Commitment to the LGPD
1. What is the LGPD?
The LGPD (Lei Geral de Proteção de Dados) is the Brazilian law that regulates the processing of personal data, giving citizens more privacy and control over their information.
Main objectives
- Protect citizens' personal data
- Ensure transparency in processing
- Establish data-subject rights
- Define company responsibilities
Protected data
- Identification information
- Contact and location data
- Behavioral information
- Sensitive data (when applicable)
In force since
2. Your rights as a data subject
The LGPD grants data subjects a series of rights:
Confirmation and access
Know whether processing exists and access your data.
Correction
Correct incomplete, inaccurate or outdated data.
Deletion
Request deletion of unnecessary or excessive data.
Portability
Receive your data in a structured, commonly used format.
Withdrawal of consent
Withdraw consent at any time.
Information
Know with whom your data has been shared.
Data-subject channel
3. How Bywork complies with the LGPD
Data governance
A designated Data Protection Officer (DPO) and internal privacy policies.
Transparency
A detailed Privacy Policy and a direct channel for questions.
Information security
Encryption, access control and continuous monitoring.
Incident management
An incident-response process and communication to data subjects and the ANPD.
4. Legal basis for processing
Every data processing at Bywork has a specific legal basis under the LGPD:
| Legal basis | Application at Bywork | Examples |
|---|---|---|
| Consent | Marketing communications and optional analytics | Newsletter, analytics cookies |
| Performance of a contract | Delivery of contracted services | Projects, technical support |
| Legal obligation | Tax and regulatory requirements | Invoices, accounting |
| Legitimate interest | Service improvement and security | Usage analytics, fraud prevention |
5. Types of data we process
Identification
- Full name
- Phone / WhatsApp
Professional data
- Company and role
- Company website
- Area of activity
Browsing
- IP address
- Cookies and similar technologies
- Device information
Data you send
- Contact messages
- WhatsApp requests
- Contracted project content
Sensitive data
6. Security measures
Encryption
Data protected in transit (TLS) and at rest.
Access control
Least-privilege access, strong authentication and auditing.
Monitoring
Anomaly detection and regular backups.
7. International transfers
When it happens
When using cloud and AI providers with servers outside Brazil.
Safeguards
- Providers with LGPD-equivalent protection
- Contractual data-protection clauses
- Prohibition of use for model training
8. How to exercise your rights
Contact us
Send your request to our data-subject channel.
dpo@bywork.ai
Identify yourself
Provide information that lets us verify your identity.
Describe the request
Specify which right you want to exercise and the context.
Wait for the response
We review and respond at no cost.
Deadline: up to 15 business days
9. Data-subject channel and DPO
Bywork has appointed a Data Protection Officer (DPO) as the point of contact between you, the company and the Brazilian National Data Protection Authority (ANPD).
When to reach the DPO
- Exercise rights under the LGPD
- Clarify questions about your data
- Report a potential data breach
DPO responsibilities
- Handle data-subject requests
- Liaise with the ANPD when needed
- Monitor compliance with the law
10. Contact
For matters related to the LGPD and data protection, contact us:
Bywork Tecnologia LTDA
LGPD matters
Data Protection Officer (DPO)
dpo@bywork.aiPrivacy and data protection
privacidade@bywork.ai