Privacy Policy

1. Data controller

Controller: CLOUDXM TECNOLOGIA LTDA., Brazilian taxpayer ID (CNPJ) 53.245.805/0001-61, Rua Apiacás, 621, apartment 71, Perdizes, São Paulo/SP, Brazil. For privacy questions, requests, or to exercise your rights, email contato@cloudxm.com.br.

2. Information we may process

Depending on your interaction and the service used, we may process:

• Contact and identification details you provide, such as name, email, phone number, company, and the contents of messages sent by email, WhatsApp, or another support channel.
• Technical and browsing data, such as IP address, cookie identifiers, advertising click identifier, pages visited, page URL, referrer, page title, date and time, device type, and interaction events.
• Account and business data made available by you or an administrator when connecting a third-party platform, limited to the permissions granted and requested functions. Access tokens, when required for an integration, are protected credentials and should never be sent by email.
• End-customer data that a business customer uploads or makes available through CloudXM services. In those cases, the business customer determines the purposes and instructions, and CloudXM may act as a processor under the applicable agreement.

3. How we use information

We use information to respond to requests and provide support; provide, maintain, and secure services; configure requested integrations; measure performance and diagnose errors; understand website usage and improve content and experience; measure campaigns and conversions; comply with legal obligations; and establish or defend legal claims. Data received through a Meta integration is not used for purposes incompatible with the granted authorization, this Policy, or applicable platform terms.

4. Meta Pixel, cookies, and similar technologies

The website currently loads the Meta Pixel. It may record page views and browsing or conversion events and transmit technical information and browser identifiers to Meta, such as Meta cookies (_fbp and _fbc, when available), page URL, referrer, and event data. The website code also supports sending email and phone number for form events when a form is specifically configured for tracking. Meta processes received data under its own terms and policies. You can limit cookies through your browser settings and, where available, Meta ad preference tools; this may affect measurement and personalization features.

5. Legal bases

Depending on the circumstances, we process information to perform a contract or steps requested by you; comply with legal or regulatory duties; exercise legal rights; obtain consent where required; or pursue legitimate interests after balancing individuals’ rights and expectations. Where processing relies on consent, you may withdraw it without affecting processing lawfully carried out beforehand.

6. Sharing and international transfers

We may share information with hosting, security, communications, analytics, and support providers acting on our behalf; with platforms you choose to connect, including Meta; with group companies or partners strictly involved in providing the requested service; and with authorities where required by law. Recipients receive only information necessary for the relevant purpose. Some providers or platforms may process data outside Brazil; in such cases, we use mechanisms required by applicable law. We do not sell personal data.

7. Retention and security

We retain information for as long as necessary to fulfill the stated purposes, provide the service, meet legal obligations, and protect rights. The specific period may vary by data type, integration, and contract. We use reasonable technical and organizational measures to protect data against unauthorized access, loss, alteration, or disclosure. No system connected to the internet can be guaranteed absolutely secure.

8. Your rights and how to exercise them

Under the LGPD, you may request confirmation of processing, access, correction, anonymization, blocking, deletion, portability where applicable, information about sharing, review of automated decisions, and withdrawal of consent. Email contato@cloudxm.com.br with the subject “Privacy — data subject request”. We may request proportionate information to verify your identity and locate the data. You may also submit a request to Brazil’s National Data Protection Authority (ANPD).

9. Data deletion and data received from Meta

To request deletion of personal data processed by CloudXM, email contato@cloudxm.com.br with the subject “Data deletion — Meta/CloudXM”. Include your name, the email associated with the interaction or account, the application/integration name, and, if known, your Meta account or business identifier. Do not include passwords, access tokens, or other secrets. Describe the data or connection you want deleted; CloudXM may request identity verification before processing the request.

After verification, CloudXM will delete or anonymize data that does not need to be retained due to a legal obligation, the exercise of legal rights, or another lawful retention ground. Where the integration allows, also revoke the application’s access in your Meta account settings. Revocation stops future access but does not replace a deletion request to CloudXM; data retained by Meta itself must be addressed directly with Meta.

10. Children and teenagers

CloudXM’s business services are not directed to children. If you believe a child’s data has been sent to CloudXM without appropriate authorization, contact us using the details in this Policy so we can assess the situation.

11. Changes and contact

We may update this Policy to reflect changes to our services, processing, or applicable law. The current version and its update date will be posted on this page. Questions and requests: contato@cloudxm.com.br, CLOUDXM TECNOLOGIA LTDA., Rua Apiacás, 621, apartment 71, Perdizes, São Paulo/SP, Brazil.