← Back to website

Privacy Policy

In compliance with the LGPD (Law 13.709/2018) — Updated in July 2026

1. Data Controller

Suite 360 Desenvolvimento de Sistemas LTDA
CNPJ: 63.646.678/0001-66
R. Osvaldo Cruz, 324 - Suite 03, Centro, Feira de Santana - BA, 44001-288, Brazil
Email: contato@suite360.com.br

2. Data Collected

We collect the following personal data through the website's contact form:

• Full name
• Email
• Phone number
• Company name
• Industry
• Message (free text)

We also automatically collect browsing data (cookies, IP, browser) through Google Analytics for statistical purposes.

3. Purpose of Processing

Personal data is used to:

• Respond to demo requests and inquiries
• Send information about Suite360
• Improve the user experience on the website
• Generate anonymous usage statistics

4. Legal Basis

Data processing is carried out based on the consent of the data subject (Art. 7, I of the LGPD) when voluntarily filling out the contact form, and on the legitimate interest of the controller (Art. 7, IX) for browsing data.

5. Data Processing via WhatsApp Business API

Suite360 acts as a data processor when processing WhatsApp Business API messages on behalf of its clients (controllers). In this context:

• Messages exchanged between our clients and their contacts are processed and stored for customer service history, reporting and legal compliance purposes
• Message data includes: phone number, contact name, message content (text, images, documents, audio and video), date and time, and delivery status
• Messages are stored on secure servers with encryption and restricted access, for the period necessary for service or as defined by the controlling client
• Meta Platforms, Inc. (operator of the WhatsApp Business Platform) acts as a sub-processor, in accordance with their own terms of service and privacy policy
• Message data is not used by Suite360 for its own purposes, marketing or sharing with third parties

6. Sharing

Personal data is not sold or shared with third parties, except:

• Amazon Web Services (AWS SES) — for sending transactional emails
• Amazon Web Services (AWS S3) — for secure file and media storage
• Meta Platforms / WhatsApp — for sending and receiving messages via WhatsApp Business API
• Google Analytics — for statistical browsing analysis

7. Storage and Security

Data is stored on secure servers with encryption and restricted access. We adopt technical and administrative measures to protect data against unauthorized access, loss or destruction.

8. Data Subject Rights

In accordance with the LGPD, you have the right to:

• Confirm the existence of processing of your data
• Access your personal data
• Correct incomplete or outdated data
• Request the deletion of unnecessary data
• Revoke consent at any time

To exercise your rights, contact us at contato@suite360.com.br.

9. Cookies

We use Google Analytics cookies to collect anonymous browsing data. You can disable cookies in your browser settings.

10. Data Retention and Deletion

Personal data collected through the website is retained as long as necessary for the stated purpose. WhatsApp message data is retained according to the controlling client's policy and can be deleted at any time upon request. After the client's account is terminated on the Platform, message data will be deleted within 90 days.

11. Changes

This policy may be updated periodically. We recommend revisiting it regularly.

12. Data Protection Officer (DPO)

For privacy and data protection matters:
Email: contato@suite360.com.br
WhatsApp: +55 75 98160-8914

13. Suite360 Mobile Apps (Android and iOS)

Suite360 publishes two mobile apps, both available for Android (Google Play) and iOS (App Store):
Suite360 — used by the accounting firm and its staff.
Suite360 Empresas — used by the companies that are clients of the accounting firm. In this app, the accounting firm is the data controller and Suite360 acts as the processor.
In addition to the data already described in this policy, the apps process the following device features and data:

• Sign-in data (both apps): email address or username and password; in Suite360 Empresas, also the access code provided by the accounting firm. Passwords are stored hashed and the session token is kept in the secure storage of your own device (Keychain on iOS, Keystore on Android)
• Device identifiers (both): device model and operating system version, used for app functionality and account security
• App updates (both): the apps query the update service (Expo Updates) to download fixes. We do not use advertising identifiers and do not collect data for advertising purposes
• Camera and photos (Suite360 only): the camera permission is used exclusively when you choose to attach photos to tickets, conversations, or your profile. Images are sent to our servers only when you attach them. The app does not access the camera or photo library in the background
• Push notifications (Suite360 only): we collect the device notification token (via Expo/FCM/APNs) to deliver alerts about tickets, messages, and billing. You can disable notifications in the app preferences or in your system settings
• Biometric authentication (Suite360 only): login via fingerprint or facial recognition (Face ID) is processed exclusively on your device by the operating system. No biometric data is collected, stored, or transmitted to our servers
• Tax and financial data (Suite360 Empresas only): issued electronic service invoices (service description, amounts, taxes, and accounting period), receivables, fees owed to the accounting firm, and the accounting indicators of the user company
• Third-party data provided by the user company (Suite360 Empresas only): legal or personal name, tax ID (CNPJ or CPF), municipal registration, address, email, and phone number of the service recipients, provided by the company itself to issue the invoices
• AI assistant (Suite360 Empresas only): when you use the assistant, the text you write and the data needed to build the invoice are sent to Google Gemini (Google LLC) to generate the suggestion. Audio recorded in the web portal is transcribed by OpenAI (Whisper). Only what is needed to generate the suggestion is sent
• A1 digital certificate (Suite360 Empresas only): the certificate is installed by the accounting firm or by the user company and used exclusively to sign and transmit invoices to the city tax authorities. It is stored encrypted on our servers and is not sent to the device

Suite360 Empresas does not request access to the camera, location, contacts, or biometrics, and does not send push notifications. In the conversation with the accounting firm, the app requests access to your photos and files only at the moment you choose to attach something: nothing is read or sent without that action. What you attach is transmitted to the firm and stored with the conversation, under the same retention periods described in this policy. All communication between both apps and our servers uses HTTPS. Data processed by the apps follows the same legal bases, security measures, and retention periods described in this policy.

How to request deletion of your data (Suite360 and Suite360 Empresas)
1. Email contato@suite360.com.br with the subject "Data deletion", stating the app (Suite360 or Suite360 Empresas), the accounting firm's access code, and the email address or username of your account.
2. We confirm account ownership through the registered email address.
3. We complete the deletion within 15 days and reply to confirm.

What is deleted: the account and its credentials, the link between the user and the companies, the service recipients you registered, invoice drafts that were never transmitted, and your conversations with the AI assistant.
What is kept, and why: electronic service invoices already issued, the corresponding tax documents, and related financial records are kept for the period required by Brazilian tax law (as a rule 5 years), because they are documents of mandatory retention — for the company itself and for the tax authorities — and cannot be erased on request. After that period they are deleted.

In Suite360 Empresas the accounting firm is the data controller: to exercise LGPD rights, contact your accounting firm first. Suite360 also handles requests at the email above.