Privacy Policy

1. Introduction

AutomLab is committed to protecting your privacy and personal data. This policy explains how we collect, use, share and protect your information when you use our services and platform.

2. Data Protection Officer (DPO)

The data controller for the purposes of these data protection guidelines is AutomLab.

For any questions, requests to update your data, or to exercise your privacy rights, contact our Data Protection Officer (DPO) by email:
dpo@autmlab.com or contato@autmlab.com.

3. Legal Basis

AutomLab processes your personal data based on the following legal bases (under Brazil’s LGPD):

• Contract performance: To provide our automation services and access to our platform.
• Legitimate interest: To improve our services, platform security, and send institutional communications relevant to you.
• Consent: When we request your explicit authorization for non-essential cookies or other applicable technologies.
• Compliance with legal obligations: When applicable law requires data retention.

4. Data Subject Rights (Art. 18 of the LGPD)

The data subject has the right to obtain from the controller, at any time and upon request, regarding their personal data:

• I - confirmation of the existence of processing;
• II - access to the data;
• III - correction of incomplete, inaccurate or outdated data;
• IV - anonymization, blocking or deletion of unnecessary, excessive data or data processed in violation of this Law;
• V - portability of data to another service or product provider, upon express request, in accordance with the national authority’s regulations, subject to trade and industrial secrets;
• VI - deletion of personal data processed with the data subject’s consent, except as provided for in Art. 16 of this Law;
• VII - information about the public and private entities with which the controller shared data;
• VIII - information on the option to not provide consent and the consequences of refusal;
• IX - withdrawal of consent, under §5 of Art. 8 of this Law.

5. Personal Data We Collect

We collect the following types of personal information:

• Registration information: Full name, email address, phone number and company details.
• Usage data: Information on how you use our platform, including pages visited, features accessed, and session frequency/duration.
• Device data: IP address, browser type, operating system, device identifiers and connection information.
• Communication data: Message content, communication logs and interaction data via WhatsApp Business (when applicable).
• Integration data: Information required to integrate third-party platforms (such as access credentials, third-party customer data).
• Analytics and performance data: Cookies, session tokens and user behavior data for analysis purposes.

6. How We Use Your Data

We use your personal information to:

• Provide, maintain and improve our automation services and platform.
• Manage your account and authenticate your access to the platform.
• Fulfill contractual obligations and provide the contracted services.
• Send institutional communications, service updates and important notifications.
• Analyze usage, behavior and performance to optimize our platform.
• Ensure platform security, detect fraud and prevent illegal activity.
• Comply with legal and regulatory obligations.
• Improve user experience through personalization and recommended features.

7. Data Sharing

Your personal information may be shared with:

• Service providers: Third-party vendors that process data on our behalf (hosting, analytics, payment processing).
• Business partners: Companies we collaborate with to provide integrated services.
• Affiliates and associated companies: Other entities within the AutomLab group for operational and support purposes.
• Government authorities: When required by law, court order or legal process.
• Meta Platforms (Facebook, Inc.): When you use the WhatsApp Business API integration, the necessary data is shared with Meta in accordance with its privacy policies.
• Public users: Information you choose to share publicly on your account or profile.

We do not sell your personal data to third parties for commercial purposes.

8. Data Retention

We keep your personal data only for as long as necessary to:

• Provide the contracted services.
• Comply with applicable legal and regulatory obligations.
• Resolve disputes and enforce our agreements.
• Keep records for audit and security purposes.

WhatsApp Business conversation data is retained in accordance with Meta’s policies and applicable legal requirements. You may request deletion of your data at any time via dpo@autmlab.com.

9. Data Security

AutomLab implements technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure or destruction. These measures include:

• Encryption of data in transit (HTTPS/TLS).
• Encryption of sensitive data at rest.
• Multi-factor authentication for platform access.
• Firewalls and intrusion detection systems.
• Regular security audits and penetration testing.
• Compliance with industry security standards.

⚠️ Important notice: No method of transmission over the Internet or electronic storage is 100% secure. While we use industry-standard security techniques, we cannot guarantee absolute security. Use of our platform is at your own risk.

10. Policy for Minors

Our platform is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If we discover we have collected data from a child under 13, we will take immediate steps to delete such information. For users between 13 and 18, we recommend obtaining parental consent before using the platform.

11. Data and the WhatsApp Business API

When you use AutomLab’s integration with the WhatsApp Business API:

• Data processed: Phone numbers, messages, message templates, and conversation metadata are processed to perform the requested automation.
• Responsibility: You are responsible for obtaining your customers’ consent to collect and process their data through WhatsApp.
• Meta compliance: You agree to comply with all Meta Business Platform policies, including the WhatsApp Business Policy.
• Data access: AutomLab acts as a data processor. End-customer data is not used for AutomLab’s own purposes.
• Commercial messaging: You are responsible for complying with all commercial messaging regulations, including GDPR, LGPD and other data protection laws.
• Encryption: All WhatsApp communications use end-to-end encryption provided by Meta.
• Abuse reports: AutomLab cooperates with Meta in investigating possible policy violations.

12. Cookies and Third-Party Technologies

Our platform uses cookies and tracking technologies to improve your experience, ensure environment security and analyze site performance.

• Essential cookies: Necessary for our platform to function properly. They cannot be disabled in our system.
• Analytics and performance cookies: Used by third-party tools (such as Vercel Analytics or Google Analytics) to help us understand how users interact with our site, enabling continuous improvement.
• Third-party cookies: Some external content or features may set their own cookies in your browser.

You can adjust your browser settings to refuse cookies, although this may affect the full functionality of the AutomLab platform.

13. International Data Transfers

Your personal data may be transferred to, stored and processed in countries outside your jurisdiction. We implement appropriate safeguards to ensure your data receives an adequate level of protection, including standard contractual clauses or other internationally recognized safeguard measures.

14. Exercising LGPD Rights

You can exercise your rights under the LGPD through a formal request. To do so:

1. Send an email to dpo@autmlab.com with the subject "LGPD Request" describing your request.
2. Include information that allows us to accurately identify you.
3. We will respond within 15 business days with the requested information or an explanation of why we cannot fulfill it.
4. For data portability, we will provide your data in a structured, commonly used format.

15. Legal Compliance and Jurisdiction

This Privacy Policy is governed by the laws of the Federative Republic of Brazil, particularly the General Personal Data Protection Law (Law No. 13,709/2018 - LGPD).

Any dispute related to this Privacy Policy will be resolved in accordance with Brazilian law and before the competent courts.

16. Changes to This Policy

AutomLab may update this Privacy Policy periodically. We will notify you of significant changes via email or a prominent notice on our platform. Your continued use of the platform after such changes constitutes acceptance of the revised Policy.

17. Contact and Complaints

For questions, complaints, or to exercise your data privacy rights, contact us: