01Who we are
Nexus Dealer Tecnologia Ltda. is the data controller for personal data processed in the scope of this policy (LGPD, Article 5, VI). We operate B2B technology services for corporate clients in Brazil. Operational communications with users authorized by our clients are delivered via WhatsApp, conditional on the user's prior, specific opt-in.
02What data we process
Website visitors
We collect only what is strictly required to operate the site:
- IP address and HTTP headers, kept in operational logs for security purposes.
- No tracking cookies, no analytics, no fingerprinting, no advertising tags.
Users authorized by the client (WhatsApp channel)
When an authorized user agrees to receive communications from Nexus over WhatsApp, we process:
- Full name and phone number with country and area codes.
- Affiliation with the client that authorized the access.
- Content of messages exchanged with Nexus through the channel.
- Channel technical events: receipt, delivery, read, opt-out.
- Operational identifiers tied to the user (provided by the client).
We do not process sensitive data categories (LGPD, Article 5, II). We do not process data of minors.
03Why we process it
- To operate the contracted service: generate and deliver communications to the authorized user.
- To fulfill contractual obligations to the client that authorized the access.
- For audit, information security, fraud prevention, and legal compliance.
- For technical service improvement, using pseudonymized data wherever feasible.
04Legal bases
- Consent (LGPD, Article 7, I), specific to the WhatsApp channel and freely revocable.
- Performance of a contract (Article 7, V), between Nexus and the client, of which the user is a direct beneficiary.
- Compliance with legal or regulatory obligations (Article 7, II), where applicable.
- Legitimate interest (Article 7, IX), for operational security of the channel and the platform.
05Who we share with
We share data strictly with processors that enable the service, under contracts with data-protection obligations:
- Meta Platforms Ireland Ltd. and Meta Platforms Inc. — operator of the WhatsApp Business Cloud API channel. Includes international transfer to the United States.
- Cloud infrastructure providers based in the United States, under operating agreements with data-protection clauses. The detailed and up-to-date list of processors is made available to the data subject upon request to the data officer, in accordance with LGPD, Article 18, VII.
- The client that authorized the user's access — receives aggregated reports of channel adoption and activity, without exposing individual message content.
We do not sell, lease, or transfer personal data to third parties. We do not use personal data to train generic third-party foundation models. We rely on enterprise AI providers under contracts that expressly forbid the use of Nexus data to train generic third-party models.
We do not use one client's data to benefit another: each client is handled in isolation. Any future development involving learning across clients would depend on explicit opt-in, with the right to opt out at any time.
International transfer
The processors above may store or process data on servers outside Brazil, primarily in the United States. Such transfers occur under specific contractual clauses and the mechanisms set forth in Article 33 of the LGPD.
06How long we keep it
- Opt-in user data: for as long as consent stands, plus 6 months after revocation for audit and proof-of-opt-in/opt-out.
- Site and channel technical logs: up to 12 months, for security and fraud prevention.
- Contractual data: for the legally applicable period (typically 5 years after termination of the contract with the client).
07Your rights
The LGPD grants the data subject, in Article 18:
- Confirmation of processing.
- Access to data.
- Correction of incomplete, inaccurate, or outdated data.
- Anonymization, blocking, or deletion of unnecessary data or data processed in non-compliance.
- Portability to another provider.
- Deletion of data processed under consent.
- Information about sharing.
- Revocation of consent at any time, free of charge.
To exercise any of these rights, write to security@nexusdealer.com.br. We respond within 15 days.
How to leave the WhatsApp channel
Send any of the following keywords in any message of the Nexus chat, case-insensitive: SAIR, PARAR, STOP, EXIT, UNSUBSCRIBE, SALIR, BAJA, STOPP or ABMELDEN. We register the opt-out automatically and stop sending. An automatic confirmation follows.
08Security
We apply technical and organizational controls proportional to the risk: encryption in transit (TLS 1.2+), encryption of secrets at rest, least-privilege internal access, mandatory multi-factor authentication, audit logs, and periodic access reviews. In the event of an incident with material risk to data subjects, we notify the Brazilian Data Protection Authority (ANPD) and affected subjects within the legal deadline.
09Cookies and similar technologies
This institutional site uses no tracking cookies, no analytics, and no advertising tags. There is no cookie banner because there are no cookies to accept.
10Children and adolescents
The service is aimed at adult professionals working at our corporate clients. We do not intentionally process data of children or adolescents. If such processing is identified, we delete the record and notify the client.
11Changes to this policy
Material updates will be published at this same URL, with a new effective date at the top. For material changes, we proactively notify opt-in users over the usual channel before the change takes effect.
12Data officer and contact
Data Protection Officer (DPO): Leandro Ygor Loli.
Email: security@nexusdealer.com.br.
Mailing address: Av. Paulista 171, 4th floor · Bela Vista · São Paulo/SP · 01.311-904 · Brazil.
Document published on June 1, 2026. In case of conflict between translated versions and the original Brazilian Portuguese version, the Brazilian Portuguese version published at /legal/privacidade prevails.