Last updated: 29 October 2026

Privacy Policy

Docelera is a document and process management platform operated by FOCAGIL CONSULTORIA E ASSESSORIA EMPRESARIAL LTDA, CNPJ (Brazilian company number) 65.101.836/0001-28 ("Docelera", "we"). This policy explains which personal data we process on the docelera.com website and on the platform (*.docelera.com addresses and customers' own domains), for what purposes, and what your rights are, under the Brazilian General Data Protection Law (Law 13,709/2018, LGPD).

1. Our role

For website data and the commercial relationship (contacts, proposals, contracts), Docelera is the controller.

For the data customer companies enter into the platform (documents, records, users), the customer company is the controller and Docelera acts as processor, processing that data only to provide the contracted service and according to the customer's instructions.

2. Data we process

• Website contact: name, e-mail, company and the content of the message you send us.
• Platform sign-in: when you sign in with Google or Microsoft, we receive your name, e-mail address and account identifier. We never receive your password.
• Platform use: records of who created, changed, approved or opened each document and file (audit trail), access date and time, and IP address.
• Customer content: documents and information entered by the customer company's users, which may contain personal data of third parties (for example, names on certificates or invoices).
• Technical data: server logs (IP address, browser, pages accessed), kept for security and troubleshooting.

3. Sign-in with Google and Microsoft

We only request basic identification permissions (name, e-mail and profile). We do not access your Gmail, Calendar or Contacts. Access to the company's Google Drive or Microsoft 365 only happens when the customer company itself sets up the platform to store files there, through a service account authorised by the company's administrator.

Docelera's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Purposes and legal bases

• Providing the contracted service: authenticating users, storing and routing documents, sending notifications (performance of a contract).
• Keeping the platform secure, preventing fraud and logging access (legitimate interest and legal obligations, including Brazil's Internet Civil Framework).
• Answering contacts and sending proposals (pre-contractual steps and legitimate interest).

We do not sell personal data and do not use it for advertising.

5. AI document reading

When a customer company uses automatic document reading, the document's content is sent to artificial intelligence providers (Anthropic and Google) only to extract the requested fields. We use these providers under commercial terms, which do not allow the submitted data to be used to train models.

6. Where data is kept

Files stay in the customer company's Google Drive or Microsoft 365. Control data (records, fields, history) is kept on servers contracted by Docelera, in a database dedicated to each customer. Some providers may process data outside Brazil; such transfers follow the LGPD.

7. Who we share data with

Only with providers needed to run the service, who process data on our behalf: server hosting, Google and Microsoft (sign-in and the storage chosen by the customer), AI providers and e-mail delivery. We may also share data when required by law or court order.

8. How long we keep data

• Platform data: while the contract is active. When it ends, the customer company can export its data; the customer's database is then deleted within 90 days, and backups expire within 14 days.
• Access logs: at least 6 months, as required by Brazil's Internet Civil Framework.
• Commercial contacts: while the relationship lasts or until you ask us to delete them.

9. Security

Always-encrypted connections (HTTPS), a database and application server isolated per customer, sign-in with the company account and permissions per library and group, an audit trail of every change, and daily backups.

10. Your rights

You may request confirmation of processing, access, correction, anonymisation, portability, deletion, information about sharing and review of consent, under article 18 of the LGPD. Write to contato@docelera.com.

If your data was entered into the platform by a customer company, please address the request to that company, which is the controller; we will help it respond. You may also complain to Brazil's National Data Protection Authority (ANPD).

11. Cookies

The website uses no tracking or advertising cookies. The platform only uses essential cookies to keep you signed in.

12. Changes and contact

We may update this policy; the date at the top shows the version in force. Privacy questions: contato@docelera.com.