Privacy Policy
This Privacy Policy explains how Rangel Tecnologia e Informação Ltda (trade name Rangel Tech), CNPJ 65.505.647/0001-10, Av. Rio Grande do Sul, 343, room 03, Setor Campinas, Goiânia/GO, Brazil, ZIP 74520-070 ("we", "us") collects, uses and protects data through LUAR, a customer-service and AI-agent platform used by businesses ("clients"). Contact for privacy matters: comercial@rangeltech.net.
1. Two roles
- For data about people who contract LUAR (client company and its users), we are the controller.
- For data about our clients' end customers (people who message a client through WhatsApp, Instagram, Facebook Messenger, TikTok, website or e-mail), the client is the controller and we are the processor: we process that data only to provide the service and under the client's instructions. End customers who want to exercise their rights should contact the business they spoke with first; we help the business respond.
2. Data we receive
- Account and usage: name, e-mail, phone, company, role, password (stored with one-way hashing), access logs (time, IP address, browser), actions in the platform, billing records.
- Conversations: message content, audio, images, video and files exchanged through connected channels; the contact's identifier on the channel (for example, phone number or profile name), labels, internal notes, conversation history.
- Client content: files uploaded to agent skills, credentials the client registers for agents to use (stored encrypted), files in the client's workspace.
- Connected channels: Instagram (Business Login), Facebook Messenger, WhatsApp (Cloud API and Embedded Signup) and TikTok, when enabled for a client. We receive only the information the source platform makes available for the contracted feature (for example, incoming messages, sender identifier and profile name), with the client's authorization.
- Image and voice (studio features): only image, face or voice supplied by the user, who declares having the right to use it. We do not allow third-party likeness without consent.
3. How we use data
To provide the contracted service (customer service, AI agents, workspace); to authenticate users, prevent fraud and keep the platform secure; for billing and legal obligations; for support; and to improve the platform using aggregated data that does not identify people. Messages are never used for advertising, never sold, and not used to train models outside the AI provider configured for the client.
4. Use of artificial intelligence
Messages and files sent to agents may be processed by third-party language-model providers or by models we host, only to produce the reply or perform the requested task. We configure providers not to use content for training whenever the provider offers that option. When a conversation is handled automatically by AI, the end customer is informed. The client can enable handoff to a person at any time, and the end customer can ask to speak with a human agent. AI replies may contain mistakes.
5. Sharing
We do not sell personal data. We share it only with: infrastructure providers (hosting, storage, backup, e-mail) acting as our processors; AI model providers (section 4); the messaging platforms (Meta, TikTok, WhatsApp, and others) as needed to send and receive messages; payment providers when billing is active; and authorities when required by law.
6. International transfers
Some providers are located outside Brazil. We apply the safeguards of the Brazilian General Data Protection Law (LGPD, Law 13,709/2018, art. 33), such as contractual clauses and providers with an adequate level of protection.
7. Security
HTTPS in transit, encrypted secrets and channel tokens, per-client data isolation (a client can never access another client's data or credentials), role-based access, audit logs and backups.
8. Retention
While the contract is active and afterwards for the period required by law and for legal defense (generally up to 5 years for tax and billing data). Conversations and files are kept while the contract lasts; after cancellation the client may export its data within 30 days, after which we delete or anonymize it unless law requires retention. Security logs: up to 6 months. Backups are overwritten within up to 30 additional days.
9. Your rights
Under LGPD art. 18 you may request confirmation of processing, access, correction, anonymization, blocking or deletion, portability, information about sharing, withdrawal of consent, and review of decisions made solely by automated processing. Write to comercial@rangeltech.net with the subject "Privacy". We reply within 15 days. You may also complain to Brazil's data protection authority (ANPD).
10. Deleting data and revoking access
A client can disconnect any channel at any time in LUAR settings, or by revoking the app's access directly in its Facebook, Instagram or TikTok account settings. After revocation we stop receiving new messages from that channel immediately. For deletion requests see the Data Deletion page.
11. Children
LUAR is intended for businesses and professionals and is not directed to people under 18.
12. Changes
We may update this policy. Material changes will be notified by e-mail or in the platform, and the date above will change.