Privacy Policy
MandaDatabase - Data Protection and Privacy
Document Information
Last updated: March 29, 2026
Version: 1.0
Compliance: LGPD (Law 13.709/2018) and GDPR
1. Introduction
Manda4 Tecnologia Ltda. ("Manda4", "we" or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store and protect your information when you use MandaDatabase.
This policy applies to all MandaDatabase users and complies with Brazil's General Data Protection Law (LGPD) and the European Union's General Data Protection Regulation (GDPR).
2. Information We Collect
2.1 Account Data
- Full name and contact information
- Email address and phone number
- Company information (name, tax ID, address)
- Billing and payment data
2.2 Usage Data
- Access logs and system activity
- IP addresses and device information
- Usage and performance metrics
- Database query frequency
2.3 Bitrix24 Extracted Data
- Leads: contact information, status, source
- Deals: values, stages, responsible parties
- Contacts: personal and communication data
- Companies: corporate and commercial data
- Tasks: descriptions, deadlines, responsible parties
2.4 Integration Data
- Database access credentials (encrypted)
- Synchronization settings
- BI tool connection logs
3. How We Use Your Information
3.1 Service Provision
- Provide and maintain the MandaDatabase service
- Extract and synchronize data from Bitrix24
- Provide structured database for BI connection
- Process and manage your account
3.2 Service Improvement
- Analyze usage and performance for improvements
- Develop new features and functionalities
- Optimize synchronization speed
3.3 Communication
- Send important service notifications
- Provide technical support
- Inform about updates and new features
4. Legal Basis for Processing
- Contract performance: To provide contracted services
- Consent: When you give us specific permission
- Legitimate interest: To improve our services and security
- Legal obligation: To comply with legal requirements
5. Data Sharing
5.1 We Don't Sell Your Data
Manda4 never sells, rents or commercializes your personal data to third parties.
5.2 Authorized Sharing
- Infrastructure Providers: Secure database servers
- Bitrix24: For data extraction via API
- Legal Obligations: When required by law or court order
6. Data Security
Security Measures
- ✓ SSL/TLS encryption for data transmission
- ✓ Dedicated database per client
- ✓ Encrypted access credentials
- ✓ Continuous security monitoring
- ✓ Secure and redundant backups
- ✓ Credential-based access control
- ✓ Data protected in transit and at rest
7. Data Retention
- Account data: During subscription period + 5 years
- Bitrix24 data: While subscription is active (deleted 30 days after cancellation)
- System logs: 2 years for security purposes
- Financial data: 10 years (as per tax legislation)
8. Your Rights
- Access: Request information about your data
- Rectification: Correct incomplete or incorrect data
- Erasure: Request removal of unnecessary data
- Portability: Receive your data in structured format
- Objection: Object to processing in certain situations
- Withdrawal: Withdraw consent at any time
To exercise any of these rights, contact us at [email protected].
9. International Transfers
Some of our service providers may be located outside Brazil. When we transfer data internationally, we ensure adequate protections through approved standard contractual clauses, adequacy certifications, and other legally recognized safeguards.
10. Cookies
MandaDatabase uses cookies and similar technologies to keep you logged in, remember your preferences, analyze service usage and improve security. You can control cookies through your browser settings.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes by email or through MandaDatabase.
12. Data Protection Officer (DPO)
13. Contact
Manda4 Tecnologia Ltda.
Email: [email protected]
Support: [email protected]
Website: https://manda4.com.br