Privacy Policy
This is a translation of the Portuguese original, provided for your convenience. If there is any difference, the Portuguese version prevails.
This policy explains what personal data meupabx.online processes, what it is used for, who it is shared with, and what your rights are. It follows Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018).
1. Who is responsible
meupabx.online is operated by Rei Rolim Servicos e Tecnologia Ltda, CNPJ (Brazilian tax ID) 41.551.584/0001-70, headquartered at Rua Olimpiadas 205, 4º andar CJ. 44, Vila Olimpia, CEP 04551-000, São Paulo/SP, Brazil.
For privacy matters, contact our data protection officer by email at dpo@meupabxonline.com.br.
2. Who this policy applies to
- Anyone who visits the website.
- Anyone who requests a quote through the configurator or talks to our team.
- Customers and the people who use the extensions.
- People who call our customers or receive calls from them. In that case, the customer decides about the data; we process the data on the customer's behalf (see section 5).
3. What data we process
When you request a quote. Name, WhatsApp, email, CPF or CNPJ (Brazilian tax ID), company name, the configuration you built (extensions, numbers, credit, call-handling messages), and any comments you write.
When you talk to us. The content of conversations by phone, WhatsApp, and email, and the contact details used.
When you are a customer. Registration and billing data for the company and the person responsible, and data about extension users (name, email, and extension number). Payments are processed by payment companies: we do not store your full card number.
When the service is used. Call records (originating and destination numbers, date, time, and duration), recordings, voicemail messages, and call-handling settings.
When you browse the website. IP address, device and browser type, pages visited, and cookies (see section 10).
We do not ask for sensitive data, such as health, religion, or biometric data. The service is intended for businesses and is not directed at anyone under 18.
4. What we use the data for
| Purpose | Legal basis (LGPD) |
|---|---|
| Prepare and send the quote you requested and talk to you about it | Steps prior to a contract, at your request |
| Activate, set up, and provide the service, including support | Performance of a contract |
| Bill, issue invoices, and comply with tax and regulatory obligations | Legal or regulatory obligation |
| Keep access logs for the website and the dashboard | Legal obligation (Marco Civil da Internet, Brazil's internet law) |
| Protect the service and prevent fraud and misuse | Legitimate interest |
| Measure website use and improve the pages | Legitimate interest or consent, depending on the cookie |
| Send news and offers | Consent, which you can withdraw at any time |
| Defend rights in legal proceedings | Regular exercise of rights |
We do not use your data for automated decisions that affect you, and we do not sell personal data.
5. Our customers' calls and recordings
The calls, recordings, and voicemail messages that go through meupabx.online belong to the customer who signed up for the service. The customer decides whether to record, how long to keep the material, and how to use it. In LGPD terms, the customer is the controller and meupabx.online is the processor. The rules of this relationship are in the Service Agreement.
So, if you called a company that uses meupabx.online and want to know about your data, contact that company first. We help the customer respond to your request.
Our team only accesses recordings and call records when necessary for support or to comply with the law.
6. Who we share data with
We share data only with those who need it for the service to work:
- Amazon AWS, which hosts the platform, in the São Paulo region;
- 3CX, the provider of the phone platform and the apps;
- telephone carriers, to complete calls and port numbers;
- payment companies and banks, to process charges;
- customer service, customer management, and email tools used by our team;
- WhatsApp, when you choose to talk to us there;
- public authorities, when required by law or by a court order.
These providers may only use the data to provide the service we hired them for.
7. Data outside Brazil
The phone platform, with the recordings and call records, is hosted in Brazil. Some supporting providers, such as customer service, email, and messaging tools, may process data in other countries. In those cases, we require the safeguards set out in the LGPD for international data transfers.
8. How long we keep data
| Data | Period |
|---|---|
| Quote requests that did not become a contract | Up to 24 months after the last contact |
| Customer registration and billing | For the duration of the contract plus 5 years |
| Call recordings | 12 months, or up to 5 years with extended retention |
| Call records | For the duration of the contract plus 5 years |
| Access logs for the website and the dashboard | At least 6 months |
After these periods, the data is deleted or no longer identifies individuals, unless the law requires it to be kept longer. At the end of the contract, the customer can request a copy of the recordings within 30 days.
9. How we protect data
We use access control by username and password, protected connections, backups, and access restricted to the team members who need the data to do their work. No system is completely immune to failures. If an incident occurs that may pose a significant risk to you, we notify you and the Brazilian National Data Protection Authority (ANPD), as required by law.
10. Cookies
The website uses:
- necessary cookies, so that the pages and the configurator work;
- measurement cookies, so that we know how many people visit the website and which pages are viewed most.
You can block or delete cookies in your browser settings. Without the necessary cookies, parts of the website may not work.
11. Your rights
You can request, at any time:
- confirmation that we process your data and access to it;
- correction of incomplete, inaccurate, or outdated data;
- anonymization, blocking, or deletion of data that is unnecessary or processed unlawfully;
- portability of your data;
- deletion of data processed with your consent;
- information about who we share your data with;
- withdrawal of your consent;
- objection to processing you consider irregular.
To exercise these rights, write to dpo@meupabxonline.com.br. We respond within 15 days. We may ask for information to confirm your identity. Some data cannot be deleted while the law requires it to be kept.
If you believe your data has not been handled as it should, you can also contact the ANPD.
12. Changes to this policy
We may update this policy. Each change creates a new version, with a publication date, shown at the top of this page. When the change is significant, we give notice on the website or by email.
This document may be published in other languages. If there is any difference between the versions, the Portuguese version prevails.
13. Contact us
Privacy and personal data: dpo@meupabxonline.com.br.
Other matters: +55 11 3080-3080 (phone and WhatsApp) or meajude@meupabxonline.com.br.