Privacy Policy
Last updated: April 20, 2026
1. Who we are
RealPrazo is a B2B SaaS platform for task and deadline management operated by GCF TECH LTDA, a Brazilian limited liability company registered under CNPJ 66.201.735/0001-91, headquartered at Av. Américo Buaiz, 501 — Suite 503, East Tower, Enseada do Suá, Vitória/ES, Brazil (ZIP 29.050-911).
Processing of personal data complies with Brazilian Lei Geral de Proteção de Dados Pessoais (LGPD — Law nº 13.709/2018).
2. Personal data we collect
- Account data: name, email, phone number, company name.
- Usage data: projects, tasks, deadlines, task status updates.
- Communication data: WhatsApp messages exchanged within the platform scope.
- Technical data: IP address, device type, browser, access logs.
- Payment data: processed by third-party provider (Asaas); we do not store credit card details.
3. Purpose of processing
- Operation of the platform and delivery of the contracted service.
- Utility notifications (task reminders, status updates, reports).
- Generation of consolidated reports for team leaders.
- Processing of subscription payments.
- Compliance with legal obligations.
- Service improvement via aggregated analytics.
4. Legal basis (LGPD Art. 7)
We rely on: (i) explicit consent of the data subject; (ii) contractual execution; (iii) compliance with legal or regulatory obligations; (iv) legitimate interest where applicable and balanced against the rights of the data subject.
5. WhatsApp integration
RealPrazo uses the official WhatsApp Business Cloud API operated by Meta Platforms Inc. Messaging requires:
- Prior explicit opt-in from the recipient.
- Scope limited to utility messages (task reminders, status updates, reports).
- Immediate opt-out via the keyword "SAIR" (Portuguese for "leave").
- Compliance with the WhatsApp Business Policy.
6. Data sharing
We share personal data only with operational providers (Supabase, Vercel, Meta, Asaas, Resend) strictly to the extent necessary for service delivery. We do not sell personal data. International transfers occur only to providers with adequate data protection safeguards.
7. Retention
Account data: while the contract is active plus 5 years for legal-compliance retention. Communication data: 180 days after the last event. Payment data: as required by tax and civil law (up to 10 years for accounting records).
8. Data subject rights (LGPD Art. 18)
- Access to personal data held by RealPrazo.
- Correction of incomplete, inaccurate or outdated data.
- Anonymization, blocking or deletion of unnecessary or excessive data.
- Data portability.
- Deletion of data processed under consent.
- Revocation of consent at any time.
- Information about third parties with whom data has been shared.
Requests can be submitted to contato@realprazo.com.br.
9. Security
TLS 1.2+ in transit. PostgreSQL with Row Level Security. Credentials stored as salted bcrypt hashes. No credit-card data is stored on our systems. Further details at realprazo.com.br/seguranca.
10. Contact
GCF TECH LTDA
CNPJ: 66.201.735/0001-91
Address: Av. Américo Buaiz, 501 — Suite 503, East Tower, Enseada do Suá, Vitória/ES, Brazil, ZIP 29.050-911
Email: contato@realprazo.com.br