Privacy policy

This Privacy Policy explains what personal data we collect when you use the Workloop Agency website, how we use and protect that information, and what rights you have regarding your personal data.

Our data protection practices are guided by Brazil's General Data Protection Law (Law No. 13,709/2018, the "LGPD") and other applicable privacy and electronic communications laws, including relevant United States requirements where applicable.

In this policy, "Workloop Agency", "Workloop", "we", "us", and "our" refer to We Do Your App Serviços de Tecnologia e Educação Ltda, operating under the commercial brand Workloop Agency, registered in Brazil under CNPJ 52.589.036/0001-56, with its head office at Rua João Cordeiro, 3069, Joaquim Távora, Fortaleza-CE, 60110-535, Brazil.

We operate this website and act as the data controller for the personal information described in this policy.

1. What Data We Collect

Information submitted through our contact forms:

• Name
• Email address
• Phone or WhatsApp number
• Company name (optional)
• Service interests, inquiries, and messages
• SMS communication preferences and consent status

Information submitted through our chat: messages exchanged during conversations and any information you voluntarily provide, such as your name or email address.

SMS communication records: when you opt in to receive SMS communications, we may process:

• Your mobile phone number
• The messaging categories you have authorized
• The date, time, and source of your consent
• Records of consent and withdrawal, including the consent wording presented to you, where recorded
• SMS messages sent and received
• Message delivery and error information
• Opt-out requests and communication preferences

Information about how you reached our website: referral sources, landing pages, and campaign parameters, such as utm_source. This information is temporarily stored in your browser and may be submitted along with your contact form.

Technical information: IP address, browser type, and pages visited. Our hosting providers automatically record this information for security, fraud prevention, and spam protection.

We do not intentionally request sensitive personal information, such as health information, racial origin, religion, or political opinions. Please avoid submitting sensitive information through our forms or chat.

2. How We Use Your Information

We process personal information for the following purposes:

• Responding to your inquiries and understanding your business needs.
• Preparing and sending requested proposals.
• Managing commercial conversations and follow-ups through our CRM.
• Providing services and communicating about ongoing projects.
• Sending service notifications, appointment reminders, lead notifications, missed-call alerts, and order or project status updates where you have authorized SMS communications.
• Sending promotional SMS messages, special offers, and marketing communications where you have expressly opted in.
• Understanding which marketing channels generate inquiries.
• Protecting our website and systems against spam, fraud, and abuse.
• Maintaining communication preferences and consent records.
• Complying with legal obligations.

We do not sell or rent your personal information.

3. Legal Bases for Processing

Under the LGPD, we process personal information based on:

• Pre-contractual measures and contract performance: when you request information, proposals, or contracted services (Article 7, V).
• Legitimate interests: for security, fraud prevention, and appropriate business operations, subject to applicable requirements (Article 7, IX).
• Legal obligations: when processing is required by law (Article 7, II).
• Consent: when we explicitly request your authorization, including for SMS marketing communications (Article 7, I).

Where United States or other applicable laws require specific consent for electronic communications, we seek the required consent before sending those messages.

4. Who We Share Information With

We work with service providers that help us operate our website, manage customer communications, and deliver our services. These may include:

• Website hosting: Vercel.
• Email delivery: Resend.
• Task and project management: ClickUp.
• CRM and support chat: systems hosted on infrastructure contracted by Workloop Agency.
• SMS communication services: providers such as Twilio, used to transmit messages, process delivery information, and manage messaging preferences.
• Electronic document signing: our self-hosted Documenso system, used for executing contracts and recording associated agreements.

These service providers may access personal information only as necessary to deliver their services, subject to applicable contractual and data protection obligations.

We may also disclose information when required by law or by a competent authority.

SMS Privacy and Data Sharing

We do not sell, rent, share, or disclose mobile phone numbers, SMS opt-in information, or SMS consent records to third parties or affiliates for their own marketing or promotional purposes.

Mobile information and SMS consent data may be processed by service providers solely to support the delivery, security, and operation of our messaging services, and not for independent marketing purposes.

Text messaging opt-in data and consent will not be shared with third parties for marketing or promotional purposes.

5. International Data Transfers

Some of our service providers may process or store information outside Brazil, including in the United States.

Where applicable, we use legally permitted safeguards, including contractual data protection obligations, to protect personal information transferred internationally.

6. Cookies and Browser Storage

Our website does not use advertising cookies or third-party tracking cookies.

• We temporarily store visit attribution information in your browser's session storage (sessionStorage).
• Our support chat may use cookies and local storage to maintain conversations across pages.

You may clear or block browser storage through your browser settings. Some features, including chat history, may be affected.

7. Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this policy.

