. This Policy explains how we process personal data in line with the Brazilian General Data Protection Law (LGPD — Law No. 13,709/2018).
2. Data we collect
- Account data: name, email, phone, company and billing information provided when subscribing.
- Leads and forms: data submitted through Facebook Lead Ads and other sources connected by the customer (name, phone, email, form answers and campaign metadata).
- WhatsApp and conversations: messages, phone numbers, media and metadata exchanged in conversations handled on the platform, according to integrations authorized by the customer.
- Usage data: access logs, IP, device, browser and actions on the platform for security, support and product improvement.
- Cookies and similar technologies: session identifiers and preferences essential to the website and dashboard.
3. Processing purposes
- Provide, operate and improve MyChatCRM services;
- Receive, organize and respond to leads captured via Facebook Lead Ads and WhatsApp;
- Automate support, CRM pipelines and follow-ups configured by the customer;
- Process payments, billing and legal obligations;
- Ensure security, fraud prevention and technical support;
- Send transactional communications about the account and service.
Data entered by the customer about their own leads is the customer's responsibility as controller; MyChatCRM acts as processor under the applicable agreement.
4. Storage and security
Data is stored on cloud infrastructure with access controls, encryption in transit (TLS) and industry-aligned security practices. Passwords are handled with secure hashing. We retain data as long as needed to provide the service and meet legal obligations.
We do not sell personal data to third parties for commercial purposes. We share information only with essential providers (hosting, database, payments, messaging APIs and integrations authorized by the customer) and with authorities when required by law.
5. Data subject rights (LGPD)
You may request, under the LGPD:
- confirmation of and access to processed data;
- correction of incomplete or outdated data;
- anonymization, blocking or deletion of unnecessary data;
- portability, where applicable;
- withdrawal of consent and information on sharing;
- a complaint to the National Data Protection Authority (ANPD).
6. Cookies
We use cookies and local storage strictly necessary for authentication, security and dashboard operation. Analytics or marketing cookies, when used, depend on consent or browser settings. You can manage cookies in your device preferences.
7. Contact
For questions, privacy requests or exercising your rights, email us. We will respond within a reasonable time, generally within 15 business days.
This policy complements our Terms of Use. In case of conflict with applicable Brazilian law, the governing law prevails.