Privacy Policy

Versão em português: sucessia.com.br/privacidade. In case of any divergence, the Portuguese version prevails.

1. Who we are

SUCESSIA is a product of MEMORIAM LTDA, Brazilian taxpayer ID (CNPJ) 66.330.141/0001-80, located at Av. Benjamin Constant, 670, Sala 205, Centro, Lajeado/RS, ZIP 95900-106, Brazil ("SUCESSIA", "we"). This Policy explains how we process personal data on sucessia.com.br and in SUCESSIA solutions, in accordance with Brazil's General Data Protection Law (Law No. 13,709/2018 — LGPD).

We are the controller of data processed on this website and in direct relationships with us. When a client business uses SUCESSIA solutions to serve its own customers, that business is the controller and we act as a processor on its instructions.

Privacy contact: contato@sucessia.com.br.

2. Data we process

Data you send us through the website forms (contact, early access and data subject requests): name, e-mail, company, phone (optional), subject and message, plus the record of your acceptance of this Policy.
Technical data: IP address, date and time, browser and requested pages, logged by our hosting infrastructure for security and abuse prevention. This website does not use advertising cookies or third-party tracking tools.
Customer data of SUCESSIA solutions: account and usage data and any data the client chooses to enter or connect, as set out in the contract.
Data received from connected platforms, when authorized — see section 4.

3. Purposes and legal bases

Answering contacts and requests — pre-contractual steps or legitimate interest (LGPD, art. 7, V and IX).
Providing contracted services — performance of contract (art. 7, V).
Security and fraud/abuse prevention — legitimate interest (art. 7, IX).
Compliance with legal obligations and exercise of rights (art. 7, II and VI).
Handling data subject requests — legal obligation (art. 18).

We do not sell personal data and do not use it for third-party advertising.

4. Data received from Meta platforms (WhatsApp, Instagram and Facebook)

When a client business expressly authorizes the connection of its accounts — for example WhatsApp Business, Instagram professional accounts or Facebook Pages — to SUCESSIA solutions, we receive, through Meta's official interfaces and only within the permissions granted:

identifiers and basic data of the connected accounts and assets (name, ID, business phone number);
messages, comments and interactions exchanged between the client business and people who contact it on those channels, including their profile name, ID and phone number;
technical metadata required for message delivery and status.

How we use it: exclusively to provide the client business with the contracted customer service and communication services — organizing conversations, replying and sending messages on its behalf and with its authorization, and keeping the necessary history. In these cases we act as the client's processor.

What we do not do: we do not sell this data, do not use it for advertising and do not share it with other clients. Use complies with the Meta Platform Terms.

Revocation and deletion: the client business may disconnect its accounts at any time in Meta's settings or by asking us. Anyone may request deletion of their data as described in section 9. After disconnection or contract termination, data received is deleted or anonymized, unless retention is required by law.

We share data only with: (a) infrastructure and technology providers acting as processors under contract (hosting, database, e-mail); (b) platforms connected by the client business, as needed for the service; (c) licensed professionals, when the service requires and with the client's knowledge; (d) authorities, when legally required.

6. International transfer

Some infrastructure providers process data outside Brazil, including in the United States. In such cases we adopt the safeguards provided in the LGPD (art. 33), such as contractual clauses and providers with recognized security standards.

7. Retention

We keep data for as long as needed for the stated purposes. Website form messages are kept for up to 24 months after the last contact, unless there is a contractual relationship or a legal retention requirement. Access logs are kept for at least 6 months (Brazilian Internet Civil Framework, art. 15).

8. Your rights

Under LGPD art. 18 you may request: confirmation of processing; access; correction; anonymization, blocking or deletion of unnecessary or excessive data; portability; deletion of data processed with consent; information about sharing; information about the possibility of not consenting; and revocation of consent. You may also file a complaint with the Brazilian Data Protection Authority (ANPD).

9. How to request deletion of your data

Go to Data deletion and fill in the form, or e-mail contato@sucessia.com.br with the subject "Data deletion".
Tell us the e-mail, phone or profile through which you interacted with us or with the client business.
You will receive a request number. We may ask for additional information to confirm your identity.
We will reply within 15 days. If the data is processed on behalf of a client business, we will inform that business and support it in fulfilling your request.

10. Security

We adopt technical and administrative measures to protect data, such as encryption in transit (HTTPS), permission-based access control, segregation of data between clients and logging of relevant actions. Should a relevant incident occur, we will notify data subjects and the ANPD as required by law.

11. Cookies

This website does not use advertising or analytics cookies. See the Cookie Policy (Portuguese).

12. Children and adolescents

The website and SUCESSIA solutions are not intended for people under 18, and we do not knowingly collect data from children or adolescents.

13. Changes and contact

We may update this Policy; the date of the last update is shown at the top. Questions: contato@sucessia.com.br · MEMORIAM LTDA, Av. Benjamin Constant, 670, Sala 205, Centro, Lajeado/RS, ZIP 95900-106, Brazil.