• Contact information is retained as necessary to manage inquiries and business relationships.
• Customer information may be retained throughout contractual relationships and for applicable legal or operational requirements afterward.
• SMS consent records may be retained to demonstrate that communications were authorized.
• Records of SMS opt-out requests may be retained as necessary to prevent further unauthorized messages.
• Other information is deleted or anonymized when it is no longer necessary, unless retention is required or permitted by applicable law.

8. Your Privacy Rights

Under the LGPD, you may request:

• Confirmation of whether we process your information.
• Access to your personal data.
• Correction of inaccurate or outdated information.
• Anonymization, blocking, or deletion of data processed improperly.
• Data portability, where applicable.
• Deletion of information processed based on consent, subject to legal exceptions.
• Information about data sharing.
• Withdrawal of consent.
• Objection to processing that does not comply with applicable law.

Additional privacy rights may apply depending on your jurisdiction.

To exercise your rights, contact us at hello@befree.academy. We may request reasonable identity verification before processing a privacy request.

Brazilian data subjects may also contact the National Data Protection Authority (ANPD).

9. Security

We use reasonable technical and administrative security measures to protect personal information, including HTTPS encryption, restricted access to internal systems, and protected application credentials.

Although no system can guarantee absolute security, we work to prevent unauthorized access, alteration, disclosure, or destruction of personal data.

Where required by applicable law, we will notify affected individuals and the relevant authorities of qualifying security incidents.

10. Children and Teenagers

Our website and services are intended for businesses and professionals.

We do not knowingly collect personal information from individuals under 18 years of age.

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, data practices, or applicable regulations.

The latest revision date will be displayed at the top of this page.

Material changes may also be communicated through our website or other appropriate channels.

12. Contact

For questions about this Privacy Policy, personal data, or privacy rights, contact:

• Workloop Agency: We Do Your App Serviços de Tecnologia e Educação Ltda
• Email: hello@befree.academy
• Website: https://www.workloop.agency/en/

13. SMS Messaging Privacy and Consent

13.1. SMS Messaging Program

Workloop Agency may send SMS messages to individuals who have provided the appropriate consent. Our SMS communications may include:

Marketing messages:

• Service announcements and promotional offers.
• Information about new services.
• Occasional follow-ups with prospective customers who previously contacted us and opted in to marketing SMS.
• Invitations to discuss relevant business opportunities or offers.

Service and operational notifications:

• Updates about contracted services.
• Appointment notifications.
• Project or order status updates.
• Notifications about leads received through customer websites.
• Missed-call alerts.
• Other communications directly related to services requested or contracted.

13.2. How We Collect SMS Consent

We collect SMS consent through explicit, optional checkboxes.

Website contact form: visitors may choose to receive marketing SMS messages by selecting an unchecked consent checkbox in the contact form available at https://www.workloop.agency/en/. Visitors access the form by selecting "Talk to Workloop".

Marketing SMS consent is optional and is not a condition of purchasing services.

Electronic service agreements: customers may separately authorize operational and transactional SMS notifications during electronic contract signing through our Documenso-based signing system.

This consent is separate from marketing consent and from the acceptance of contractual terms.

We maintain records of SMS consent and withdrawal to support compliance and communication preference management.

13.3. Message Frequency

Message frequency varies depending on customer interactions, promotional communications, and service-related events.

Service notifications are generally limited to one SMS per relevant notification or event.

Message and data rates may apply.

13.4. Opting Out of SMS

You may withdraw your consent to receive SMS messages at any time.

Reply STOP to any Workloop Agency SMS message to unsubscribe.

We may also support the following cancellation keywords: UNSUBSCRIBE, END, QUIT, FINISH, CANCEL.

After a valid opt-out request, you will receive a confirmation message and will no longer receive messages covered by the opt-out unless you provide new consent.

You may also contact us to request changes to your communication preferences.

13.5. SMS Support

For assistance with our SMS messaging program, reply HELP to a message from Workloop Agency.

You may also visit https://www.workloop.agency/en/ and use the "Talk to Workloop" contact form.

Additional support keywords may include INFO and SUPPORT.

13.6. SMS Consent and Third-Party Sharing

We respect the confidentiality of your mobile phone number and messaging preferences.

No mobile information, SMS opt-in data, or SMS consent information will be sold or shared with third parties or affiliates for marketing or promotional purposes.

We may use messaging service providers to deliver SMS communications and process related technical information. Such providers are not permitted to use this information for their own promotional marketing.

13.7. Consent Withdrawal and Your Rights

Providing your mobile phone number does not automatically authorize promotional SMS communications.

You may decline marketing SMS without affecting your ability to request or purchase our services.

You may withdraw SMS consent at any time using the opt-out instructions described above.

We will process withdrawal requests in accordance with applicable messaging requirements and maintain the records necessary to honor your preferences.