Legal
Privacy
What data we store, why, for how long and how you control it, under Brazil’s General Data Protection Law (LGPD, Law 13.709/2018).
Updated 24 Oct 2026 · in force from 24 Oct 2026
In plain words
- A shop decides what to do with its clients’ data. navalhOS stores and processes that data on the shop’s behalf.
- We do not store card data and we do not sell data.
- Clients’ money goes straight to the shop’s own Mercado Pago account. navalhOS never touches it.
- What you write to the assistant is sent to a language-model provider so it can answer.
- You can ask for access, correction or deletion of your data whenever you like.
The text below is what counts.
Who we are
Company name: Gabriel Hamdan Ferreira Tecnologia
CNPJ (Brazilian tax ID): 23.858.108/0001-15
Who decides about the data
For staff accounts (owner, admin, barber), navalhOS is the controller: it decides how that data is used to keep the account and provide the service.
For a shop’s clients’ data (name, contact, bookings, conversations, payment status), the shop is the controller and navalhOS is the processor: it stores and processes that data on the shop’s behalf, only to provide the service.
If you are a shop’s client, talk to the shop first about your data. If you prefer, write to us and we forward the request.
What we store
From staff: name, e-mail, password (kept only as a cryptographic hash, never as text), language, the photo when it comes from Google sign-in, the role in each shop and open sessions.
From the shop: name, address, hours, chairs, services, prices, photos the shop uploads, split rules and statements.
From each shop’s clients: name, e-mail and phone number, the Google account when the client signs in with it, booking history, use of subscription plans, notice permissions and the browser notification subscription when the client turns it on.
From conversations: the text exchanged with the shop’s assistant and with the owner’s assistant, and a technical record of each generated answer (action, model, size and cost, without the text).
From payments: the amount, status and charge identifier. Card data stays with Mercado Pago and Stripe, never with us.
From the contact form: name, e-mail, topic and message. We keep the IP address only as a cryptographic digest, used to limit abuse, from which the address cannot be read.
From technical use: counters of sign-in attempts and error records without personal data.
What we use it for
To provide the contracted service: booking, reminders, charging, computing the split and issuing the statement.
For security: limiting sign-in attempts and investigating abuse.
To answer people who write through the contact form.
To measure use of the app, only after the visitor accepts. Without acceptance, no third-party analytics tool is loaded. The marketing site loads no analytics tool.
Who processes data for us
We share the minimum needed with the providers that run the service:
- Upuai
- Hosting of the app, the database and the job queue.
- S3-compatible storage
- Photos and files the shop uploads, and data exports.
- Stripe
- The shop’s subscription to navalhOS. Stripe receives the e-mail and billing details of whoever subscribes.
- Mercado Pago
- The shop’s charges to its own clients, in the account the shop connects. Pix and card happen there.
- OpenRouter and the model providers
- The text of conversations with the assistants and the shop data needed to answer. OpenRouter forwards the request to the provider of the chosen model.
- Google sign-in, for people who choose that door, and Google Calendar, only if the person connects it.
- E-mail sending provider
- Sign-in codes, booking notices and service messages.
- WhatsApp Business (Meta)
- The channel’s messages, only in shops that connect it.
- Browser notification service
- Delivery of notices, only for people who turn notifications on.
- Sentry
- Error tracking, configured not to send user details, cookies, request bodies or job arguments.
- PostHog and Google Tag Manager
- Measurement of app use, only after the visitor accepts and only when they are configured.
- ViaCEP
- When an address is filled in from a postal code, only the postal code is sent.
We do not sell data and we do not use it for advertising.
Providers outside Brazil
Some of these providers, such as Stripe, OpenRouter, Google and Sentry, may process data outside Brazil. This happens only for the purpose described above.
For how long
We keep most data while the account exists: profile, schedule, clients, conversations, payments and statements. The history of bookings, payments and statements is a record and is not deleted automatically.
Staff stay signed in for up to 14 days without use and 90 days at most. A client stays signed in for up to 30 days without use and 180 days at most. Expired sessions are deleted after 7 days.
Sign-in codes and access links are deleted 1 day after they expire. Events received from messaging channels are deleted after 30 days. Attempt counters are deleted after 2 days.
Messages from the contact form are deleted 90 days after they arrive.
To ask for an account or personal data to be deleted, write to us. We handle the request within the time the law allows, except for what we must keep by legal obligation.
Cookies and browser storage
We use only what the service needs to work. No advertising cookies.
__Host-barberos_staff- Keeps staff signed in. Lasts up to 90 days, or 14 days without use.
__Host-barberos_customer- Keeps the client signed in at the shop. Lasts up to 180 days, or 30 days without use.
__Host-barberos_visitor- Recognises, without sign-up, someone chatting with the shop’s assistant. Lasts 30 days.
barberos_google_state- Protects the return from staff Google sign-in. Lasts 10 minutes.
barberos_portal_google_state- Protects the return from client Google sign-in. Lasts 10 minutes.
contact_receipt- Keeps the contact form’s name and e-mail for 10 minutes, to show the delivery confirmation.
barberos_locale- Remembers the language you chose with the PT or EN link. Lasts 1 year.
In the browser’s local storage we keep the chosen theme (light, dark or system), your answer about usage measurement and app preferences such as the last shop opened. This data stays on your device, and you delete it by clearing the site’s data.
Your rights
You can ask for confirmation that we process your data, access, correction, anonymisation, portability, deletion, information about who we share it with and withdrawal of consent (LGPD art. 18).
A shop can export its data whenever it wants, on any plan.
You can also complain to Brazil’s National Data Protection Authority (ANPD).
Security
Encrypted connections, session cookies protected and unreadable by JavaScript, passwords and codes kept only as cryptographic digests, attempt limits, access by role inside each shop and isolation between shops.
If an incident affects personal data, we tell the affected shop and the ANPD within the time the law sets.
Changes
If this text changes in a relevant way, we e-mail shop staff before the change takes effect. The date at the top of the page shows the latest revision.
Requests about your data (LGPD): write to contato@navalhos.app.