Privacy Policy

1. Who We Are

Luluh Workshop (CNPJ: 37.504.723/0001-38), headquartered in Barra do Garças, Mato Grosso, Brazil, is the data controller for personal data collected through the app and website luluhworkshop.com.

For privacy questions or requests, contact us at: contact@luluhworkshop.com.

2. Data We Collect

We only collect information strictly necessary for the service to function:

• Account Data: Manager's name, access email, and garage name.
• Voice Recordings: Audio sent for AI diagnostics is processed under end-to-end encryption (TLS 1.3) and is not retained after processing.
• Camera Images: Photos captured during check-in and visual diagnostics are linked to the vehicle record and stored encrypted.
• Usage Data: Access logs (date, time, device type) used solely for security and service improvement.

3. How We Use Your Data

Your information is used exclusively to:

• Operate the AI assistant for your garage;
• Generate diagnostics, quotes, check-up reports, and digital vehicle records;
• Authenticate access to the dashboard and app;
• Send technical support communications requested by you.

We do not use your data for third-party advertising, sell it, or share it with commercial partners.

4. Data Sharing

Your data may be shared only with:

• Cloud infrastructure providers (e.g., hosting servers), under confidentiality agreements;
• Payment processors (e.g., Stripe) for secure financial transactions;
• Public authorities when required by law or court order.

5. Data Retention & Deletion

We retain your data while your account is active. After cancellation, data is deleted or anonymized within 90 days, unless legal retention is required. To request immediate deletion, email contact@luluhworkshop.com.

6. Your Rights

You have the right to:

• Access your personal data;
• Correct inaccurate or outdated information;
• Request deletion of your data;
• Request data portability;
• Withdraw consent at any time.

To exercise these rights, contact: contact@luluhworkshop.com.

7. Security

We use in-transit encryption (TLS 1.3) and at-rest encryption (AES-256) to protect all stored data. We conduct periodic security audits and follow industry best practices for information security.

8. Cookies

Our website uses strictly necessary cookies for functionality and anonymous analytics cookies for service improvement. We do not use third-party behavioral advertising cookies within the application.

9. Changes to This Policy

This policy may be updated periodically. Any significant changes will be communicated to active users by email at least 15 days in advance.