CX RPMResult & Performance Management
Back to site
Privacy and data protection

Privacy Policy

Version 1.0 · Effective October 14, 2026

This policy explains how ConneXar, the company responsible for CX RPM, processes personal data on the website and platform in accordance with Brazil's General Data Protection Law — LGPD.

1. Scope and roles

This policy applies to rpm.connexar.com.br, public forms and the CX RPM platform. ConneXar acts as controller for visitor, sales-contact and account-administrator data. For data entered by customers, ConneXar generally acts as processor under the customer's instructions and permissions.

Notice and acceptance. By accessing the website, you acknowledge this policy. By submitting a form, creating an account or using the platform, you confirm that you have read the applicable documents and, when requested, provide express acceptance. Acceptance does not waive rights under the LGPD or consumer law.

2. Data we may process

  • Registration and contact: name, role, company, work email, phone, country and protected credentials.
  • Account and organization: users, teams, roles, permissions, tenant and administration records.
  • Usage and security: IP, device, browser, timestamps, logs, audit events and fraud-prevention information.
  • Customer content: KPIs, targets, plans, meetings, files and other data entered by authorized users.
  • Support and AI: messages, requests, prompts and feedback sent to support or AI features.
  • Subscription and billing: plan, user count, subscription status and transaction references. Full card data is processed by the payment provider, not CX RPM.

Please do not submit sensitive personal data, secrets or third-party data unless necessary, authorized and supported by a valid legal basis.

3. Purposes and legal bases

We process data to respond to requests and demos; create and administer accounts; provide, protect and improve the service; authenticate users; process subscriptions; provide support; comply with legal duties; prevent fraud; maintain audit trails; and send service communications.

Depending on the context, the legal bases are pre-contractual procedures and contract performance, legal or regulatory obligations, exercise of legal rights, legitimate interests subject to necessity and impact assessment, and consent for optional purposes. Consent may be withdrawn at any time without affecting prior lawful processing.

Artificial intelligence

AI features may process authorized context to produce analyses, predictions and recommendations. Outputs may be inaccurate and require human review before important decisions. We do not use customer content to train general models outside contracted terms or valid authorization.

Cookies

The website may use strictly necessary technologies for security, language and operation. If optional analytics or advertising technologies are introduced, a choice mechanism will be provided before activation when required.

4. Sharing and international transfers

Data may be shared, only as necessary, with hosting, infrastructure, authentication, communication, support, AI and payment providers — including Stripe for billing — and with authorities when legally required. We require confidentiality, security and data-protection commitments. Where providers process data outside Brazil, we adopt LGPD-compatible safeguards.

5. Your rights

Under the LGPD, you may request confirmation and access; correction; anonymization, blocking or deletion of unnecessary or unlawful data; portability where applicable; sharing information; review of automated decisions; objection; and withdrawal of consent. We may verify your identity and authority. For customer-controlled data, we will forward or support the request of the responsible controller.

6. Security, retention and incidents

We apply technical and administrative controls proportionate to risk, including tenant segregation, permissions, audit trails and credential protection. No environment is risk-free; relevant events are investigated and legally required notices are issued.

Data is retained only as needed for the stated purposes, service delivery, legal claims and legal duties, then securely deleted or anonymized, subject to lawful retention. The platform is intended for business use by persons with legal capacity and is not intentionally directed to children.

7. Contact and updates

Privacy and data-rights requests may be sent to suporte@connexar.com.br. Provide only the information needed to identify the account and handle the request securely.

We may update this policy for legal, technical or operational changes. Material changes will be highlighted on the website or platform with the new effective date. See also our Terms of Use.