Skip to content

LGPD

This is a courtesy translation. In case of any discrepancy, the Portuguese version prevails.

FFID's commitment to the General Data Protection Law

Law 13.709/2018 — Last updated: March 29, 2026

Our Commitment

FFID is committed to protecting the personal data of all data subjects who interact with our platform, in full compliance with the General Data Protection Law (Law 13.709/2018 — LGPD, Brazil's data protection law).

As official Meta providers for the WhatsApp Business API, we adopt the highest security and privacy standards, ensuring that your customers' data is handled with transparency, security and respect.

Legal Bases We Rely On

We process personal data on the basis of the following legal grounds set out in Art. 7 of the LGPD:

Consent (Art. 7, I)

Sending marketing messages via WhatsApp, collecting data for promotional campaigns and using non-essential cookies.

Performance of a contract (Art. 7, V)

Processing of data necessary to provide the contracted services (AI Agents, credit analysis, scheduling).

Legitimate interest (Art. 7, IX)

Improving services, analyzing platform performance, preventing fraud and information security.

Legal obligation (Art. 7, II)

Retention of records under the Marco Civil da Internet, and tax and regulatory obligations.

Your Rights (Art. 18 of the LGPD)

Confirmation and Access

Confirm whether we process your data and obtain a copy of the personal data we hold about you.

Correction

Request the correction of incomplete, inaccurate or outdated personal data.

Deletion

Request the deletion of personal data processed on the basis of your consent.

Portability

Receive your data in a structured format for transfer to another provider.

Anonymization and Blocking

Request the anonymization or blocking of unnecessary or excessive data.

Withdrawal of Consent

Withdraw consent previously given, at any time and at no cost.

How to Exercise Your Rights

To exercise any of the rights above, send your request to our Data Protection Officer (DPO):

Request Channel

What to include in your request:

  • - Full name
  • - Registered email or phone number
  • - Description of the right you wish to exercise
  • - Identification document (for identity verification)

Response times:

  • - Acknowledgment of receipt: within 2 business days
  • - Full response: within 15 business days, in accordance with Art. 18, §5 of the LGPD
  • - Complex requests may require additional time, with justification

Security Measures

We implement appropriate technical and organizational measures to protect personal data:

Encryption in transit (TLS 1.2+) and at rest (AES-256)
Multi-factor authentication (MFA) for platform access
Enterprise infrastructure (AWS/GCP) with SOC 2 certifications
24/7 monitoring and intrusion detection
Least-privilege policy for data access
Regular security testing and pentesting
Documented incident response plan
Periodic staff training on the LGPD

National Data Protection Authority

If you believe that the processing of your personal data violates the LGPD, you have the right to file a complaint with the National Data Protection Authority (ANPD):

  • Website: www.gov.br/anpd
  • Recommendation: Before contacting the ANPD, get in touch with us so we can resolve your request directly.

Data Protection Officer (DPO)

  • Email: [email protected]
  • Address: Rua Cel. José Eusébio, 95 — Casa 13, Higienópolis, São Paulo/SP — CEP 01239-030
  • Legal Name: Fulfilling Inteligência e Desenvolvimento Ltda.
  • CNPJ: 30.533.081/0001-56