Privacy Policy

1 Who we are and who this policy applies to

Dyamante CRM is a customer service and relationship management platform. This policy applies to the corporate website, the platform available at app.dyamante.com.br and the mobile apps for iOS and Android.

For data provided directly to us, such as when registering an account, requesting a demo or contacting support, Dyamante acts as controller, defining the purposes and means of the processing.

When a customer uses the platform to serve their own contacts, they are the controller of those contacts' data, and Dyamante acts as processor, handling that information according to the customer's instructions and the signed contract.

2 Data we collect

We collect only the data needed to enable access to the platform, provide support, meet legal obligations and improve the user experience.

• Registration data: name, email, phone, company and job title provided at sign-up or in contact forms
• Account and billing data: subscribed plan, details needed for billing and payment history
• Platform usage data: access logs, actions performed, date and time of operations and device identifiers
• Technical data: IP address, browser type, operating system and pages visited
• Communication data: messages exchanged with support and information provided during those conversations
• Data processed on the customer's behalf: contacts, conversations and information they enter into the platform, where we act as processor

3 Purposes of the processing

Personal data is used for the specific purposes described below, and is not processed in ways incompatible with what was communicated to the data subject.

• Create, maintain and authenticate platform access accounts
• Provide the contracted services and make the plan's features available
• Process billing, issue tax documents and administer the contract
• Provide technical support and respond to the requests received
• Ensure the platform's security, prevent fraud and investigate incidents
• Communicate news, updates and product-related content, where appropriate
• Produce aggregated usage statistics to improve the platform
• Comply with legal and regulatory obligations and requests from competent authorities

4 Legal bases

All processing carried out by Dyamante rests on a legal basis set out in the General Data Protection Law (Law No. 13,709/2018).

Performance of a contract underpins the processing needed to deliver the contracted services, including account creation, platform operation and billing.

Compliance with a legal or regulatory obligation covers the retention of records and the issuing of documents required by applicable legislation.

Legitimate interest underpins activities such as fraud prevention, information security and service improvement, always with an assessment of the impact on the data subject's rights.

Consent is used where the purpose requires a specific declaration from the data subject, such as certain marketing communications, and may be withdrawn at any time.

5 Data sharing

Dyamante does not sell personal data. Sharing occurs only where necessary to deliver the service, to meet legal obligations or with the data subject's authorization.

Suppliers acting as Dyamante's processors handle data exclusively according to our instructions and are subject to contractual confidentiality and security obligations.

• Cloud infrastructure and service hosting providers
• Messaging channel providers, such as Meta and approved partners, to enable sending and receiving conversations
• Payment methods and billing services, to process transactions
• Analytics and communication tools used in running the site and support
• Public authorities, where there is a legal request or court order

6 Cookies and similar technologies

The site uses cookies and similar technologies for operation, audience measurement and campaign measurement, including Google Analytics, Meta Pixel and TikTok Pixel.

Details of the cookie categories used and instructions for managing them are in the Cookie Policy.

7 Retention and deletion

Personal data is kept for as long as necessary to fulfil the purposes for which it was collected or for the period required by applicable legislation, whichever is longer.

Once the contract ends, account data may be kept for an additional period to meet legal retention obligations, the regular exercise of rights and any need to evidence transactions.

At the end of the applicable periods, data is securely deleted or anonymized.

8 Information security

We take technical and administrative measures to protect personal data against unauthorized access and against accidental or unlawful destruction, loss, alteration, communication or dissemination.

No system is entirely immune to incidents. Should a significant security incident occur that could pose a risk or harm to data subjects, we will take the appropriate steps and make the communications required by law.

• Encryption of data in transit
• Individual authentication per user, with their own credentials
• Permission control per team and per access profile
• Logs of access and of operations performed on the platform
• Infrastructure hosted with recognized cloud providers

9 Data subject rights

Legislation grants the data subject the right to confirm the existence of processing, access the data, correct incomplete or outdated information, request anonymization, blocking or deletion of unnecessary data, request portability, obtain information about sharing and withdraw consent.

Requests can be sent through the channels stated in this policy. To protect your data, we may ask you to confirm your identity before fulfilling the request.

The privacy portal brings together an explanation of each right and the route to exercising it.

10 Changes to this policy

This policy may be updated to reflect changes to the platform, to legislation or to data processing practices. The current version is always available on this page, with the date it was last updated.

Material changes are communicated through the registered contact channels or by notice on the site.

11 Contact

Questions, requests and complaints relating to personal data can be sent to the data protection officer at [email protected].

You can also reach our team through the chat support available on the site. All requests are logged and answered within the deadlines set out in law.