Privacy policy

Who processes your data

Controller: FABRICIO DE P MIRANDA, CNPJ 38.926.156/0001-70, Belo Horizonte, Minas Gerais, Brazil. Data protection officer (DPO): Fabricio Miranda, contato@langzap.com.br.

Our role regarding your contacts' data

For your own data, LangZap is the controller. For your contacts' data that appears in processed messages, LangZap is the processor: you are the controller and are responsible for the legal basis toward them.

On the Intelligence plan, your business is the controller of its customers’ data and is responsible for the legal basis toward them; LangZap processes that data as a processor, only to generate your business’s sales intelligence, in your lists, your reports and your alerts. Your customers’ data is not published and never leaves your dashboard. It is used to generate your sales intelligence.

What we collect

Yours: WhatsApp number, to connect the service; email, to log in; CPF or CNPJ, name, address and billing details, to issue the charge; CPF or CNPJ, name and address are kept while the subscription exists and deleted together with the account data. Your card number stays only with the company that processes the payment, never with LangZap.

From your conversations: the content of the audio, video, images with text and messages that pass through LangZap, and the name and number of your contacts.

Technical: IP address, for security. With measurement active, that IP, your browser and the ad cookie identifiers (_fbp/_fbc) go to the ad tool when you leave your email, when you go to payment and when you subscribe, and our copy is deleted within 7 days; the advertising platform keeps its own under its own policy.

The postal code is looked up on a public postal code lookup service to fill in the address.

The address you type at checkout is looked up on an address search service, only to complete the street, neighborhood, city and postal code.

If you start subscribing and don't finish, we keep what you filled in (plan, payment method, WhatsApp, CPF or CNPJ, name and address) so you can finish later.

To prevent repeated free trials, we keep an irreversible code (hash with a secret key) of your WhatsApp number, CPF, email and card (brand and last 4 digits) and, if a charge is disputed, of the CPF and number. The number, CPF, email and card themselves are not kept in this record. To apply the 30-day wait after a refund, we keep a protected (irreversible) code of the number and the document for 30 days, then delete it.

What we use it for and the legal basis

Contract performance: provide the service, charge the subscription and, with Pix, remind you of the due date over WhatsApp or email.

On the Intelligence plan, contract performance includes analyzing the messages in your conversations to generate your business’s sales intelligence: lists and reports on the dashboard and by email, and alerts on your WhatsApp through Smart Actions.

Legal obligation: comply with tax obligations.

Legitimate interest: prevent fraud and protect your account; and, if you left your email without finishing, use what you filled in to write to you by email and help you finish, in up to 10 emails. Use the “stop” link in the email and we won't bring it up again.

Legitimate interest: know where the people who sign up and subscribe come from, always, through the campaign origin and a pseudonymous identifier; and measure visits in your browser, with the option to decline in the cookie notice.

We don't sell any data and we don't use your conversations to train any AI model.

Legal basis: legitimate interest in fraud prevention (LGPD, art. 7, IX).

Legitimate interest: measure how the product is used (subscription steps, number of messages by format and language), without the content of your conversations, through an analytics provider that may be located outside Brazil; your account profile in that tool includes your email and name and is deleted together with the account.

Who we share it with

With the company that processes the payment, to charge you. With artificial intelligence providers, to transcribe, translate and, on the Intelligence plan, analyze the messages to generate your sales intelligence. With an email delivery provider. With an address search service, only to complete the address you type at checkout. With hosting, infrastructure and error monitoring providers, to keep the service running.

With an analytics provider, the campaign origin and a pseudonymous identifier of each sign-up and subscription step. With in-browser measurement tools and advertising platforms, as long as you have not declined.

Some are located outside Brazil, mainly in the United States, including the artificial intelligence provider that processes the texts. This international transfer happens because they are specialized providers, chosen for offering security guarantees compatible with the LGPD (art. 33).

Cookies and measurement

Essential cookies for login, security and signing up don't need consent. One cookie records where the visit came from, without identifying you. As long as you have not declined, it also keeps the ad click identifier.

