Privacy Policy

Servicoon values the privacy and security of business owners' information and that of their clients. This Privacy Policy explains clearly and transparently how we collect, use, store, and protect personal data, in compliance with the Brazilian General Data Protection Law (LGPD – Law No. 13,709/2018) and the Internet Civil Rights Framework (Law No. 12,965/2014).

Clause 1. Identification of the Controller and Data Protection Officer (DPO)

1.2. Data Protection Officer (DPO): To exercise your rights or ask questions about privacy, contact us at: suporte@servicoon.com.

Clause 2. Our Role in Data Processing

For LGPD purposes, Servicoon acts in two distinct roles:

2.1. As Controller: When we collect data from you (entrepreneur/business owner) to enter into contracts, issue invoices, and provide our services.

2.2. As Processor: When we process data of your end clients (e.g., when a client of your salon books an appointment through the WhatsApp bot we created). In this case, the business owner is the Controller, and Servicoon only processes data following the owner's instructions and systems.

Clause 3. What Data We Collect

3.1. Data of the Contracting Client (You):

• Identification data: Full name, CPF, RG or CNPJ.
• Contact data: Email, phone (WhatsApp), business and residential address.
• Financial data: Credit card data, bank information (processed by partner payment gateways).

3.2. Data of Visitors to servicoon.com.br:

• Navigation information: IP address, browser type, pages visited, time spent, traffic source.
• Interaction data: Information filled in contact forms or clicks on WhatsApp buttons.

Clause 4. How We Collect Data

Data collection occurs in the following ways:

• Directly from you: When filling out forms on our site, contacting us via WhatsApp or signing our contracts.
• Automatically: Through the use of Cookies, Google Analytics, Meta Pixel and similar technologies on our pages.
• Via Integrations: When connecting our systems to your social networks (Facebook, Instagram) and Google Business.

Clause 5. Purposes and Legal Bases

We process your data only for specific purposes covered by Article 7 of the LGPD:

5.1. Contract Performance (Art. 7, V): To build your website, set up automations, provide technical support, handle billing, and maintain the contracted service.

5.2. Legal Obligation (Art. 7, II): For issuing invoices, keeping access logs as required by the Internet Civil Rights Framework, and complying with tax obligations.

5.3. Legitimate Interest (Art. 7, IX): To improve our services, ensure system security against fraud, and send communications about relevant updates for your business.

5.4. Consent (Art. 7, I): For sending promotional marketing campaigns (which you may revoke at any time).

Clause 6. With Whom We Share Your Data

Servicoon does not sell your data. We share strictly necessary information for service delivery with the following partners (processors):

• Hosting Providers: Hostinger (where our sites and data are stored).
• Payment Gateway: Mercado Pago, for secure monthly fee processing.
• Automation and Communication Tools: n8n, Make and Evolution API (for automation flows), and Meta (WhatsApp Business, Instagram).
• Analytics and Marketing Tools: Google Analytics and Meta Pixel.

Clause 7. International Data Transfer

7.1. Our technology partners (such as Hostinger, Google, Meta) have servers located outside Brazil, mainly in the United States or Europe.

7.2. Servicoon ensures it only uses vendors that demonstrate compliance with data protection laws (such as GDPR or LGPD) and that adopt adequate levels of security.

Clause 8. Storage and Retention Period

8.1. We will store the Client's data for as long as the contract is active.

8.2. After the contract ends, we will keep essential data for the period required to fulfill legal obligations (e.g., tax records for 5 years, access logs for 6 months per the Internet Civil Rights Framework) or to exercise rights in potential lawsuits. After these periods, data will be deleted or anonymized.

Clause 9. Information Security

9.1. We adopt technical and organizational security measures to protect your data, including: SSL certificates for data traffic encryption, strong passwords, restricted access control to administrative panels, and routine backups.

9.2. However, no system is 100% fail-proof. Servicoon disclaims liability for damages resulting from the data subject's exclusive fault (e.g., password leakage) or unforeseeable systemic hacker attacks.

Clause 10. Processing of Minors' Data

10.1. Our services are aimed at companies and entrepreneurs (persons over 18 or legally emancipated). We do not intentionally collect data from children or adolescents. If we identify improper collection, data will be immediately deleted.

Clause 11. Your Rights as a Data Subject (Art. 18 LGPD)

You, as the data subject, have the following rights:

• Confirmation of data processing.
• Access to your data.
• Correction of incomplete, inaccurate, or outdated data.
• Anonymization, blocking, or deletion of unnecessary data.
• Data portability to another service provider.
• Deletion of data processed with consent.
• Information about data sharing.
• Revocation of consent.

To exercise any of these rights, send an email to suporte@servicoon.com. The response period is up to 15 (fifteen) business days.

Clause 12. Cookie Policy

We use small text files (cookies) to improve the experience on our site. They are divided into:

• Essential: Required for the site to function (cannot be disabled).
• Analytical: Help understand how visitors interact with the site (e.g., Google Analytics).
• Marketing: Used to track visitors across different sites and display relevant ads (e.g., Meta Pixel).

You can manage or block cookies in your browser settings at any time.

Clause 13. Security Incidents

13.1. In the event of a security incident that may cause relevant risk or harm to data subjects, Servicoon will notify the National Data Protection Authority (ANPD) and affected clients within a reasonable time, in accordance with Art. 48 of the LGPD.

Clause 14. Changes to This Policy

14.1. This Privacy Policy may be changed at any time to reflect service improvements or legal updates. The most recent version will always be available on our site with the "Last update" date. We will notify active clients of any substantial changes.

Clause 15. Contact and Jurisdiction

The courts of the Comarca de Curitiba/PR are elected for resolution of any disputes arising from this Privacy Policy, with both parties waiving any other jurisdiction, however privileged.