Privacy Policy

This policy explains how Prumo processes personal data on the prumo-labs.com website and in the Prumo app, in compliance with Brazil’s General Data Protection Law (Law No. 13,709/2018, “LGPD”). This is a translation; if it differs from the Portuguese version, the Portuguese version prevails.

1. Who we are

Prumo is a scheduling, client records and finances service for self-employed professionals. For any privacy matter, including contacting the person in charge of personal data processing, write to contato@prumo-labs.com.

2. Roles in data processing

• Account and service usage data: Prumo is the controller of the data of anyone who creates an account (name, e-mail, sign-in data) and of the technical data needed to run the service.
• Data about each professional’s clients: the professional decides which client data to record and why, and is the controller of that data. Prumo acts as the processor: it processes that data only to provide the service, following the professional’s instructions and this policy.

3. Data we process

Account. Name, e-mail and password. The password is stored only as a hash and is never visible, not even to us.

Sign in with Google. If you choose to sign in with Google, we receive your name, your e-mail and whether it is verified from Google, plus your profile picture, if any. We do not access contacts, files, calendar or any other data in your Google account.

Service usage. Workspaces, services offered, working hours, appointments, charges and administrative notes that you record.

The professional’s clients. Name, e-mail and phone number of clients, recorded by the professional or by the client when accepting an invitation.

Notifications. Preferred channel and, if you allow notifications on your device, the delivery identifier provided by the browser.

Technical data. IP address, date and time of access and session data, used to keep you signed in, protect the service and keep access records as required by Brazil’s Internet Civil Framework (Law No. 12,965/2014). Our system logs do not store names, e-mails, phone numbers or amounts.

Prumo is not designed to store sensitive personal data (art. 5, II, LGPD) and offers no fields for it. Do not include this kind of information in notes.

4. Why we use data and on which legal basis

Purpose	Legal basis (art. 7, LGPD)
Create and keep the account, provide the service and send schedule notices	Performance of a contract
Protect the service, prevent fraud and abuse and fix failures	Legitimate interest
Keep access records and comply with orders from authorities	Compliance with a legal or regulatory obligation
Send notifications to your device	Consent, which you can withdraw at any time
Reply to messages sent to our contact e-mail	Legitimate interest or pre-contractual steps

We do not use your data for advertising, we do not sell personal data and we do not build profiles for marketing.

5. Data received from Google

Prumo’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use this data only to create your account and let you sign in; we do not transfer it to third parties, except to the providers listed below to run the service or when required by law, and we do not use it for advertising.

6. Who we share data with

We share data only with providers that help us run the service, to the extent needed:

• Cloudflare: hosting of the website and the app, network and forwarding of our contact e-mail.
• Neon: database.
• Google: sign-in, when you choose to sign in with Google.
• Transactional e-mail provider: sending invitations and notices by e-mail.
• Browser notification services (such as those from Apple, Google and Mozilla): delivering notifications to your device, when you allow them.

We may also share data when required by law or by an order from a competent authority.

7. International transfer

Some providers may process data outside Brazil. In those cases, the transfer follows art. 33 of the LGPD, with contractual safeguards compatible with Brazilian law.

8. How long we keep data

We keep data while the account is active and for as long as needed for the purposes in this policy. Access records are kept for 6 months, as required by the Internet Civil Framework. After an account is closed, we delete or anonymize its data, except what the law requires us to keep.

Data about clients recorded by a professional follows the professional’s instructions, within these limits.

9. Security

We take technical and administrative measures to protect data, including: always-encrypted connections (HTTPS), isolation between workspaces enforced in the database itself, passwords stored only as hashes, role-based permissions and system logs without personal data. If a security incident may cause relevant risk or harm, we will notify the affected people and Brazil’s National Data Protection Authority (ANPD).

10. Your rights

At any time you may request: confirmation that we process your data; access; correction of incomplete, inaccurate or outdated data; anonymization, blocking or deletion of unnecessary data or data processed in breach of the LGPD; portability; deletion of data processed based on consent; information about who we share data with; and review of consent (art. 18, LGPD).

To exercise these rights, write to contato@prumo-labs.com. If you are a client of a professional who uses Prumo, requests about the data they recorded should be made to them, as the controller; we will help them answer. You may also file a complaint with the ANPD.

11. Cookies

The app uses only essential cookies to keep your session. The prumo-labs.com website uses no cookies or tracking tools.

12. Children and adolescents

Professional accounts are only for people aged 18 or over. When a professional records data about a child or an adolescent, it is up to them to obtain the consent of a parent or legal guardian, as required by art. 14 of the LGPD.

13. Changes to this policy

We may update this policy. The date of the version in force appears at the top of the page, and relevant changes will be announced in the app or by e-mail before they take effect.