Already have an account? Log in here

LGPD Compliance

Last updated: March 2, 2026

This is a courtesy translation. In the event of any discrepancy, the Portuguese version prevails, as it is the only one that is legally binding.

SDRBOT.ai is committed to complying with the Lei Geral de Proteção de Dados (Lei nº 13.709/2018), the Brazilian general data protection law. This page details how we process personal data in accordance with Brazilian law.

1. Legal Bases for Processing

We process personal data on the following legal bases set out in the LGPD:

  • Performance of a contract (Art. 7º, V): to provide the contracted services
  • Legitimate interest (Art. 7º, IX): to improve the service and send relevant communications
  • Consent (Art. 7º, I): for specific purposes where applicable
  • Compliance with a legal obligation (Art. 7º, II): to meet legal and regulatory requirements

2. Your Rights as a Data Subject

The LGPD grants a number of rights to the subjects of personal data:

Confirmation and Access

Confirm that processing exists and access your data

Correction

Request correction of incomplete or outdated data

Anonymization and Blocking

Request anonymization or blocking of unnecessary data

Deletion

Request deletion of data processed on the basis of consent

Portability

Request portability of the data to another provider

Withdrawal

Withdraw consent at any time

3. Categories of Data Processed

3.1 Platform User Data

  • Registration data (name, email, phone)
  • Authentication data
  • Platform usage data
  • Preferences and settings

3.2 Lead Data (your customers)

  • Contact data provided during interactions
  • WhatsApp conversation history
  • Qualification and interest data

4. Security Measures

We implement technical and administrative measures suited to protecting personal data:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Role-based access control (RBAC)
  • Audit logs and monitoring
  • Information security policies
  • Employee training
  • Periodic vulnerability assessments

5. Data Sharing

We share data only when necessary:

  • Processors: essential service providers (hosting, payments)
  • Integrations: services you connect (CRMs, WhatsApp Business API)
  • Legal obligations: when required by law or by a competent authority

All partners are bound by data processing agreements (DPAs).

6. International Transfers

Some of our infrastructure providers may process data outside Brazil. In these cases, we ensure adequate protection through standard contractual clauses or other mechanisms provided for in the LGPD.

7. Data Retention

We keep personal data for as long as necessary to:

  • Perform the service contract
  • Comply with legal obligations (5 years for tax records)
  • Regularly exercise rights in legal proceedings

8. Security Incidents

We have procedures in place to:

  • Identify and contain security incidents
  • Assess the risks to data subjects
  • Notify the ANPD, the Brazilian data protection authority, and the data subjects when applicable
  • Document and implement corrective measures

Data Protection Officer (DPO)

To exercise your rights or clarify any questions about the processing of personal data, contact our Data Protection Officer:

Email: dpo@iagente.com.br

Response time: up to 15 business days