Your rights are protected
1. Information we collect
Bywork collects only the data needed to present its services, respond to people who reach out and deliver the projects it is hired for. The categories vary according to your interaction:
Identification data
- Full name
- Phone / WhatsApp
- Company, role and website
Data you send us
- Contact form messages
- Requests via the WhatsApp widget
- Information about your challenge or process
Browsing data
- IP address
- Cookies and similar technologies
- Device information
- Approximate geographic location
Project and integration data
- Data from contracted systems and automations
- APIs and integrations you authorize
- Content required to deliver the project
2. Purpose of processing
We use the data collected solely for the following legitimate purposes:
- Service delivery: building and delivering the automations, custom systems, AI products and agents you contract.
- Communication and support: responding to requests, providing diagnostics and support, and sending relevant service updates.
- Personalization: tailoring the conversation and proposal to your business.
- Legal obligations: complying with applicable tax and regulatory requirements.
- Security: preventing fraud, detecting improper access and preserving data integrity.
3. Legal basis for processing
Processing is grounded on the following legal bases set out in article 7 of the LGPD:
Consent (item I)
For marketing communications and non-essential analytics cookies.
Performance of a contract (item V)
To provide the contracted services and related support.
Legal obligation (item II)
To comply with tax and regulatory obligations.
Legitimate interest (item IX)
For service improvement, security and fraud prevention.
4. Data sharing
Your data is not sold
We may share data, to the minimum necessary, with the following categories of third parties:
- Infrastructure providers: hosting and database (e.g. Vercel and Supabase), with data preferably stored in Brazil.
- AI providers: Anthropic and OpenAI for model processing, under contracts that prohibit retaining content for training.
- Payment processing: Asaas, for billing and invoicing.
- Communication tools: email and messaging services used for support.
- Competent authorities: when required by law, court order or public authority request.
5. Security and storage
We adopt technical and organizational measures to protect data, including:
Encryption
Data protected in transit (TLS) and at rest.
Access control
Least-privilege access, strong authentication and access logging.
Monitoring
Anomaly detection and regular backups.
Data location: data is stored preferably in Brazil. When we use international cloud services, we ensure protection equivalent to that required by the LGPD.
6. Your rights as a data subject
Under article 18 of the LGPD, you have the following rights over your personal data:
Confirmation and access
Confirm that processing exists and access your data.
Correction
Correct incomplete, inaccurate or outdated data.
Deletion
Request anonymization or deletion of unnecessary data.
Portability
Receive your data in a structured, commonly used format.
Withdrawal of consent
Withdraw consent at any time, with future effect.
Information on sharing
Learn with whom your data has been shared.
How to exercise your rights
7. Data retention
We keep data only for as long as necessary for the stated purposes:
- Contact data: kept while there is a relationship or legitimate interest in providing support.
- Browsing data: analytics cookies for up to 12 months.
- Contractual data: 5 years after contract termination (Civil Code).
- Tax data: 5 years, as required by tax legislation.
8. International transfers
Some data may be processed outside Brazil when we use cloud and AI providers. In those cases:
- We select only providers with a protection standard equivalent to the LGPD.
- We keep contractual clauses for data protection and prohibition of use for model training.
- You may request detailed information about any transfer.
9. Changes to this policy
This Policy may be updated to reflect changes in our services, the law or industry best practices. The current version will always be available on this page, with the last-updated date at the top.
Notice of changes
10. Contact and Data Protection Officer (DPO)
For questions or to exercise any right under the LGPD, contact us:
Bywork Tecnologia LTDA
Specific channels
Privacy
privacidade@bywork.aiData Protection Officer (DPO)
dpo@bywork.aiLegal matters
legal@bywork.ai
We are committed to responding to personal-data requests within 15 business days, as required by the LGPD.