LGPD
Privacy policy
Last updated: November 3, 2026.
This is a translation provided for convenience only. The legally binding version of this policy is the Portuguese version, which prevails in case of any divergence.
This policy explains how we process the personal data of people who visit the website crmcliqueresponde.com.br, request a demo, contact us or subscribe to CRM Clique Responde, in accordance with the LGPD (Brazil's General Data Protection Law, Law No. 13,709/2018).
1. Who the data controller is
Clique Responde Marketing Digital Ltda., CNPJ (Brazilian company registry number) 47.363.087/0001-25, headquartered at Rua Manoel Ferraz de Arruda Campos, 881 — Bairro Alto, Piracicaba/SP, Brazil. Contact: atendimento@cliqueresponde.com.br.
2. What data we collect
- Demo request form: name, company, WhatsApp number, number of agents and industry. The website does not store this data: it goes in the message that you yourself send via WhatsApp to our sales team.
- Conversations and contacts: whatever you send us by WhatsApp, phone or e-mail.
- Subscription: name or company name, CPF or CNPJ (Brazilian individual or company taxpayer number), e-mail, phone number, address and payment method, provided on the subscription page for billing and for issuing the invoice (nota fiscal).
- Browsing (only with your consent): pages visited, clicks, device type and the campaign or ad that brought you to the website, collected by Google Analytics and the Meta Pixel.
- Storage in your browser: your cookie choice and the source campaign parameters (UTM). These are kept only until you close the browser and are used to include the source in the WhatsApp message.
- Academy (student area): name, e-mail and company registered by our team for access, the lessons watched, the date of last access and the certificate issued. The name appears on the certificate, which anyone with the validation code can verify. For those who watch the free lessons without signing in, progress is stored only in their own browser.
- Free trial (Brazil only): name, company, CNPJ, e-mail, WhatsApp number, number of agents, industry and the campaign of origin. We use them to create your company in the CRM test environment and your Academy access for the trial period, to send the confirmation code and access details by WhatsApp, and for our sales team to contact you about the trial.
3. What we use it for and on what legal basis
- Responding to your contacts and scheduling demos: preliminary procedures related to a contract and legitimate interest (art. 7, V and IX).
- Providing the contracted service, billing and providing support, including access to the Academy and the certificate: performance of a contract (art. 7, V).
- Issuing invoices and complying with legal obligations: compliance with a legal obligation (art. 7, II).
- Measuring the website's audience and the results of ads: consent (art. 7, I), which you may withdraw at any time.
4. Who we share it with
We do not sell personal data. We share only what is necessary with:
- Meta (WhatsApp and, with your consent, the Facebook and Instagram Meta Pixel);
- Google (Google Analytics, with your consent);
- Asaas, the platform that processes payments by Pix and card;
- hosting and infrastructure providers for the website and the system;
- public authorities, when required by law.
Some of these providers, such as Google and Meta, may process data outside Brazil, following the safeguards provided for in the LGPD.
5. Cookies
Google Analytics and the Meta Pixel are only loaded after you click Accept on the cookie notice. If you decline, the website works normally, without these cookies. To change your choice, use the button, which is also in the footer of every page, or delete the cookies in your browser settings.
In the Academy student area we use a session cookie, which is necessary to keep you signed in. It is only created when you sign in with your e-mail and password.
6. How long we keep it
For as long as necessary for each of the purposes above. Customer and billing data are kept for the duration of the contract and for the periods required by law, for example tax retention periods. After that, they are deleted or anonymized.
In the free trial, access is blocked at the end of the period. If you do not subscribe, the data of the trial company, including the contacts and conversations you added to the CRM, are deleted within 30 days after the trial ends.
7. Your rights
Under the LGPD (art. 18), you may, at any time:
- confirm whether we process your data and access it;
- correct incomplete, inaccurate or outdated data;
- request the anonymization, blocking or deletion of unnecessary data or data processed in breach of the law;
- request the portability of your data;
- find out who we share your data with;
- withdraw your consent and request the deletion of the data processed on the basis of it.
To exercise your rights, write to atendimento@cliqueresponde.com.br. You may also file a complaint with the ANPD (Autoridade Nacional de Proteção de Dados, Brazil's National Data Protection Authority).
8. Data within the CRM
The information that our customers register in CRM Clique Responde, such as their own customers' contacts and conversations, is processed by us on the customer's behalf, in accordance with the service agreement (in Portuguese). In these cases, the customer is the controller of that data.
9. Facebook, Instagram and WhatsApp connected to the CRM
When a customer connects a Facebook Page, an Instagram professional account or a WhatsApp Business number to the CRM using Meta login on our connections HUB (hub.cliqueresponde.com.br), the CliqueResponde app receives from Meta, with the authorization of the person who made the connection:
- the name and ID of the account that connected, and the Pages, Instagram accounts and WhatsApp Business accounts that person selected;
- the access tokens for those accounts, stored encrypted on our servers;
- the messages exchanged with the contacts of those accounts (text, media, the sender's name and profile picture) and delivery and read receipts.
We use this data only to show and answer conversations in the customer's CRM and to keep the connection working. We do not sell it, use it for advertising or share it with third parties other than Meta itself and the infrastructure providers in section 4.
How to request deletion of this data: disconnect the account in the CRM, under Connections; or remove the CliqueResponde app in your Facebook settings (Settings & privacy → Settings → Business integrations) or Instagram settings (Settings → Apps and websites), and Meta sends us the request, which receives a confirmation code; or write to atendimento@cliqueresponde.com.br. We delete the tokens and the connection data within 30 days.
10. Security
We adopt technical and administrative measures to protect data against unauthorized access, loss or misuse.
11. Data Protection Officer (DPO)
The data protection officer is Clique Responde Marketing Digital Ltda. itself. Contact: atendimento@cliqueresponde.com.br.
12. Changes to this policy
We may update this policy. The date of the last update is always shown at the top of this page.