Measurement tools load from the moment you arrive on the page, and you can decline in the cookie notice on the home page or on this page. If you go to payment or subscribe without having declined, we send them the payment start and the purchase confirmation with your contact details protected, to attribute the sale to the ad. When you leave your email, when you go to payment and when you subscribe, we also send your IP, your browser and the ad cookie identifiers (_fbp/_fbc), unprotected, as the tool requires, and we delete our copy of this data within 7 days; the advertising platform keeps its own under its own policy. Unless you decline, some visits are recorded (scrolling and clicks) so we can improve the site, with all text and every field masked and nothing you type. If you decline, from then on the measurement tools stop loading in your browser and we stop sending data to advertising platforms; sign-up and subscription are still measured through the campaign origin and a pseudonymous identifier.

To change your choice, delete the consent cookie from your browser and open the home page or this page to choose again, or write to contato@langzap.com.br.

If you have not declined measurement, from the moment you leave your email we send the advertising tool your email and an internal code for your sign-up, protected (hash), to attribute the sign-up to the ad. This code also goes unprotected, as the event identifier, so the same event is not counted twice. When you give your WhatsApp, we also send your number and, if it is a Brazilian number, the country, protected. Your browser passes the tool your email, your number (when given) and the code, protected, so it can recognize that the events come from the same person.

How long we keep it

Messages, media, transcriptions and translations: automatically deleted after 7 days, on both plans. Your conversations stay on your WhatsApp.

Account data: automatically deleted 7 days after the subscription ends; if a payment matter is pending, as soon as it's resolved.

This record is kept with no time limit and is not removed when you delete your account, because it is what stops the same number or CPF from repeating the trial. Without the secret key, the code cannot be turned back into the original data.

• ✓Contact list (name and number): for as long as the account exists
• ✓Intelligence plan, without the content of the conversations (date, time and type of each message, and each day's analysis without excerpts of the conversation): 90 days, then deleted automatically
• ✓Intelligence plan, without the text of the conversations (daily service and sales numbers, the catalog you confirmed, dates of each contact's latest purchases and the item of the most recent one): for as long as the account exists; removed when you delete everything or delete the account
• ✓Email left without finishing the subscription: 90 days after it was last filled in, then deleted automatically
• ✓Unfinished subscription (plan, payment method, WhatsApp, CPF or CNPJ, name and address): 7 days after it was last filled in, then deleted automatically
• ✓Payment records (amount, date, plan, service period, payer's name and charge identifier): tax retention period of 5 years counted from the following year, also to defend against a billing dispute
• ✓Access logs (IP, date and time): 6 months, as required by Brazil's Marco Civil da Internet (art. 15)
• ✓Record of support requests (Contact us): 90 days, then deleted automatically
• ✓Cancellation reason (optional): the written comment is deleted after 7 days; the chosen reason stays with the subscription
• ✓Record of emails sent (type, delivery, open and click, without the content): 180 days, then deleted automatically
• ✓Copy of emails sent kept by the sending provider: 30 days
• ✓Backup copies: deleted after 7 days
• ✓System error logs: up to 30 days
• ✓Site and sign-up usage events: up to 2 years; visit recordings: 30 days
• ✓Refund code (irreversible): 30 days, then deleted automatically
• ✓Free-trial anti-fraud record (irreversible codes): no time limit, not deleted with the account

Your rights

You can ask for: confirmation that we process your data, access, correction of incomplete or outdated data, anonymization, blocking or elimination of unnecessary data, portability, elimination of what was processed with your consent, information about who we share it with, and revocation of consent.

Write to the data protection officer at contato@langzap.com.br; we respond within 15 days. If your request isn't addressed, you can appeal to Brazil's National Data Protection Authority (ANPD).

You can ask for information or object to this processing by writing to contato@langzap.com.br.

If you're a contact of a LangZap customer

If someone who talks to you uses LangZap, messages from the service show up in your conversation. What LangZap keeps from them is automatically deleted after 7 days; if the person is on the Intelligence plan, the date and type of the messages and the analysis of the conversation, without excerpts of it, are kept for 90 days; the conversation stays on your WhatsApp. Your name and number stay in that person's contact list for as long as their account exists.