This is a convenience translation; the Portuguese version prevails. Read the Portuguese version.

Privacy Policy

Last updated: July 13, 2026

This Privacy Policy describes how LayerDesk Tecnologia LTDA ("LayerDesk", "we") collects, uses, stores and protects the personal data of anyone who uses the website layerdesk.com.br and the application app.layerdesk.com.br ("Platform"). We process your data in compliance with the Brazilian General Data Protection Law (Law No. 13,709/2018 — LGPD).

1. Who is the data controller

2. What data we collect

We collect only the data needed to operate the Platform:

• Registration data: name, e-mail, phone (optional) and password (stored in encrypted form by the authentication provider — we do not have access to the password in plain text).
• Google sign-in (optional): if you choose to sign in with Google, we receive the name, e-mail and profile picture provided by your Google account. We do not access your Google password or any other data in your account.
• Company data: provided by you to operate the system and, when you decide to subscribe, tax data (CNPJ or CPF, legal name, registrations, address) needed to issue tax documents.
• Usage and operational data: information you record in the Platform (customers, quotes, orders, production, finances, etc.), used exclusively to provide the service to your company.
• Technical and security data: access logs and the minimum information needed to protect against fraud and abuse.

3. Why we use your data

• To create and authenticate your account and allow access to the Platform;
• To provide the contracted management service (system features);
• To process your subscription and issue tax documents, when applicable;
• To send operational and support communications regarding your account;
• To ensure security, prevent fraud and comply with legal obligations.

4. Legal basis for processing

We process your data on the basis of the performance of the contract and to take steps at your request (art. 7, V, of the LGPD), compliance with a legal or regulatory obligation (art. 7, II), legitimate interest for the security and improvement of the service (art. 7, IX) and, where applicable, your consent (art. 7, I) — for example, for marketing communications or optional sharing with partners.

5. Isolation and sharing

Each company's data is kept isolated and segregated by account. We do not sell your data. We may share data only with:

• Infrastructure and service providers strictly necessary to operate the Platform (for example, cloud hosting, authentication, payment processing and tax-invoice issuance), which act as processors under our instructions;
• Authorities, when required by law or court order;
• Commercial partners, only if you expressly authorize it (opt-in), and you may revoke that authorization at any time.

6. Google sign-in

When you use "Sign in with Google", authentication is handled by Google and we receive only the basic data from your profile (name, e-mail and picture). We use this data solely to create and identify your account in LayerDesk. We do not post anything to your Google account and do not access other Google services on your behalf.

7. Cookies and measurement tools

Inside the Platform (app.layerdesk.com.br), we use only the technical cookies and storage needed to keep your session authenticated and for the secure operation of the system.

On our marketing website (layerdesk.com.br), we also use Google measurement and advertising tools — Google Analytics and Google Ads — to understand, in aggregate, how visitors arrive and browse and to measure the effectiveness of our campaigns. These tools may use cookies and collect browsing information (such as pages visited and the source of the visit). You can disable cookies in your browser settings; for Google Analytics, Google also offers an opt-out add-on at tools.google.com/dlpage/gaoptout.

8. Security

We adopt technical and organizational measures to protect your data, including encryption in transit, role-based access control, data isolation per company and monitoring against unauthorized access. No system is 100% infallible, but we work continuously to reduce risks.

9. Retention and deletion

We keep your data while your account is active and for as long as needed to comply with legal obligations (for example, tax obligations). Once the relationship ends, the data is deleted or anonymized, except where mandatory retention is required by law.

10. Your rights (LGPD)

At any time, you may request: confirmation that processing exists; access to the data; correction of incomplete or outdated data; anonymization, blocking or deletion of unnecessary data; portability; information about sharing; and withdrawal of consent. To exercise your rights, write to contato@layerdesk.com.br.

11. Data Protection Officer (DPO) and contact

For questions about this Policy or about the processing of your data, contact us at contato@layerdesk.com.br.

12. Changes to this Policy

This Policy may be updated to reflect legal or service changes. We will publish the current version on this page, with the date of the last update. We recommend reviewing it periodically.