Fluri Ai Logo← Back to site

LGPD - General Data Protection Law

Effective Date: 04/11/2025

PortuguêsEnglish

🛡️ LGPD Commitment

Fluri Ai is in full compliance with the General Data Protection Law (LGPD - Law No. 13.709/2018). This page explains how we ensure the protection of your personal data and how you can exercise your rights.

What is LGPD?

The General Data Protection Law (LGPD) is the Brazilian legislation that regulates personal data processing activities and also amends articles 7 and 16 of the Brazilian Internet Civil Rights Framework.

LGPD came into effect in September 2020 and establishes clear rules on the collection, storage, processing, and sharing of personal data, imposing greater protection and significant penalties in case of improper use of information.

Our LGPD Compliance

LOOP Tecnologia LTDA, developer of Fluri Ai, is committed to personal data protection and has implemented technical and organizational measures to ensure full compliance with LGPD:

✅ Technical Measures

  • • Data encryption in transit and at rest
  • • Strict access controls
  • • 24/7 security monitoring
  • • Regular and secure backups
  • • Periodic security audits

📋 Organizational Measures

  • • Designated DPO (Data Protection Officer)
  • • Clear privacy policies
  • • Team training
  • • Incident response processes
  • • Appropriate supplier contracts

Your Rights under LGPD

LGPD guarantees personal data subjects the following rights:

1. Confirmation and Access

Right to confirm the existence of processing and access your personal data that we maintain.

2. Correction

Right to correct incomplete, inaccurate, or outdated data.

3. Anonymization, Blocking, or Elimination

Right to request anonymization, blocking, or elimination of unnecessary, excessive, or non-compliant data.

4. Portability

Right to receive your data in a structured and interoperable format for transfer to another provider.

5. Elimination of Data Processed with Consent

Right to eliminate personal data processed based on your consent, except when there is a legal basis for retention.

6. Information about Sharing

Right to know with whom we share your personal data.

7. Information about the Possibility of Not Consenting

Right to be informed about the possibility of not providing consent and the consequences of refusal.

8. Revocation of Consent

Right to revoke your consent at any time, through express manifestation.

9. Opposition

Right to oppose processing carried out without consent in specific cases provided by law.

10. Review of Automated Decisions

Right to request review of decisions made solely based on automated processing.

How to Exercise Your Rights

📧 LGPD Support Channels

Data Protection Officer (DPO):

Step-by-Step to Make a Request

  1. Send an email to [email protected]
  2. Identify yourself with full name and account email
  3. Specify the right you wish to exercise (access, correction, deletion, etc.)
  4. Provide details about your request
  5. Wait for our response within 15 business days (may be extended by another 15 days in complex cases)

Legal Bases for Data Processing

We process your personal data based on the following legal grounds provided by LGPD:

  • Contract execution: To provide the contracted services
  • Legitimate interest: For service improvements, security, and fraud prevention
  • Consent: When you explicitly authorize specific uses
  • Legal obligation compliance: To meet tax, accounting, and regulatory requirements
  • Regular exercise of rights: For defense in judicial or administrative proceedings

Data Sharing

We share personal data only when necessary and in the following situations:

  • Service providers: Payment processors, infrastructure providers (always with appropriate contracts)
  • Authorities: When required by law or court order
  • Integration partners: WhatsApp, Facebook, Instagram (according to their policies)
  • Business successors: In case of merger, acquisition, or asset sale

We do not sell your personal data to third parties under any circumstances.

Security and Incidents

We adopt technical and administrative security measures to protect personal data against:

  • Unauthorized access
  • Accidental or unlawful situations of destruction, loss, alteration, or communication
  • Any form of inadequate or unlawful processing

Incident Communication

In case of a security incident that may cause relevant risk or damage to data subjects, we will communicate the occurrence to the National Data Protection Authority (ANPD) and affected data subjects within a reasonable time, as determined by LGPD.

International Data Transfer

Some of our service providers may be located outside Brazil. When we transfer personal data internationally, we ensure that:

  • The destination country provides an adequate level of protection
  • Or we use specific approved contractual clauses
  • Or the data subject has provided specific consent
  • Always in compliance with Article 33 of LGPD

Data Retention

We maintain your personal data only for the time necessary to:

  • Fulfill the purposes for which they were collected
  • Meet legal obligations (e.g., tax records for 5 years)
  • Exercise rights in judicial or administrative proceedings
  • Access logs: 6 months (Brazilian Internet Civil Rights Framework)

After these periods, data is securely deleted or anonymized.

Right to Complain

If you believe your rights have been violated or have complaints about the processing of your personal data, you can:

1. Contact us

Email: [email protected]

2. Contact ANPD

National Data Protection Authority
Website: www.gov.br/anpd

3. PROCON

For consumer issues, you can contact PROCON in your region

Updates to this Page

This page may be updated periodically to reflect changes in our practices or legislation. We recommend that you revisit it regularly.

📚 Related Documents

We are committed to transparency and the protection of your personal data.

If you have questions about LGPD or how we process your data, please do not hesitate to contact us.

Back to Home