1.Who is responsible for your data
LogChain Indústria de Software Ltda., registered in Brazil under CNPJ 66.583.828/0001-28 (“LogChain”, “we”, “us”), is the controller of the personal data processed through the website logchain.ia.br and the contact channels listed on this page, under Brazil’s General Data Protection Law (Law No. 13,709/2018, “LGPD”).
For any matter related to personal data, including exercising the rights described in this policy, contact our Data Protection Officer at contato@logchain.ia.br.
2.What this policy covers
This policy applies to:
- browsing the LogChain website and its product pages;
- the demo and proposal request form;
- contact by email, WhatsApp and through LogChain’s Instagram profile;
- the data LogChain receives from third-party platforms (WhatsApp, Facebook, Instagram, TikTok, Google and YouTube) when a customer connects their accounts to the LogChain integrations, as described in Data from connected platforms.
Inside the LogChain platform (ERP, AI-powered CRM and other modules), the data of end customers, employees, suppliers and other people is entered and managed by the customer company, which acts as the controller. LogChain acts as the processor, following the customer’s instructions and the terms of the service agreement and data processing addendum.
3.What data we collect on the website
| Situation | Data processed | Source |
|---|---|---|
| Demo or proposal request form | Name, store or company name, WhatsApp number, city and state, main business challenge, plan of interest, consent record and date and time of submission. | Provided by you |
| Contact by email, WhatsApp or Instagram | Name, channel identifier (email, number or profile), message content and any attachments you send. | Provided by you |
| Website browsing | IP address, date and time of access, pages visited, browser and device type, recorded in the hosting provider’s technical security logs. | Collected automatically |
The website does not use audience analytics tools, advertising pixels or tracking cookies, and it has no sign-up or login area.
4.How we use website data and on what legal basis
| Purpose | Legal basis (LGPD) |
|---|---|
| Answer your request, schedule the demo and prepare a commercial proposal. | Preliminary procedures related to a contract (art. 7, V) and consent recorded on the form (art. 7, I). |
| Contact you about the request you made. | Consent (art. 7, I), which may be withdrawn at any time. |
| Keep the website secure and prevent fraud, automated submissions and unauthorized access. | Legitimate interest (art. 7, IX). |
| Comply with legal obligations, such as keeping access logs as required by Brazil’s Internet Civil Framework. | Compliance with a legal obligation (art. 7, II). |
| Exercise rights in legal or administrative proceedings. | Regular exercise of rights (art. 7, VI). |
We do not use website data for automated decisions that affect your interests, and we do not sell it or share it with third parties for marketing purposes.
5.Data from connected platforms (Meta, TikTok and Google)
LogChain’s integrations let customer companies manage ads, content, comments, messages and leads for their own accounts. Accounts are connected through each platform’s official login (OAuth): the account owner chooses which accounts and permissions to grant, and LogChain never receives their password.
| Platform | Data accessed | Purpose |
|---|---|---|
| WhatsApp (WhatsApp Cloud API) | Connected phone numbers and business profile, messages and media exchanged with the business’s customers, message templates and delivery status. | Display and reply to conversations in the CRM and send approved notifications and campaigns. |
| Facebook, Instagram and Meta Ads | Authorized Pages and professional accounts, posts, comments, Messenger and Instagram Direct messages, insights, ad accounts, campaigns, audiences and lead form submissions (Lead Ads). | Publish content, bring interactions into the unified inbox, manage campaigns, show reports and deliver leads to the CRM of the business that owns the account. |
| TikTok and TikTok for Business | Basic profile information (display name and avatar), videos and photos uploaded by the user and their posting settings, video list, comments, metrics, advertiser accounts, campaigns, audiences, pixel, reports and Instant Form leads. | Identify the connected account, publish content with the settings chosen by the user, reply to comments, manage campaigns and deliver leads to the CRM. |
| Google Ads, YouTube and Google Business Profile | Google Ads accounts, campaigns, reports, lead form submissions and conversions; YouTube channel, videos, comments and analytics; Business Profile posts and reviews. | Show performance, deliver leads to the CRM, send conversions, publish videos and updates and reply to comments and reviews. |
With respect to this data, LogChain commits to:
- access only the accounts and permissions our customers explicitly authorize, and use the data solely to provide these features to the account owner;
- never sell the data or share it with third parties for advertising, profiling or any purpose unrelated to the service;
- not use the data to train generalized artificial intelligence models; the CRM’s AI assistant processes messages only to reply on behalf of the customer company;
- keep access tokens encrypted at rest and restrict internal access to the people who need it to operate and support the service;
- deliver each event (message, comment or lead) only to the company that owns the connected account.
