Privacy Policy

1. Who we are

This Privacy Policy describes how Rollin Serviços Digitais e Tecnologia LTDA (CNPJ 64.204.851/0001-39), referred to here as "Agência Rollin", processes personal data on the website www.agenciarollin.com and in the services it provides, in compliance with Brazil's General Data Protection Law (Law No. 13,709/2018 — LGPD) and other applicable regulations.

2. Data we collect

We collect data in the following situations:

• Forms and contact: name, email, phone/WhatsApp, company and message, when you send us a request.
• Browsing: data collected automatically through cookies and similar technologies (pages visited, device, IP), for security and to improve the experience.
• Provision of contracted services: when we operate solutions on behalf of clients (websites, CRM and customer service agents), we may process data on end contacts, such as phone number, name, message content and metadata, and scheduling data — always on behalf of and under the instructions of the contracting client.

3. WhatsApp Business Platform (Meta)

Agência Rollin uses the WhatsApp Business Platform (Cloud API), from Meta Platforms, to provide customer service, automation and messaging services on its own behalf and on behalf of its clients, acting as a technology provider. In this context:

• Phone numbers, messages and metadata are processed through Meta's infrastructure, in accordance with the WhatsApp Business Terms and the Meta Privacy Policy;
• When we operate on behalf of a client, the client is the controller of its contacts' data and Agência Rollin acts as the processor, processing the data exclusively according to the contracted instructions;
• Sending outbound messages requires the recipient's prior consent (opt-in), obtained by the client in accordance with Meta's policies and the LGPD;
• End users can stop receiving messages at any time by replying with an opt-out request (e.g., "SAIR", meaning stop) or by blocking the number.

4. Purposes and legal bases (LGPD)

• Performance of a contract (Art. 7, V): providing the contracted services, customer service and scheduling;
• Consent (Art. 7, I): sending marketing communications and newsletters;
• Legitimate interest (Art. 7, IX): improving services, security and fraud prevention;
• Compliance with a legal obligation (Art. 7, II): keeping records required by law.

5. Data sharing

We do not sell personal data. We share data only with:

• Meta Platforms (WhatsApp Business Platform), to deliver messages;
• Infrastructure and hosting providers (including Rollin Host, part of the same economic group), under contract and a duty of confidentiality;
• Service providers essential to our operations (e.g., payment processing and analytics tools), limited to the contracted purpose;
• Authorities, when required by law or court order.

International transfers (e.g., Meta's servers) follow the safeguards set out in the LGPD.

6. Retention and deletion

We keep data for as long as necessary for the purposes of this policy or as required by law. You can request deletion of your data at any time — the procedure is described in Data Deletion.

7. Security

We adopt appropriate technical and organizational measures: encryption in transit (TLS), role-based access control, activity logging, backups and continuous infrastructure monitoring, with 24/7 support.

8. Cookies

We use cookies that are strictly necessary for the website to work and analytics cookies to understand how pages are used. You can manage them in your browser settings.

9. Your rights

Under Article 18 of the LGPD, you may request: confirmation of processing, access, correction, anonymization, portability, deletion, information about data sharing and withdrawal of consent. To exercise any of these rights, use the channels in section 10 — we respond within the legal deadlines.

10. Data Protection Officer (DPO) and contact

Data Protection Officer: Lais Lopes.
Email: contato@agenciarollin.com
Official WhatsApp: +55 (19) 98339-9219

11. Changes to this policy

This policy may be updated to reflect legal or operational changes. The current version will always be available on this page, with the update date at the top.