Brazil’s General Data Protection Law (Law No. 13,709/2018) establishes rules on the collection, use, sharing, and storage of personal data. In the context of DialogOps, the practical application of LGPD depends on the type of data processed and the role played by each party involved in the operation. For operations outside Brazil, this page should be read together with the Privacy Policy and the Cookies and Preferences page.
1. Roles in data processing
In many scenarios, the company that hires DialogOps acts as the controller of customer and lead operational data processed inside the platform, because it defines the purpose of service, relationship management, and the commercial workflow.
DialogOps, in turn, may act as the processor of that data insofar as it provides infrastructure, automations, operational organization, team support, and contracted resources that enable the customer’s operation.
2. What data may fall into this context
- Platform user registration data, such as name, email, company, and phone number.
- Navigation and authentication data, such as IP, browser, device, and access logs.
- Operational data handled in the environment, such as contacts, messages, attachments, labels, history, and support records.
3. Legal bases
Data processing in DialogOps may rely on legal bases such as contract performance, compliance with legal obligations, regular exercise of rights, legitimate interest, and, where applicable, consent.
4. Data subject rights
Under LGPD, the data subject may request, as applicable to the concrete case, confirmation that processing exists, access to data, correction, anonymization, blocking, deletion, portability, and information about sharing.
Some requests may depend on the role played by each party, the operational context, and any legal, regulatory, or contractual limitations.
5. Security and retention
We adopt reasonable technical and administrative measures to reduce the risks of unauthorized access, loss, alteration, improper disclosure, and abusive use. Data is kept for as long as necessary to support legitimate service purposes, legal requirements, security obligations, and evidence preservation where applicable.
6. Sharing and third parties
Use of the platform may involve subprocessors and providers necessary to the service, such as cloud infrastructure, email delivery, messaging platforms, AI resources, and integrations enabled in the customer environment.
7. Handling requests
Requests related to privacy and LGPD should be directed through the product’s official channels or the applicable commercial relationship. When the customer company acts as the controller of operational data, part of the request handling may require joint coordination with that company.
8. Complement to this page
This page is a thematic summary of LGPD. For the complete view on collection, purposes, retention, sharing, and data processing within the service, also read the Privacy Policy.