For people who interact with our customers’ accounts (for example, someone who sends a message or fills in a lead form), the customer company is the controller and LogChain acts as its processor.
LogChain’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. By connecting a YouTube channel you also agree to the YouTube Terms of Service, and the data is also subject to the Google Privacy Policy.
6.Disconnecting accounts and data deletion
You can end LogChain’s access to your accounts and request deletion of your data at any time, in any of these ways:
- In the LogChain dashboard: disconnect the account in the integrations area. Access is revoked and the stored data for that account is deleted.
- On the platform itself: remove the LogChain app’s permission in the apps and business integrations settings of Facebook or Instagram, in TikTok’s app permissions, or at myaccount.google.com/permissions for Google and YouTube.
- By email: write to contato@logchain.ia.br with the subject “Data deletion request”, identifying the connected account or profile. We confirm receipt and completion of the deletion through the same channel.
After disconnection or a request, data obtained from the platforms is deleted within 30 days, except for data we are required by law to keep or that is needed to exercise legal rights. People who interacted with a customer’s account can also request deletion directly from that company or through the email above.
8.International data transfers
Part of the infrastructure used for the website, the platform and the communication tools may be located outside Brazil. In these cases the transfer follows article 33 of the LGPD, in particular through contractual clauses that ensure a level of protection equivalent to Brazilian law, or to countries recognized by Brazil’s National Data Protection Authority (ANPD) as providing adequate protection.
9.How long we keep data
| Data | Retention period |
|---|---|
| Demo and proposal requests | During the negotiation and for up to 12 months after our last contact. If a contract is signed, the data is then processed under that contract. |
| Data from connected platforms | While the account remains connected and the service agreement is in force; deleted within 30 days after disconnection or a deletion request. |
| Website access logs | At least 6 months, as required by article 15 of Law No. 12,965/2014, or longer when required by law or court order. |
At the end of these periods the data is deleted or anonymized, unless keeping it is permitted by article 16 of the LGPD.
10.Your rights
Under article 18 of the LGPD you may, at any time and upon request:
- confirm whether we process your data and access it;
- correct incomplete, inaccurate or outdated data;
- request anonymization, blocking or deletion of unnecessary or excessive data, or data processed unlawfully;
- request data portability to another provider;
- know which public and private entities we share data with;
- withdraw consent and request deletion of data based on it;
- object to processing based on other legal grounds.
To exercise these rights, write to contato@logchain.ia.br. We may ask for information to confirm your identity. You may also file a complaint with the ANPD.
11.How we protect data
- encrypted connections (HTTPS) on the website and the platform;
- access tokens from connected platforms encrypted at rest;
- signed delivery of events, so each one reaches only the customer it belongs to;
- access restricted to authorized people;
- incident response, including notifying the ANPD and affected people when required by article 48 of the LGPD.
13.Children
LogChain’s website and services are intended for businesses and professionals. We do not knowingly collect personal data from people under 18. If we learn that this has happened, we will delete the data.
14.Changes to this policy
We may update this policy to reflect legal, product or process changes. The current version is always available on this page, with the date of the last update shown at the top. A Portuguese version is available at Política de Privacidade; both versions have the same content.
15.Contact
Questions, requests and complaints about personal data can be sent to our Data Protection Officer at contato@logchain.ia.br. This policy should be read together with our Terms of Service.