Privacy in MyConecta Hub.

1. Service and context

We are CONECTA TECNOLOGIA E MARKETING LTDA, Brazilian company registration (CNPJ) 22.050.308/0001-84. MyConecta is our corporate brand.

The Hub is our notification system, not a separate legal entity, and is not open for purchase or public use. We are the controller of data in our own company’s operations. Internally separating sources and access does not create separate companies.

2. Notification-related information

The Hub uses your phone number, the event or order reference and the information included in the notification. It also keeps permission and preference records, the message identifier and processing, delivery or read results where available.

This data comes from the service that triggered the notification and confirmations from the messaging platform. Visiting this website does not authorize messages.

3. How information is used

We use this information to link a message to your order or event, check recorded permission, avoid duplicate messages and track deliveries or failures. Your permission to receive WhatsApp messages is not a general authorization to use your data for other purposes.

4. Services involved

Sending involves our hosting providers and the messaging platform. To deliver a WhatsApp notification, the platform receives the data needed for sending, including the phone number and message content. The service that triggered the notification also keeps its own records.

Using these services may involve processing data outside Brazil.

5. Retention and security

Stopping messages does not automatically erase related records. With the current configuration, the cleanup routine removes the plain-text phone number, authorization reference and message parameters and components from the notification record after 30 days from the Hub receiving the sending request. Removal depends on the routine running and is not a guarantee of erasure at the exact expiry time. Identifiers, consent information and histories remain. There is not yet automatic deletion of all these records. When requesting deletion, also identify the service that originated the message, as it may keep its own records.

Periodic removal of some content does not mean complete deletion or anonymization of all records. No single deletion period has been established for the entire history. Access and verification controls protect the flow, without an absolute guarantee of security or availability.

6. Rights and contact

You may request information about processing, access to and correction of your data, information about sharing and, where applicable, portability, objection, withdrawal of consent, restriction, anonymization or deletion. You may also request a review of decisions based solely on automated processing where provided by law.

To request access to, correction of or deletion of personal data, email privacidade@myconecta.com.br. Requests are free of charge. Identify the relevant service and describe your request. Do not send passwords, authentication codes or complete documents in your first message.

Purposes and legal bases

Utility notifications follow the purpose of the event that triggered them, such as performing a contract or handling a related request. The legal basis for that event and permission to send WhatsApp messages are separate requirements. The Hub checks permission records; that check does not by itself establish the legal validity of the original evidence.

Minimum permission and duplicate-control records serve legitimate interests in security and accountability and, where applicable, the exercise of legal rights. Suppression records help respect your preference and prevent unwanted contact. We do not automatically erase that barrier along with message content. Legitimate interests require use to be necessary and compatible with your rights; they are not a general authorization to use data.

Handling requests about your data is based on compliance with legal or regulatory obligations. We do not use consent as a universal legal basis for all these activities.

Incident notification

If an incident involving your data requires notification, you will be informed about the risks, the measures taken and steps you can take to protect yourself, under applicable law.

Governing law and language

Brazilian law applies. Any disputes will be handled by the court with jurisdiction under mandatory law, preserving the consumer’s right to the applicable consumer forum where relevant.

To the extent permitted by law, the Brazilian Portuguese version prevails. The English version is provided for convenience and does not reduce your rights.