Privacy policy

Last updated: 04/11/2026

Draft translation. The Portuguese version prevails. This text is pending legal review for each jurisdiction and is not indexed by search engines until it is approved.

Incomplete draft. Company details are missing (razão social, CNPJ, endereço, e-mail de suporte, cidade do foro). Fill in the company variables on the server and have a lawyer review this page before it goes live.

1. Data controller

[to be filled: legal name], CNPJ [to be filled: CNPJ], [to be filled: address], is the controller of the personal data processed in LP Access. The contact for the data protection officer (DPO) is [to be filled: DPO email].

2. What data we process

Account: email, organization name, role in the team and password (stored only as a hash, never in plain text).
Devices: the device's public key, computer name and last-used date, to enforce the device limit per account.
Free trial: a hash of the email and a hash of the hardware fingerprint, to prevent the trial from being repeated. These records do not allow reading the email or the hardware.
Usage: session minutes per month and supported computers (identified by hash), connection IDs and audit records of administrative and account actions (sign-in, plan change, device removal), kept for a limited period.
On your computer: the program keeps a local history of recent sessions (time, the other computer's ID and connection quality). This history is not sent to us.
Payment: charges are made through Mercado Pago. We receive the payer's email, the plan, the amount and the subscription status. We do not receive or store card data.
Panel team: name, email, network address and browser of panel sign-ins, for security.
Emails: we send account, trial and billing notices (transactional). We do not send marketing without your consent.

Session content (screen image, keyboard, mouse, voice, chat and files) travels encrypted between the two computers. Our servers coordinate the connection and, when the network does not allow the direct path, relay the data without being able to read it; they do not store this content. Session recording, when you use it, is made and saved on the computer of the person recording.

3. Purposes and legal bases

Creating and maintaining the account and providing the contracted service (performance of a contract).
Enforcing plan limits, billing and sending notices (performance of a contract).
Preventing fraud, abuse of the free trial and improper access, and maintaining security (legitimate interest).
Complying with legal and regulatory obligations, such as tax obligations (legal obligation).
Answering your requests and providing support (performance of a contract and legitimate interest).

4. Who we share data with

We share the minimum necessary with: Mercado Pago (payment processing), hosting and email delivery providers that support the service, and authorities when the law requires it. We do not sell personal data. These providers process the data only to serve us, under contract.

To find the best path between the two computers, the program queries Google's public connection-support (STUN) servers, which receive the computer's public IP address. Session content does not pass through them.

5. How long we keep data

We keep account data for as long as the account exists. Server audit records are kept for a limited period and the oldest are deleted automatically. The free-trial hashes are kept even after an account is deleted, because they are what prevents the trial from being repeated. Tax and billing data are kept for the period required by law. After that, we delete or anonymize them.

6. How we protect data

We use encrypted connections, hashed passwords, attempt limits against mass attacks, mandatory two-step verification for our team and logging of administrative actions. No system is entirely immune; if an incident poses a significant risk, we will notify you and the Brazilian data protection authority (ANPD), as the law requires.

7. Your rights

Under the Brazilian General Data Protection Law (LGPD, art. 18), you may request: confirmation that we process your data, access, correction, anonymization, blocking or deletion of unnecessary data, portability, information about sharing, and revocation of consent. You can download a copy of your data and delete your account at any time in the customer portal (My data area) or in the program (Account → My data). For other rights, or if you prefer, write to [to be filled: DPO email]. We respond within 15 days. You may also file a complaint with the ANPD.

8. Cookies and tracking

The public website does not use tracking cookies or third-party analytics tools. We count visits in aggregate, on our own server: how many times each page was opened, how many downloads were made and which site or campaign the visitor came from. This count does not use cookies, does not store the IP address or the browser, and does not identify visitors. The panel and the portal keep access keys only in the browser's memory (reloading the page asks you to sign in again), and the panel remembers only your light or dark theme choice in local storage.

9. Children and teenagers

LP Access is aimed at professionals and companies and is not directed at anyone under 18.

10. Where data is stored

Data is hosted in [to be filled: country and hosting provider]. If any provider is outside Brazil, the transfer follows the LGPD, with the required safeguards.

11. Changes to this policy

We may update this policy. The date of the last update is at the top and, for significant changes, we will notify you by email or on the website.

Other documents: Terms of use · Privacy policy · Cancellation and refunds