Epicora Ltda. values transparency and the protection of your personal data while you browse our website. This Privacy Notice is intended to explain, clearly and accessibly, how your data is collected, used, stored, and protected in compliance with Brazil's General Data Protection Law (LGPD — Law No. 13,709/2018).
By accessing our website, you acknowledge and agree to the terms of this Privacy Notice and to the practices described herein. We therefore recommend that you read this document carefully.
If you do not agree with this Notice, we recommend that you stop browsing our website.
This section aims to explain, clearly and with a focus on the communication of this notice, the concepts defined by the LGPD:
Any information that identifies or may identify a natural person. Examples include: name, tax ID (CPF), IP address, email, and location data.
Any action or operation carried out with personal data, such as collection, production, receipt, classification, use, access, reproduction, transmission, distribution, filing, storage, sharing, deletion, evaluation, modification, communication, transfer, dissemination, or extraction.
The natural person to whom the personal data refers.
The natural or legal person responsible for making decisions about how the processing operations involving the data subjects' personal data are carried out. Together with the processor, they make up what are known as the processing agents.
The natural or legal person that processes personal data on behalf of the controller, following its instructions. Together with the controller, they make up what are known as the processing agents.
The federal agency responsible for overseeing and regulating compliance with the LGPD in Brazil.
We are Epicora Ltda., registered under CNPJ No. 49.800.350/0001-21, headquartered at Rua Lauro Muller, 876, Santa Maria, Chapecó/SC, ZIP code 89.812-214. We act as the Controller of Personal Data and are responsible for the decisions related to the processing of data collected during the use of our website.
We adopt all necessary measures to comply with current privacy and data protection legislation, including the LGPD and Brazil's Internet Civil Framework (Law No. 12,965/2014). In the absence of a specific rule, we follow the best international practices applicable to the protection of personal data.
We collect your personal data primarily when you contact us and/or browse our website. This information is provided directly by you. See below how this happens in practice:
| How | Data Collected |
|---|---|
| When you fill out the Contact / Get in touch forms on the website | Name, email, and message (and any other data you choose to include in the message field) |
| When you use the WhatsApp button | Information you share during the initial contact with our team, such as: name, email, phone number, company |
The data provided through the website forms, such as Get in touch, is automatically forwarded to Epicora's corporate email, accessed exclusively by the founders.
In addition, should you choose to use the WhatsApp button available on the website, the information you share during the initial conversation, such as name, phone number, and other data, will be processed by Epicora solely for the purposes of assisting you and responding to your contact.
Once received, this information is analyzed manually so that the team can respond to your request and follow up on your service. This analysis is always carried out in observance of the principles of good faith, necessity, adequacy, and transparency, as provided for in the LGPD.
When necessary, some contacts may be entered manually into the internal CRM tool (RD Station), used exclusively for commercial organization and record-keeping of interactions. The Epicora website does not use automated marketing flows, message blasts, or automated nurturing sequences.
This process helps us provide more personalized and efficient service, while also ensuring the security and confidentiality of your information throughout the entire flow.
We collect and use your personal data for legitimate and specific purposes, always respecting the principles of good faith, necessity, and transparency. We use your data based on different legal grounds, such as:
See below how we use this information:
We use only analytics cookies, linked to Google Analytics, to understand basic browsing metrics, such as pages visited, time spent, and device type.
These cookies are installed automatically by Google's own service and do not require any registration on the website.
Please note that, at this time, Epicora does not use cookies for advertising, remarketing, or ad personalization purposes on its website.
Should this functionality be implemented in the future, the use of such cookies will be carried out with full transparency and will be preceded by an update to this Privacy Notice, as well as the inclusion of these categories in the cookie consent banner, so that you can freely choose your preferred settings.
We take your privacy seriously and do not sell, rent, or share your data with third parties unrelated to Epicora.
However, in certain specific situations, it is necessary to share your data to ensure the proper functioning of our services or to comply with legal obligations. Whenever this happens, we ensure that your data is protected and used exclusively for the purposes permitted by law.
See below the situations in which this may occur:
We share your data with companies and tools that provide services essential to Epicora, such as technology, infrastructure, data hosting, communication, and browsing analytics providers, which are necessary for the operation of the website and for handling the requests you send us.
This includes Vercel (the hosting and infrastructure provider used by Epicora), corporate email services, browsing analytics tools, and internal systems used for organizing contacts and processing incoming messages.
