LGPD - Data Protection

Our commitment to the Brazilian General Data Protection Law (Law No. 13,709/2018).

Our commitment

Z-API Omni is committed to protecting the personal data of its customers, partners and end users. We adopt practices and technical measures in compliance with the LGPD to ensure transparency, security and respect for the rights of data subjects.

Roles in data processing

Z-API Omni as Controller

When we collect data from our customers (registration data, payment, platform usage), we act as a data controller, defining the purposes and means of processing.

Z-API Omni as Processor

When we process messages and data on behalf of our customers (end users’ messages), we act as a data processor, handling them according to the customer’s instructions.

Legal bases for processing

We process personal data based on the following legal grounds provided for in the LGPD:

1. Performance of a contract (Art. 7, V): data required to provide the contracted services.
2. Legitimate interest (Art. 7, IX): service improvement, analytics and platform security.
3. Compliance with a legal obligation (Art. 7, II): tax and financial data required by tax legislation.
4. Consent (Art. 7, I): where applicable, such as for sending marketing communications.

Data subject rights

Under Art. 18 of the LGPD, you have the following rights over your personal data:

Confirmation: confirm the existence of data processing.
Access: access all personal data we hold about you.
Correction: correct incomplete, inaccurate or outdated data.
Anonymization: request anonymization or blocking of excessive data.
Portability: request the portability of your data to another provider.
Deletion: request the deletion of data processed based on consent.
Information: know with whom your data has been shared.
Revocation: revoke consent at any time.

Security measures

We adopt technical and administrative measures to protect personal data:

Encryption in transit (TLS 1.3) and at rest (AES-256)
Role-based access control (RBAC)
Continuous monitoring and anomaly detection
Encrypted backups with geographic redundancy
Staff training on data protection
Periodic vulnerability testing

Security incidents

In the event of a security incident that may result in relevant risk or harm to data subjects, Z-API Omni will notify the Brazilian National Data Protection Authority (ANPD) and the affected data subjects within a reasonable time, in accordance with Art. 48 of the LGPD, describing the nature of the affected data, the related risks and the measures taken to reverse or mitigate the effects of the incident.

How to exercise your rights

To exercise any right provided for in the LGPD, send your request to our dedicated channel. We will respond within 15 business days, as provided for by law.

Data Protection Officer (DPO): Wagner Mendes Voltz
Email: [email protected]

When sending your request, please include your full name, the email registered on the platform and a description of the right you wish to exercise.