Skip to content
EN

Nexloo Privacy Policy

Find out how we collect, use and protect your personal data.

Talk to us

Last updated: 24/03/2025

Nexloo is committed to security, privacy and transparency in how it handles the personal data of its users, customers, leads, partners and visitors. This Privacy Policy describes how we collect, use, store, share and protect personal data in compliance with Brazil’s General Data Protection Law (Lei nº 13.709/2018 – LGPD).

1. Key Definitions

For the purposes of this Policy:

  • Personal Data: any information relating to an identified or identifiable natural person.
  • Sensitive Personal Data: data on racial or ethnic origin, religious belief, political opinion, health or sex life, genetic or biometric data.
  • Data Subject: the natural person to whom the personal data relates.
  • Processing: any operation carried out with personal data, such as collection, use, storage, sharing or deletion.
  • Controller: the legal entity responsible for decisions about the processing of data.
  • Processor: the party that processes data on behalf of the controller.
  • DPO (Data Protection Officer): the person in charge of personal data processing.

2. Data Collection

Nexloo collects personal data in the following ways:

2.1. Provided directly by the data subject:

  • Full name, email, city and telephone number;
  • Business data of the contracting company (company registration number, legal name, trading name, number of employees);
  • Information entered voluntarily in forms, landing pages, surveys, or during service over WhatsApp.

2.2. Collected automatically:

  • Device and browser information;
  • IP address and approximate location;
  • Browsing and behaviour data on the site (cookies, pages visited, time spent);
  • Access logs, interactions with bots and integrated systems.

2.3. Obtained from third parties:

  • Data from public databases or social networks, according to the permissions set by the data subject;
  • Information from commercial partners or authorised integrators.

3. Purposes of Processing

Nexloo processes data for the following purposes:

  • Providing and operating our services and platform;
  • Customer service and technical support;
  • Issuing invoices and collecting payment;
  • Creating automated service flows over WhatsApp;
  • Lead management, opportunity nurturing and CRM;
  • Producing statistical analyses and performance reports;
  • Ensuring security and preventing fraud;
  • Complying with legal, regulatory and contractual obligations;
  • Sending promotional campaigns and newsletters (with the option to unsubscribe).

4. Legal Bases

The main legal bases Nexloo relies on for processing data are:

  • Consent: freely given, informed and unambiguous, in particular for marketing purposes;
  • Performance of a contract: necessary in order to provide the contracted services;
  • Compliance with a legal or regulatory obligation;
  • Legitimate interest: respecting the fundamental rights and freedoms of the data subject.

5. Sharing and Disclosure

Nexloo may share personal data with:

  • Essential service providers: cloud providers, payment systems, CRM tools, technical support;
  • Integrated communication platforms: WhatsApp, Facebook, Instagram, Google, Telegram;
  • Public authorities: when required by law or by court order;
  • Companies within the same economic group or affiliates, provided the same privacy guarantees are observed.

6. International Transfer

In some cases, data may be transferred to other countries (for example, cloud servers located in the USA or the EU). Nexloo ensures that such transfers take place on the basis of standard contractual clauses, international agreements or adequate protection guarantees, as required by the LGPD.

7. Retention and Deletion

Data will be stored:

  • For as long as necessary to fulfil the purpose for which it was collected;
  • For the duration of the contractual or commercial relationship;
  • To comply with legal and regulatory obligations;
  • Until deletion is requested, subject to the exceptions provided by law.

Once that period has passed, the data will be anonymised or securely destroyed.

8. Information Security

Nexloo adopts technical, administrative and organisational measures to protect personal data against unauthorised access, leaks, loss or destruction. These include:

  • Encryption of sensitive data;
  • Monitoring of access and logs;
  • Firewalls and multi-factor authentication;
  • Continuous training of staff;
  • Incident management and a response plan.

9. Cookies and Tracking Technologies

We use cookies to:

  • Improve the performance of the site;
  • Understand user behaviour;
  • Personalise content and advertising;
  • Measure conversions and campaign results.

You can manage your cookie preferences in your browser settings. Certain cookies are essential and cannot be disabled.

10. Data Subject Rights

Under the LGPD, you may exercise:

  • Access to, confirmation of and correction of data;
  • Anonymisation, blocking or deletion of data;
  • Withdrawal of consent;
  • Requests for information about sharing.

11. Contacting the DPO

To exercise any of the rights above, ask a question or obtain information, contact our Data Protection Officer:

Name: Rafael Scorsin
Email: [email protected]

12. Updates to this Policy

This Policy may be updated from time to time. The new version will be published with its revision date, and may be notified by email or through the platform. We recommend that you consult this document regularly.

Chat on WhatsApp