Privacy Policy

Lado A is the brand of 11.449.616 GABRIEL PEDROSO CESA, registered under Brazilian CNPJ 11.449.616/0001-60, headquartered in Caxias do Sul/RS, Brazil. In this policy, “Lado A”, “we” and “us” refer to this company.

This policy explains how we process personal data on the ladoa.me website and in the solutions we build and operate for our clients, including integrations with Meta products: WhatsApp Business Platform, Facebook, Instagram and Threads.

• We are the controller of the data of people who visit our website, contact us or hire our services.
• We are a processor when we handle data on behalf of a client, for example when sending and receiving messages through the client’s WhatsApp or publishing content to the client’s social media accounts. In these cases the client is the controller and decides how the data is used.

• Website browsing: pages visited, device, browser, approximate location and analytics cookies (Google Analytics).
• Business contact: name, email, phone number, company and anything you write to us.
• Meta integrations, when a client connects their accounts: account identifiers (WhatsApp Business account, phone number, Facebook Page, Instagram or Threads professional account), access tokens granted by the client, messages and files exchanged through the client’s channels, delivery status, message templates, scheduled or published content and basic metrics of those posts.

• Providing and supporting the contracted services (performance of a contract).
• Answering inquiries and preparing proposals (pre-contractual steps).
• Protecting our services against fraud, abuse and security incidents (legitimate interest).
• Complying with legal, tax and regulatory obligations (legal obligation).
• Measuring website audience to improve it (legitimate interest or consent, according to your cookie settings).

• We use this data only to perform what the client requested: sending and receiving messages, managing message templates, scheduling and publishing content, and showing the results of these actions.
• We do not sell, rent or transfer this data.
• We do not use it for our own advertising, to build profiles of people or to train artificial intelligence models.
• We comply with the Meta Platform Terms and the WhatsApp Business policies. Clients can revoke our access at any time (see Data deletion).

We share data only with providers that help us deliver our services, and only as much as needed:

• hosting and cloud infrastructure providers;
• Cloudflare, for website delivery and attack protection;
• Meta Platforms, as part of the integrations the client requests;
• Google, for website audience analytics;
• artificial intelligence providers, only when the client enables features that rely on them.

We may also share data with public authorities when required by law. We do not sell personal data.

Some of these providers process data outside Brazil, such as in the United States. In these cases we adopt the safeguards set out in article 33 of the LGPD, such as contractual clauses.

• For as long as the relationship with the client lasts and, afterwards, for the period required by law (for example, tax records).
• Access tokens are discarded as soon as the client disconnects the account or the contract ends.
• After termination, other data is deleted or anonymized within 30 days.

We use encrypted connections (HTTPS), access restricted by person and role, protected credential storage, access logs and backups. No system is infallible: in case of a relevant incident we will notify the affected people and the Brazilian data protection authority (ANPD), as required by law.

Under the LGPD (article 18) you may request: confirmation that we process your data; access; correction; anonymization, blocking or deletion of unnecessary data or data processed unlawfully; portability; information about who we share it with; and withdrawal of consent.

To exercise these rights, write to gabriel@ladoa.me. We reply within 15 days. If the request concerns data we process on behalf of a client, we forward it to the client and help them respond.

Step-by-step instructions to disconnect accounts and request deletion are on the Data deletion page.

We use Google Analytics cookies to understand how the website is used. You can block them in your browser settings without affecting navigation.

Our services are aimed at businesses and are not intended for people under 18. We do not knowingly collect children’s data.

Data protection officer: Gabriel Pedroso Cesa, gabriel@ladoa.me. You may also file a complaint with the Brazilian data protection authority (ANPD).

We may update this policy. The current version is always available on this page, with the date of the last update.