If requested by public authorities in the exercise of their legal duties — such as in investigations, judicial proceedings, or compliance with regulatory obligations — we may provide your data, limiting disclosure to only what is necessary.
Should Epicora take part in any corporate restructuring process (such as a merger, acquisition, spin-off, or incorporation), your data may be transferred to the new responsible entity, with the assurance that the terms of this Privacy Notice will continue to be respected.
In all cases, we prioritize your privacy and take measures to ensure that your data is used in a secure and transparent manner.
Our website may contain links that direct you to third-party pages, such as social media profiles, external platforms, and browsing partners, including Instagram, LinkedIn, and WhatsApp.
In addition, some pages of the website may include links directing you to the websites of clients or external partners; each of these links redirects to a distinct domain outside the Epicora environment.
These websites have their own privacy policies and terms of use, which may differ from the practices adopted by Epicora. We therefore recommend that you read these policies carefully before providing any personal information in those environments.
Epicora is not responsible for the content, services, privacy practices, or security of external websites and third-party platforms.
Epicora uses technologies and services that may be hosted outside Brazil, such as cloud providers and technical support platforms. In addition, some partners or suppliers that help us operate the website and systems may be located abroad.
This means that, when you interact with our website, your personal data may be transferred to other countries. Whenever this occurs, we ensure that the transfer is carried out securely, based on legal mechanisms recognized by Brazilian law, such as:
These third parties also follow the rules established in this Privacy Notice and are contractually obligated to protect your data with the same level of care we adopt here in Brazil.
Even if the server is located outside the country, your privacy remains here, protected with our full commitment.
Here at Epicora, we take the security of your information very seriously. That is why we adopt appropriate technical and administrative measures to protect your data against unauthorized access, leaks, improper alterations, or any form of inadequate or unlawful processing.
These measures are constantly updated and proportionate to the type of data processed and the risk involved, in compliance with Brazil's General Data Protection Law (LGPD).
However, since no system is 100% foolproof, it is important that you also take care with your data, such as keeping your passwords confidential and using trusted devices to access our services.
If you notice any suspicious activity or believe your data may be at risk, please contact us immediately at the email: [email protected]
We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, such as contacting you, providing support, offering our services, or responding to your requests.
We may also retain some basic data, such as your name, email, and phone number, as long as there is an active relationship between you and Epicora, or if it is necessary to comply with legal, regulatory, or contractual obligations, or to safeguard our rights in potential administrative, judicial, or arbitration proceedings.
Once these purposes have been fulfilled, your data will be securely deleted or anonymized so that it can no longer be linked to you.
We respect your right to privacy and will only retain your information for as long as it is truly necessary.
You have a range of rights guaranteed by Brazil's General Data Protection Law (LGPD), and we are here to ensure they are respected with transparency, promptness, and security.
Below, we explain in simple terms what these rights are and how you can exercise them:
You may ask us to confirm that we process your personal data and to access all the information we hold about you.
Should you find that any of your data is outdated, incomplete, or incorrect, you have the right to request that this information be updated or corrected.
If you have given us authorization to process your data based on consent, you may withdraw that permission at any time.
You may request the deletion of your personal data when it is no longer necessary or when it is processed based on your consent — except when retention is required by a legal obligation.
You may request that your data be transferred to another service or product provider, in accordance with the ANPD's regulations.
You may ask us for information about with whom we share your data and for what purpose.
Should you disagree with any processing carried out on one of the legal grounds (and not on consent), you may object, stating your reasons.
If any automated process has affected your rights, you may request a human review of that decision. Currently, Epicora does not make automated decisions that directly affect the rights of data subjects. Should this practice be implemented, you will be duly informed in this Notice.
Simply send a request to the email [email protected], informing:
For your security, we can only respond to requests made from the same email associated with your data. This helps us protect your identity!
Our deadline for responding to requests is up to 15 (fifteen) business days, in accordance with the LGPD.
Technology, services, and data protection standards are constantly evolving — and so is our commitment to transparency. For this reason, this Privacy Notice may be updated at any time, whenever necessary.
Whenever this happens, the new version will be published on this same page, with the date of the last modification indicated at the beginning of the document.
Should any change significantly affect the way we process your personal data, we may also notify you by email or highlight the change on our website.
We recommend that you review this notice periodically to stay informed about how we protect your data.
Last updated: January 2026