Privacy Policy
Last updated: August 27, 2026.
Cloudnapsys Tecnologia e Negócios Ltda., registered under Brazilian CNPJ no. 44.915.306/0001-43, values the privacy and protection of personal data of people who use our communication channels, website and services.
This Privacy Policy describes, in general terms, how we may collect, use, store and protect personal data, including when you contact us through WhatsApp.
1. Data we may collect
Depending on how you interact with us, we may process information such as name, phone number, email address, information voluntarily provided during support, the content of messages exchanged with us, date, time and other details related to interactions, and technical data necessary for the operation and security of our services and digital channels.
We may also receive information from partners or service providers when necessary to deliver our services or respond to requests made.
2. How we use the data
Personal data may be used to respond to requests and provide support, maintain communication with customers, users and interested parties, send information related to our services, operate and improve our digital channels, prevent fraud, abuse and security incidents, comply with legal or regulatory obligations, and exercise rights in administrative, judicial or arbitration proceedings.
When necessary, other specific purposes will be disclosed at the time the data is collected.
3. Communication via WhatsApp
We may use WhatsApp Business as one of our communication channels.
When you contact us through WhatsApp, we may process your phone number, the name or identification available on the service, the content of messages, and technical information related to the communication.
This data is used to provide support, respond to requests, send communications related to our services, and keep the necessary history of interactions.
WhatsApp is a service provided by Meta and has its own privacy practices and policies. Data processing carried out directly by WhatsApp or Meta is subject to those companies' respective terms and policies.
You may request that we stop sending communications at any time, either through the channel itself or by contacting us through the means indicated in this Policy.
4. Data sharing
We may share personal data only when necessary for our activities, including with technology and infrastructure providers, hosting and storage providers, communication platforms used by the company, service providers that support our operations, partners involved in delivering a given service, and public authorities, when required by law or a valid order.
Where applicable, we require service providers to handle data in accordance with confidentiality, security and data protection obligations.
We do not sell personal data.
5. Legal bases
Personal data processing is carried out in accordance with the legal bases set out in Brazil's General Data Protection Law — LGPD (Law No. 13.709/2018).
Depending on the purpose, processing may occur, among other cases, for the performance of a contract or related procedures, compliance with a legal or regulatory obligation, the regular exercise of rights, legitimate interest, or with consent, when applicable.
6. Security of information
We adopt technical and administrative measures designed to protect personal data against unauthorized access and accidental or unlawful destruction, loss, alteration, communication or disclosure.
Access to information is limited to people, systems and service providers who need it to perform their respective activities.
7. Storage and retention
Personal data is kept for the period necessary to fulfill the purposes for which it was collected, meet legal or regulatory obligations, maintain the security of our services, and exercise rights.
When data is no longer needed, it may be deleted or anonymized, subject to the retention cases permitted by law.
8. International transfer
Some technology and communication providers used by the company may process information in other countries.
When personal data is transferred internationally, the requirements and mechanisms set out in Brazilian data protection law will be observed.
9. Data subject rights
Under the LGPD, you may request, when applicable, confirmation of the existence of processing, access to your data, correction of incomplete, inaccurate or outdated information, anonymization, blocking or deletion of data processed in violation of the law, information about data sharing, portability, withdrawal of consent, deletion of data processed based on consent, subject to legal retention cases, and objection to processing, in the cases provided for by law.
To exercise your rights, use the channels indicated in the Contact section.
10. Cookies and website
Our website may use cookies and similar technologies necessary for its operation, security and improvement of the browsing experience.
When cookies are used for other purposes, additional information and management options may be presented to the user.
11. Privacy of children and adolescents
Our channels and services are not specifically directed at collecting data from children and adolescents.
If it becomes necessary to process personal data of children or adolescents, the applicable provisions of the LGPD will be observed, particularly the best interests of the data subject.
12. Changes to this Policy
This Policy may be updated periodically due to changes in our services, internal processes, or legal and regulatory requirements.
The current version will always be available on this website, together with the date of its last update.
13. Contact
For questions about this Policy, requests related to personal data, or to exercise the rights provided for under the LGPD, please contact us.
Cloudnapsys Tecnologia e Negócios Ltda.
CNPJ: 44.915.306/0001-43
Address: Rua Visconde de Pirajá, nº 414, sala 718, Ipanema, Rio de Janeiro – RJ, CEP 22.410-905, Brazil
Email: contato@cloudnapsys.com
Data Protection Officer (DPO): dpo@cloudnapsys.com
You may also file a complaint with Brazil's National Data Protection Authority (ANPD), following the procedures made available by the Authority.